Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/1prz6nfwB7MR42V9eL5e4pTM0a0.roa
File: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (raw, json)
Hash identifier: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=
Subject key identifier: D6:9A:F3:EA:77:F0:07:B3:11:E3:65:7D:78:BE:5E:E2:94:CC:D1:AD
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019427482DD9D8834A223E0388AD611183ED
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/1prz6nfwB7MR42V9eL5e4pTM0a0.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12798
IP address blocks: 185.82.48.0/24 maxlen: 24
185.82.50.0/24 maxlen: 24
185.82.51.0/24 maxlen: 24
212.22.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2d:d9:d8:83:4a:22:3e:03:88:ad:61:11:83:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d69af3ea77f007b311e3657d78be5ee294ccd1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:a2:3d:6e:7a:9c:0d:6a:95:ca:22:b0:bb:
49:07:9b:d7:24:a4:38:fe:5f:4a:ea:82:44:ef:b7:
15:93:63:04:b7:21:ee:65:bc:ab:44:76:e6:eb:5d:
91:95:4d:19:01:34:0b:eb:79:c1:84:ea:1e:79:a4:
85:71:2e:d1:71:52:a9:88:ec:df:74:6d:52:0e:67:
0e:8a:b4:fc:c9:83:89:56:e8:09:1e:57:16:9f:0c:
e0:4b:0e:b0:49:07:f6:5b:e4:68:4b:e4:82:a8:64:
77:6c:d3:7e:f5:20:53:c9:65:ea:cc:e4:9f:91:a1:
19:95:b4:77:62:ab:c4:a2:21:55:9a:a5:d7:45:9f:
4b:c5:3f:69:c2:86:8d:6b:0a:03:8e:86:4d:69:49:
c5:95:cc:65:16:3a:b6:21:73:5a:a5:ea:ed:16:e5:
92:7a:aa:7b:51:2c:05:1d:a2:ac:5f:a0:73:09:3a:
a0:1b:fd:e3:b7:18:14:d7:48:3a:60:4c:64:68:a2:
4b:90:58:95:1c:39:f9:64:b4:d7:e9:93:6c:ee:f1:
09:26:90:da:64:67:69:78:11:b2:15:da:ce:bf:58:
1a:67:10:e1:da:2e:a7:b6:39:f8:c1:f8:fe:2d:e5:
41:f8:8d:51:7d:68:41:c3:28:ab:b2:22:48:a1:76:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:F3:EA:77:F0:07:B3:11:E3:65:7D:78:BE:5E:E2:94:CC:D1:AD
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/1prz6nfwB7MR42V9eL5e4pTM0a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.48.0/24
185.82.50.0/23
212.22.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:5d:8a:ae:1e:49:88:5d:a2:ec:3f:a5:68:6d:91:97:ef:f6:
0a:90:0c:5a:bf:be:a3:8d:a0:04:f8:60:75:43:4e:1d:9b:39:
b8:b4:95:d4:fe:47:7f:78:74:03:fa:af:94:62:b7:91:80:03:
39:5e:74:f5:1a:eb:f4:25:92:7a:a7:f1:ef:6f:3f:f1:6a:f6:
d8:62:ea:03:2e:b4:8d:4e:ae:34:62:04:4e:05:45:0e:6e:fa:
0b:3c:70:a0:f9:38:8d:26:e2:03:5a:40:6f:01:94:30:d1:84:
50:f5:97:e2:89:bd:7f:d6:e2:d2:c5:9f:23:8a:8c:26:e5:07:
2c:e0:2e:49:1f:91:2b:75:54:60:f5:d6:f1:d7:9f:ad:3e:10:
9e:7a:86:d3:c8:39:be:eb:52:46:c2:85:d2:7c:1c:fc:ce:c9:
4c:52:21:cb:57:ce:54:7d:8b:f7:c8:de:96:aa:ce:bc:5a:b8:
68:c6:82:fe:fe:79:99:b6:3d:64:e1:9b:47:bb:47:b3:c2:c2:
0e:bb:5e:66:62:37:55:88:80:8c:1f:c7:d4:93:81:aa:65:b6:
fb:84:a6:a9:40:44:99:d0:28:74:bd:79:38:d6:9c:13:71:ff:
73:86:c7:43:83:f6:0b:cd:1f:e3:12:99:d0:13:48:bb:5a:b9:
55:1f:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:48 2025 by rpki-client