Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa
File: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (raw, json)
Hash identifier: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=
Subject key identifier: F8:B6:E0:DD:38:49:91:24:39:50:40:75:08:2D:89:E9:22:58:AB:B2
Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial: 0194266A3EC0BB4A967CC176B1CB7B0DD757
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa
Signing time: Thu 02 Jan 2025 09:48:04 +0000
ROA not before: Thu 02 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60729
IP address blocks: 185.220.101.0/24 maxlen: 24
185.220.102.0/24 maxlen: 24
2a0b:f4c1:2::/48 maxlen: 48
2a0b:f4c2::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:3e:c0:bb:4a:96:7c:c1:76:b1:cb:7b:0d:d7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Validity
Not Before: Jan 2 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b6e0dd3849912439504075082d89e92258abb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:9c:ce:7a:a3:b7:1b:00:d9:6d:ad:b7:05:
44:de:d8:00:ee:fe:7b:e2:42:5e:a8:6e:47:ac:40:
3f:00:de:de:1b:f3:5a:70:1f:74:6d:e1:72:6f:a1:
1a:f1:38:22:1d:43:a8:e2:ea:d1:7a:ad:d7:51:f6:
b5:a0:bb:60:59:bc:70:e8:c5:2e:2f:9b:e9:7a:9f:
6e:f3:b5:7d:d9:3b:73:e3:43:31:8a:3b:95:a1:04:
b7:d4:53:0c:10:bd:a2:10:66:09:f0:66:50:00:54:
3d:4f:ff:d5:69:da:05:de:35:33:32:ef:02:dc:0a:
3b:4c:84:ae:6d:cd:3e:61:24:cf:ae:48:0c:21:93:
42:7a:39:3c:33:f4:f2:ba:d4:03:50:31:77:8a:c5:
4c:73:ea:1d:6a:bb:b7:63:b0:77:b7:d1:96:06:88:
c7:de:14:5c:e6:2d:54:2d:b7:01:c2:b5:59:f9:c9:
3a:29:92:57:d2:8b:e9:9c:9b:d7:8a:82:22:fc:30:
37:b7:1e:66:31:38:07:b1:5a:fc:10:cb:6b:de:b9:
5e:0e:dc:6f:d9:ef:60:55:9f:37:a6:c7:4a:e8:2e:
4d:b3:1e:0e:0b:8e:89:47:bc:eb:cf:de:a7:73:5c:
ca:6d:33:6d:6f:61:41:6d:52:6f:1e:f5:17:a3:7d:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:E0:DD:38:49:91:24:39:50:40:75:08:2D:89:E9:22:58:AB:B2
X509v3 Authority Key Identifier:
keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.101.0-185.220.102.255
IPv6:
2a0b:f4c1:2::/48
2a0b:f4c2::/40
Signature Algorithm: sha256WithRSAEncryption
67:33:c3:5c:2f:59:46:3a:d7:bc:87:f7:8a:93:8a:3c:ec:32:
26:6b:cd:f3:fb:e7:b4:1e:2b:56:7a:fc:24:e9:23:39:9c:15:
1b:67:05:e9:84:89:88:ef:41:b5:85:3c:2c:46:b4:76:ab:f9:
a7:2f:e1:92:58:ac:3e:65:47:50:aa:44:58:8c:a2:a8:83:9e:
e7:45:73:b4:4a:ff:fa:6d:38:c4:f4:d0:a1:d6:39:d8:f4:02:
42:38:be:3e:74:9d:9a:55:19:9a:0c:59:fe:59:bf:14:d2:1f:
09:2e:d5:d9:8d:0f:e1:5b:8d:d8:c0:5d:30:5c:29:d7:b5:91:
29:eb:9a:f8:8d:7e:7c:d9:a5:f4:cd:4e:63:d8:08:82:37:a3:
04:69:b0:42:74:a7:cf:d1:aa:35:21:b0:d2:02:17:76:d7:43:
ea:04:ac:94:6a:1e:5e:9e:8c:b1:e7:10:57:50:61:56:f9:0e:
4c:03:f1:85:c1:5d:a8:3d:f1:82:60:ab:b2:60:13:4c:a7:29:
03:20:2e:a1:a4:ca:d6:ca:f5:ed:9e:d7:ca:c4:d3:5d:04:92:
4d:66:64:04:ab:78:eb:a8:10:8f:d4:bf:f4:fe:8c:a6:e0:53:
20:e4:ae:e3:96:0b:28:68:84:4d:a0:12:db:4a:62:47:ca:18:
dd:2b:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:17 2025 by rpki-client