Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/1BCQS42AU0GGH4PRx7vWlNY6UnM.roa
File: 1BCQS42AU0GGH4PRx7vWlNY6UnM.roa (raw, json)
Hash identifier: UsPM1kz8JudOE7Cn+hyYQwficWvW1KbcDmuvAJ6iOSc=
Subject key identifier: D4:10:90:4B:8D:80:53:41:86:1F:83:D1:C7:BB:D6:94:D6:3A:52:73
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 0194438A84D9A4052D54C1A2956D7F91D17E
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/1BCQS42AU0GGH4PRx7vWlNY6UnM.roa
Signing time: Wed 08 Jan 2025 01:32:18 +0000
ROA not before: Wed 08 Jan 2025 01:32:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 185.133.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:43:8a:84:d9:a4:05:2d:54:c1:a2:95:6d:7f:91:d1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Jan 8 01:32:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d410904b8d805341861f83d1c7bbd694d63a5273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:7d:17:db:d9:db:9a:44:38:99:18:93:ca:
d1:37:0c:2d:e1:a3:7c:28:6a:29:2a:06:50:fd:b9:
48:44:f9:7f:37:aa:f3:47:99:7d:14:5b:a7:0d:f9:
f6:40:48:80:1a:10:5e:60:02:83:c6:19:c2:2a:f9:
de:05:da:6d:62:4a:23:82:38:93:aa:5a:f3:31:74:
a4:9b:5a:91:c1:0f:55:86:b2:4e:f7:fd:a4:ea:a8:
71:cc:b3:79:ac:3f:79:45:c6:38:85:2d:f4:7e:cd:
31:ce:32:6e:70:f9:6d:90:4c:50:7f:cd:60:9b:e9:
38:ab:0d:cb:a8:78:17:9f:d5:d7:39:e5:a4:37:ee:
ed:d6:7c:24:e8:bc:af:d3:bc:bd:76:98:fb:b3:c7:
ae:d2:54:bd:e1:7a:65:cd:6f:dd:27:77:1d:e0:99:
00:26:67:5c:ab:8f:31:2d:cb:d7:66:5a:b8:f2:31:
a2:83:e3:73:36:1e:ec:d7:49:2c:f9:c7:30:8e:9f:
eb:00:68:a8:df:24:9e:c7:07:0c:ce:ce:fb:c5:66:
bf:56:80:d0:f2:6d:29:e3:af:d1:54:d8:0d:de:fc:
e2:18:b7:9b:19:60:86:63:cb:c0:c6:07:15:f8:bc:
2d:30:39:36:d1:b4:a2:00:78:c1:f1:77:e0:9b:86:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:90:4B:8D:80:53:41:86:1F:83:D1:C7:BB:D6:94:D6:3A:52:73
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/1BCQS42AU0GGH4PRx7vWlNY6UnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.243.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1e:9d:56:90:8e:43:ed:37:4f:9a:2d:9f:79:51:e9:6a:53:
61:00:d2:40:d8:3b:27:34:81:9d:eb:12:65:63:0c:0d:0e:5a:
3e:5a:ed:c3:5d:be:ca:85:61:2e:68:a6:c5:91:95:52:d7:78:
1f:17:14:55:d2:12:d9:d9:24:f2:3a:21:ca:e7:18:c3:68:3f:
44:59:6b:c1:45:c8:87:46:a4:fb:b7:d2:65:d3:41:64:0f:60:
c1:74:42:4a:ec:2f:00:13:63:e9:02:b6:d9:31:68:1f:de:7d:
9f:f7:fe:45:f5:79:a6:d9:c7:3a:5c:e2:a8:88:fc:c3:d9:ea:
6c:c8:a4:57:4f:66:07:a7:c5:1e:33:4d:56:91:66:2c:14:60:
a4:19:ce:15:ee:ea:17:d6:93:58:28:4e:7d:03:74:14:a1:a6:
3a:69:ee:ba:ff:6d:49:f5:48:df:50:28:ee:f0:4d:da:e7:56:
26:9c:2a:f8:c4:69:51:cb:01:ff:ca:05:86:b8:1e:7a:43:21:
41:5b:10:de:f5:fd:46:48:a7:e3:80:df:ee:10:6f:ff:fd:5b:
13:88:48:64:8f:bb:a6:61:88:90:72:24:2d:ae:8e:9a:01:31:
4b:cc:6a:cd:36:c9:4f:5e:4c:66:6d:6d:9c:f8:74:63:28:d4:
68:67:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:58 2025 by rpki-client