Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/pBQcYACEJFgZkwBTNup11LKnTk8.roa
File: pBQcYACEJFgZkwBTNup11LKnTk8.roa (raw, json)
Hash identifier: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=
Subject key identifier: A4:14:1C:60:00:84:24:58:19:93:00:53:36:EA:75:D4:B2:A7:4E:4F
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019426D97C2E10D2E117FC820E231034FA2C
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/pBQcYACEJFgZkwBTNup11LKnTk8.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204257
IP address blocks: 141.226.184.0/21 maxlen: 21
141.226.184.0/23 maxlen: 23
141.226.184.0/24 maxlen: 24
141.226.185.0/24 maxlen: 24
141.226.186.0/23 maxlen: 23
141.226.186.0/24 maxlen: 24
141.226.187.0/24 maxlen: 24
141.226.188.0/24 maxlen: 24
141.226.189.0/24 maxlen: 24
141.226.190.0/24 maxlen: 24
141.226.191.0/24 maxlen: 24
185.109.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7c:2e:10:d2:e1:17:fc:82:0e:23:10:34:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4141c60008424581993005336ea75d4b2a74e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:40:d6:fd:9b:85:2a:f0:5e:b8:8a:88:e5:
5a:9c:ae:9a:34:82:7d:2f:51:92:c5:31:cf:20:e7:
dc:4b:55:2e:8b:c7:9a:a3:00:6d:04:74:54:d8:5b:
43:4b:0c:7b:80:c8:9f:5d:27:a3:f0:92:73:2e:82:
70:05:ca:f1:7f:20:21:1a:60:a6:80:a6:20:26:f7:
9f:6e:b7:0d:5e:18:69:8a:d6:22:99:ef:43:ab:bb:
ce:7d:4b:7a:b5:38:dd:2c:66:90:80:0e:27:3f:08:
64:7f:bc:55:a0:70:a8:a5:89:ec:a2:b0:1d:3c:85:
08:37:6a:e4:a4:48:11:96:45:07:aa:86:f7:9e:31:
e2:63:cf:59:cc:06:7d:93:0e:94:6a:11:9c:93:c6:
1a:4b:26:2d:12:c2:16:70:cb:c4:c9:dc:43:c1:6a:
db:f9:4b:7e:76:eb:b5:fc:1b:a9:c6:b2:f4:43:d7:
c3:be:b1:14:ab:d7:54:02:f4:01:80:34:8f:6d:cd:
9c:fe:8d:57:93:4a:ad:64:8b:6e:60:61:b7:14:5e:
ab:e2:5a:9c:89:42:95:09:57:c7:3b:3f:d6:a2:60:
6b:88:54:36:b0:df:6f:16:3e:40:b2:4f:1e:52:8e:
dc:f9:12:8c:99:e2:7c:2f:10:a0:50:16:72:52:1f:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:14:1C:60:00:84:24:58:19:93:00:53:36:EA:75:D4:B2:A7:4E:4F
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/pBQcYACEJFgZkwBTNup11LKnTk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.184.0/21
185.109.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:eb:fb:a1:59:a5:e5:54:57:bb:41:23:2e:cd:d9:7a:b4:41:
c8:2d:eb:b0:22:68:f7:1e:55:57:b9:c6:b7:66:ee:86:05:9a:
fa:8d:13:84:7e:70:f7:0f:4a:22:23:d4:c6:13:76:77:59:38:
ed:db:27:0e:5c:03:39:0d:19:2c:42:b4:e5:f5:1f:5a:0f:ad:
13:29:56:ff:a0:1a:17:4d:8a:e7:9a:31:e1:11:4a:6d:60:f7:
7a:e3:19:e8:0e:74:f1:37:91:3a:50:c5:df:9e:29:45:03:fd:
bf:7f:89:22:02:b3:c6:ac:d9:a1:54:6e:28:62:f1:19:03:4d:
73:8f:98:22:df:7f:99:53:76:4f:bd:53:ef:39:53:46:f7:47:
eb:1d:ff:0a:27:1f:ae:78:cf:8e:99:b5:31:0e:37:5c:9f:e4:
df:1f:56:af:35:a6:b2:b7:6f:37:c4:d5:82:02:3f:1a:f3:bf:
15:98:d7:95:17:a3:72:64:29:21:2d:a1:e4:24:f2:98:92:b3:
e7:59:63:2e:71:5d:08:12:b1:75:07:44:7b:b0:34:32:ed:98:
e0:c2:5b:8f:05:9d:63:f0:ac:08:4c:ca:d9:5e:16:d6:68:29:
b6:ae:78:9d:66:be:a5:85:6d:c5:d1:ef:93:79:5e:29:d8:86:
56:4d:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:12 2025 by rpki-client