Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/DNhIHCVoBglUmAVlCkJ5G-L36yg.roa
File: DNhIHCVoBglUmAVlCkJ5G-L36yg.roa (raw, json)
Hash identifier: 31245JAwO/UkCcpQa4UanpWYM+ItoRpnBX/McoOb5tQ=
Subject key identifier: 0C:D8:48:1C:25:68:06:09:54:98:05:65:0A:42:79:1B:E2:F7:EB:28
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 01942748024EE2760EF18286AFCE0D970602
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/DNhIHCVoBglUmAVlCkJ5G-L36yg.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62216
IP address blocks: 95.174.80.0/21 maxlen: 21
185.144.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:02:4e:e2:76:0e:f1:82:86:af:ce:0d:97:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cd8481c25680609549805650a42791be2f7eb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:44:6e:68:11:04:64:3e:0b:14:f4:12:4e:
be:9e:79:93:66:85:8e:83:d5:61:18:ed:c6:44:56:
24:2f:2e:80:70:01:69:ac:6d:f8:a6:b9:ef:dc:79:
e2:1f:c3:1c:52:15:3d:a8:26:05:09:5b:26:d7:ef:
ad:b1:f1:52:0d:73:a2:05:c8:73:06:2a:7d:09:ac:
ff:9a:67:ff:7b:e5:ec:cc:f3:05:8c:0e:27:00:ca:
db:f4:09:58:94:7b:7c:4d:64:aa:a5:b6:34:8b:36:
de:cb:17:25:ab:00:5a:3e:7f:7d:71:02:33:d6:48:
19:5a:1a:6d:b1:1d:0d:47:93:a1:1e:e9:a0:fe:96:
0f:f6:a7:b8:36:c1:02:c6:93:44:2d:ae:bd:b1:d8:
86:dd:42:b8:a5:6d:f8:c9:a9:97:08:af:96:9c:81:
b1:9e:5b:2e:ab:b4:bd:ef:9c:c1:3e:8e:cd:15:02:
86:d3:06:34:48:f4:eb:e7:19:04:c5:98:6c:49:dc:
77:27:4e:f0:01:26:06:77:c0:ce:e5:34:a6:23:36:
d4:89:46:b5:fe:a5:73:19:81:51:9d:90:ae:64:8e:
f7:35:f7:47:3d:45:89:fb:ff:a4:c6:53:42:28:74:
4a:46:35:48:81:d6:50:34:44:2a:08:ad:b7:b7:f0:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:48:1C:25:68:06:09:54:98:05:65:0A:42:79:1B:E2:F7:EB:28
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/DNhIHCVoBglUmAVlCkJ5G-L36yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.80.0/21
185.144.16.0/22
Signature Algorithm: sha256WithRSAEncryption
65:57:5b:83:2a:21:e9:96:4e:6d:01:b3:84:4b:da:a3:79:9d:
ec:e8:c8:86:95:6a:cd:49:c2:28:13:eb:94:20:5d:b3:b3:ac:
36:08:93:1c:dc:b4:03:08:0c:60:31:c3:fb:3f:0a:d7:e7:0a:
79:b9:ec:77:23:3f:41:56:27:95:53:2c:e9:50:4f:9d:93:04:
e6:ab:69:b8:36:84:8e:e1:da:e1:ff:a8:ae:55:a0:2c:c4:7c:
b4:20:92:df:27:e7:8e:a9:21:87:a7:c4:01:ea:7e:99:5c:83:
62:34:9a:99:9f:23:4f:bf:6a:1d:9a:13:d0:2a:5f:71:40:f0:
3e:ca:a1:0f:b4:1b:9c:14:c8:75:c9:4b:2c:f2:84:fb:14:33:
1f:9a:5f:d3:79:c9:e6:66:e7:75:f8:a3:1a:d9:ff:be:90:3b:
3b:02:99:96:cc:d3:a0:ba:c4:7d:9a:c3:f6:66:67:1f:50:38:
a8:77:fe:d7:1e:48:c6:b4:03:e7:91:6b:ce:3f:2f:1c:ef:15:
5d:f4:43:5d:c8:78:5f:15:5b:db:db:c7:c7:e5:4c:fd:0c:32:
75:24:2b:be:81:4e:f2:fc:90:96:03:f7:77:82:df:a4:f6:49:
7c:13:13:32:eb:cb:f0:4e:3b:20:8c:b8:cb:b4:6d:d2:53:e2:
98:25:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:18 2025 by rpki-client