Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/1gDvISiJeBsiPwYz4SY-svlQBnI.roa
File: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (raw, json)
Hash identifier: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=
Subject key identifier: D6:00:EF:21:28:89:78:1B:22:3F:06:33:E1:26:3E:B2:F9:50:06:72
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019428272797E2EC0C24A64AB4C670D9F220
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/1gDvISiJeBsiPwYz4SY-svlQBnI.roa
Signing time: Thu 02 Jan 2025 17:54:02 +0000
ROA not before: Thu 02 Jan 2025 17:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.38.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:27:97:e2:ec:0c:24:a6:4a:b4:c6:70:d9:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jan 2 17:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d600ef212889781b223f0633e1263eb2f9500672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:f2:14:57:9b:5b:72:fb:ed:98:37:40:dc:
9f:c3:be:a4:af:b9:46:6e:a3:5a:fe:39:78:6f:a0:
61:01:ad:44:4a:0a:11:8c:62:48:b7:aa:5c:e5:6c:
f5:9f:c2:19:a2:52:06:a2:57:2d:de:f2:8d:ab:67:
45:a3:b4:3e:8c:3a:b8:0e:35:12:15:c5:3d:10:2b:
8c:ee:bd:ea:e5:36:f1:ee:ac:af:ee:90:69:48:3b:
b1:19:14:5f:72:43:11:6d:70:c8:d0:80:79:aa:ee:
dc:b0:34:7b:1d:b9:1f:ae:e0:51:c7:47:2b:ec:5e:
60:e6:4d:87:e8:e9:f6:db:38:08:74:58:b9:91:90:
89:85:5c:ba:3d:54:b1:39:5a:1a:5e:57:a3:1b:fc:
ef:98:d8:a4:f2:c8:80:0f:09:6b:09:40:b5:b8:7f:
73:eb:ea:24:ac:da:4a:7f:74:a9:70:42:30:fa:14:
4c:f0:79:57:2c:61:89:3d:c8:3f:43:b7:f3:ea:72:
a3:b9:5c:17:84:b5:44:09:bb:2c:ab:ab:90:97:9c:
1b:78:26:bc:ce:96:4f:a5:e4:27:48:e1:b3:b5:55:
94:f4:88:95:9e:ce:b2:8d:87:1c:f6:9a:f5:40:24:
7f:4b:69:8b:11:64:6d:4b:93:1f:3a:4e:bb:cb:41:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:00:EF:21:28:89:78:1B:22:3F:06:33:E1:26:3E:B2:F9:50:06:72
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/1gDvISiJeBsiPwYz4SY-svlQBnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.134.0/24
Signature Algorithm: sha256WithRSAEncryption
25:07:31:74:ef:18:c8:f8:78:bc:c6:6a:e1:57:b1:9e:ca:d1:
56:ac:b0:e8:55:7f:04:a0:f6:9e:db:a7:d1:63:95:eb:61:89:
d6:df:59:9d:93:50:c2:c0:6c:2f:ce:16:94:00:1b:74:c2:c1:
b7:06:fe:1e:70:3d:92:b4:cf:c8:5d:8c:63:fa:04:ea:e6:64:
7d:8a:22:3a:7f:89:0a:32:fa:ca:79:f1:83:7a:d5:93:b5:d9:
fd:62:ca:71:be:b4:eb:f2:da:87:90:64:e7:9b:e7:bf:bb:c7:
91:c6:5a:f6:5d:d8:6c:d2:e0:7e:9c:ef:f2:95:3b:2a:d9:4a:
f4:df:49:d1:84:14:ba:16:f5:f0:96:1d:63:79:1e:43:e6:d9:
f0:74:0e:61:3d:db:61:f0:06:5e:18:e5:e1:5a:d4:6a:40:d9:
af:3e:72:79:46:54:01:2b:c5:2c:af:48:63:c1:15:cc:ce:22:
e9:96:e3:7e:58:70:a6:03:81:e2:62:2e:34:c1:c2:f0:f1:60:
4a:1d:4a:dd:88:7c:cd:4f:bd:43:69:de:60:81:b3:ff:e5:22:
12:0e:df:e1:64:fa:9d:78:2b:8b:1f:e1:e8:75:8d:31:2a:00:
59:8e:18:d2:ba:50:ee:25:39:51:df:e9:ad:4b:9e:e0:ba:98:
79:7f:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:55 2025 by rpki-client