Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/j4X9hBaVyPVDHygvq-fZETVve70.roa
File: j4X9hBaVyPVDHygvq-fZETVve70.roa (raw, json)
Hash identifier: z5G+VRr3oGmuSXVR1HckqXgI/DsnIY/XOw0j8sDgvBc=
Subject key identifier: 8F:85:FD:84:16:95:C8:F5:43:1F:28:2F:AB:E7:D9:11:35:6F:7B:BD
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019420680E139511438AB59DAC387080DE20
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/j4X9hBaVyPVDHygvq-fZETVve70.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209280
IP address blocks: 185.227.81.0/24 maxlen: 24
194.146.45.0/24 maxlen: 24
2a0b:3c40:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0e:13:95:11:43:8a:b5:9d:ac:38:70:80:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f85fd841695c8f5431f282fabe7d911356f7bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:78:7e:87:f8:d6:b9:bd:a0:b2:04:b3:55:
10:b1:0f:30:6c:5b:a9:8d:6b:5e:33:8c:44:bf:57:
2f:8d:46:ae:4a:17:0c:21:e3:8b:fb:ad:e6:65:d5:
ec:96:17:2b:45:bd:dc:36:2e:d6:b9:c8:1c:11:d9:
41:a1:6e:04:a0:ff:d3:0e:bc:f8:ac:4b:05:01:6a:
91:02:f6:92:61:44:b5:6a:d0:fb:e7:7c:8a:9b:0c:
8e:54:8e:3e:c6:52:48:37:98:d6:06:19:a5:90:77:
aa:c6:60:f9:13:ab:b5:d3:77:d5:09:d0:bc:58:c9:
f8:5b:95:fe:20:7f:7a:de:5d:1c:ad:0d:78:82:b8:
9d:ea:cc:86:2e:fb:e1:d4:10:bb:ae:9c:86:56:f1:
55:49:e6:f4:0f:f5:7c:f1:72:81:e9:ba:31:3c:88:
61:34:7d:da:a9:65:ac:e2:b5:88:38:c9:a6:4b:c0:
54:73:91:70:e2:8b:5b:8e:84:86:57:2c:fc:57:11:
49:bb:06:5c:a3:84:53:84:57:86:e6:6a:72:1d:2a:
8b:f3:60:9a:72:c2:68:97:f1:bb:25:b6:ef:f2:d2:
82:e5:f0:23:6d:a1:d9:ca:cd:28:42:49:c9:47:e2:
63:da:d5:ab:71:cb:d4:5c:b8:29:49:d2:90:a4:4b:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:85:FD:84:16:95:C8:F5:43:1F:28:2F:AB:E7:D9:11:35:6F:7B:BD
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/j4X9hBaVyPVDHygvq-fZETVve70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.81.0/24
194.146.45.0/24
IPv6:
2a0b:3c40:13::/48
Signature Algorithm: sha256WithRSAEncryption
42:79:7d:3b:3c:db:b4:05:97:ee:bf:b4:f1:3f:58:16:dd:3d:
1d:fc:e8:ee:f1:ce:13:7f:5a:41:2d:c8:cf:da:43:52:52:e8:
0d:da:b5:a4:57:d4:10:96:5a:36:28:b4:6d:37:80:af:5c:e0:
f9:f5:92:96:99:fb:e1:28:93:ea:09:b4:2a:00:98:4c:bd:d8:
f9:4d:29:6e:20:64:95:91:b7:17:c2:a8:eb:2f:16:c2:b6:76:
29:03:25:47:91:d9:73:b7:ec:e6:4a:dd:37:02:fc:16:56:6d:
b7:b7:71:e9:92:55:db:7f:0c:f2:84:f1:09:d7:c8:95:56:d2:
3d:39:7a:8d:3c:85:74:0e:49:a2:d5:94:ac:ea:01:50:28:fe:
2c:f8:9a:27:12:b0:e3:a0:57:1b:41:fb:42:e0:16:34:34:b2:
23:c4:f7:42:fa:a4:64:06:64:5f:29:8d:09:ae:d8:c2:2d:17:
46:e1:cd:36:a0:b4:35:ee:d3:74:65:2b:83:6f:5e:03:14:91:
80:ac:36:69:26:c8:49:46:5d:1b:ea:14:20:33:08:83:76:67:
68:9f:dc:f3:dd:9a:fa:29:bf:63:f9:e0:43:ae:4e:64:da:f5:
e7:2c:07:e6:72:b0:7e:30:25:29:31:86:4f:bf:6b:37:ef:97:
6f:a2:0b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:33 2025 by rpki-client