Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/AtctRtEqNWKPB5rlQKlPqC6yWDs.roa
File: AtctRtEqNWKPB5rlQKlPqC6yWDs.roa (raw, json)
Hash identifier: 05XetyyHEDIPnW6uLoBtl5Z9uPB/DAO88wvWzPJ/MPs=
Subject key identifier: 02:D7:2D:46:D1:2A:35:62:8F:07:9A:E5:40:A9:4F:A8:2E:B2:58:3B
Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial: 0194228DE1E0D5EFB459D7AAA95B438E8123
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/AtctRtEqNWKPB5rlQKlPqC6yWDs.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49434
IP address blocks: 185.177.45.0/24 maxlen: 24
185.177.46.0/24 maxlen: 24
185.177.47.0/24 maxlen: 24
2a0a:2f82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e1:e0:d5:ef:b4:59:d7:aa:a9:5b:43:8e:81:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02d72d46d12a35628f079ae540a94fa82eb2583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:b1:da:67:08:9c:b1:05:7e:3b:18:23:89:
10:88:9d:e3:59:2c:c6:64:b4:9e:04:25:2f:c3:fb:
3f:e3:6e:ad:75:c8:13:67:49:e7:f9:e5:57:31:68:
8f:fc:97:a4:31:1a:65:0f:97:0d:8f:ac:1e:39:03:
bb:d3:bf:27:0b:53:d0:0f:7b:0a:db:8c:86:a2:26:
34:af:df:b7:a4:eb:0f:71:b9:fc:24:a4:d2:45:d8:
d6:10:9a:a4:7b:31:98:62:c4:86:af:85:b1:44:75:
b6:68:6b:03:6e:f4:0e:a4:26:29:f6:f7:b1:9b:83:
63:b5:95:e4:8e:ed:34:fb:f5:83:47:4d:de:85:31:
11:67:10:ea:08:0e:d4:21:b4:f0:09:4e:7f:4c:ad:
9e:20:e2:b7:60:66:a2:b1:0c:ca:5c:1b:9f:2b:e2:
e7:93:e3:5e:1b:21:4b:fb:cb:dd:62:a5:db:cd:08:
9a:1d:da:5e:0b:83:69:1a:4c:f7:6e:47:d5:7e:0e:
36:67:60:71:c7:87:6d:3e:49:0b:85:2d:4a:a8:65:
f1:09:32:5c:b7:ae:9a:d9:0a:be:ab:08:c0:9d:49:
b7:21:c2:95:e5:d5:70:44:0c:76:df:0a:64:19:35:
d8:f9:b2:df:4c:7f:e4:3b:9f:83:db:c7:6c:ce:64:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D7:2D:46:D1:2A:35:62:8F:07:9A:E5:40:A9:4F:A8:2E:B2:58:3B
X509v3 Authority Key Identifier:
keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/AtctRtEqNWKPB5rlQKlPqC6yWDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.45.0-185.177.47.255
IPv6:
2a0a:2f82::/32
Signature Algorithm: sha256WithRSAEncryption
18:11:58:f2:0c:c8:ca:10:b6:73:8c:9b:6f:19:3e:55:96:7d:
52:98:da:53:03:26:c7:28:b2:24:59:4a:13:6b:31:9a:56:5f:
14:7e:f6:0e:5d:f1:0e:2b:5c:8b:e6:c9:92:f2:52:bb:64:3c:
9e:3b:71:36:d9:5d:46:a2:7c:40:a6:fc:57:7a:7b:09:19:fd:
52:02:6c:b2:d0:63:04:b3:0c:9f:71:c0:75:78:55:b3:61:34:
bd:75:30:61:bf:8e:ba:4a:bc:d6:fc:64:1c:c6:9e:5e:48:94:
be:30:f6:b5:70:ee:0f:e8:a6:4f:42:fb:03:ac:a9:17:ce:bc:
e2:cf:1b:5d:16:08:56:da:67:f2:a0:85:80:91:3d:4d:3f:2f:
3b:2e:e2:d2:2c:ac:5a:8e:af:24:09:f0:03:60:88:1d:a6:62:
f2:1f:55:4b:3f:62:a3:7c:26:93:08:58:31:80:80:79:86:e5:
bb:58:bd:bb:0a:89:94:24:2f:02:74:86:f6:c5:f2:e2:c3:2b:
3f:ed:40:12:ed:d6:2b:eb:d1:f5:09:54:f4:2a:aa:57:7b:71:
84:0b:3b:50:a5:b7:93:23:b7:01:25:af:df:f5:5b:20:28:04:
5b:9c:72:cf:57:36:6e:66:e8:11:13:90:4e:c0:3e:8e:72:2b:
a3:a3:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:40 2025 by rpki-client