Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa
File: cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa (raw, json)
Hash identifier: 35j9cePlwM12en+EIoj2uwLnq2TReRAiO2SX/9vwgDk=
Subject key identifier: 71:B5:F7:17:03:A0:8B:DA:D2:D4:43:5E:FE:4E:41:2C:2C:55:76:0E
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019421B19C587DC47E14DD74A8A5EDA41437
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa
Signing time: Wed 01 Jan 2025 11:47:55 +0000
ROA not before: Wed 01 Jan 2025 11:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210574
IP address blocks: 185.148.241.0/24 maxlen: 24
185.148.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:9c:58:7d:c4:7e:14:dd:74:a8:a5:ed:a4:14:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 11:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71b5f71703a08bdad2d4435efe4e412c2c55760e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:07:0f:6c:45:17:d7:ed:6d:24:fa:36:0e:
82:4a:44:1d:3a:5c:a1:e3:84:aa:74:a4:d6:09:99:
7c:63:b1:42:ae:ff:60:70:4d:0e:3c:a1:c6:94:51:
2f:0d:62:93:b0:2f:ea:b3:0e:7c:c8:67:19:98:af:
f3:5d:bf:72:a0:b2:b5:5d:c2:16:1b:c6:16:97:79:
20:13:84:15:94:3e:12:e2:ae:9b:ae:18:a7:50:60:
9d:25:cd:13:f9:40:a5:44:21:f9:ab:d8:b7:a8:89:
b3:31:81:4d:30:5d:47:f8:df:9e:91:8b:06:b4:60:
72:d7:07:1a:a8:b8:4c:2d:86:9a:59:e6:e9:ac:5b:
af:59:d9:2b:45:df:5c:79:f6:33:a5:12:8b:1d:7b:
0d:e3:b0:70:36:04:dc:4b:f2:8f:b7:f7:7e:c2:14:
82:0e:0e:c8:12:64:b8:98:95:03:5f:2d:99:eb:1a:
06:af:89:f7:04:3f:a4:7d:cd:b9:3d:3a:e7:2b:20:
6b:37:6e:78:fa:4b:92:bc:74:d5:4e:62:a0:e6:2d:
d7:2c:f8:c9:8f:e7:05:63:cc:10:2d:75:f8:f2:05:
77:f8:17:37:c2:85:ec:66:3e:24:9c:9d:b2:7a:c8:
dc:f9:12:eb:44:a7:25:be:d7:d4:16:c7:4b:6b:23:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B5:F7:17:03:A0:8B:DA:D2:D4:43:5E:FE:4E:41:2C:2C:55:76:0E
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.241.0-185.148.242.255
Signature Algorithm: sha256WithRSAEncryption
1f:60:54:f9:a6:d1:6f:91:77:f5:60:12:45:c8:a7:d1:b0:9f:
90:7a:df:00:90:27:aa:f0:e1:3f:b1:24:04:f0:22:83:c8:7d:
b3:3f:43:c5:f8:e9:87:a7:d0:8d:eb:d0:ca:fa:95:77:de:84:
5a:9f:e6:f2:59:3f:a3:2d:01:be:df:fb:e6:38:40:9e:71:09:
26:24:8c:23:ac:4f:13:6d:a5:90:aa:2e:ee:35:49:6b:0a:af:
fc:f3:72:56:f8:b9:04:17:29:53:ff:8e:45:f6:c4:e5:76:46:
f4:e1:4e:a9:f5:bf:7d:5f:36:10:d7:5f:27:4b:dd:5d:7f:dc:
3a:e4:57:fc:1b:08:e3:c0:fc:02:07:49:9c:76:bf:b5:1e:a8:
ef:66:08:f7:d6:44:ae:f5:da:ef:15:77:7f:76:75:b9:5b:38:
d8:44:02:e5:b2:39:ea:94:97:3c:22:e6:7d:b4:a9:ba:02:a8:
21:31:b8:e3:f8:35:65:90:84:8d:7f:f8:9d:cf:f8:d7:17:dd:
07:18:18:4a:3d:19:12:5c:20:ae:5a:b5:15:5d:1d:5f:29:89:
c4:1b:ef:50:d6:32:0d:1e:3e:a9:bf:11:01:07:70:d6:29:d5:
ff:2c:5f:6b:38:d5:87:9f:dc:9d:3d:86:37:00:8c:ca:c5:8b:
62:e4:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:00:00 2025 by rpki-client