Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/x525jdZJUsYoxHJwzP0o_5TQ2io.roa
File: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (raw, json)
Hash identifier: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=
Subject key identifier: C7:9D:B9:8D:D6:49:52:C6:28:C4:72:70:CC:FD:28:FF:94:D0:DA:2A
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 019425FC526150799C2FF10C2DE789E9E047
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/x525jdZJUsYoxHJwzP0o_5TQ2io.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29655
IP address blocks: 185.32.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:52:61:50:79:9c:2f:f1:0c:2d:e7:89:e9:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c79db98dd64952c628c47270ccfd28ff94d0da2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:d4:d1:0e:ca:32:7e:8f:96:49:0b:07:3d:
25:aa:8d:56:97:e2:15:9e:c7:39:e8:e3:d7:da:d1:
cb:0a:3b:25:67:4f:ef:1a:3b:14:e5:5b:4b:90:0c:
30:54:6e:60:25:ec:25:7e:3b:ef:57:43:63:3f:58:
be:42:1b:40:6f:ec:98:18:51:64:d7:a9:9f:f4:ed:
6b:7b:55:ec:00:fa:39:21:80:c2:50:f7:d9:b7:b8:
87:fa:8d:cc:72:9a:e1:cd:b7:6f:3a:64:f3:b1:e0:
fd:9c:a7:57:de:3e:5f:3e:dc:80:98:87:26:dd:0b:
90:35:8e:8c:6f:51:23:b5:80:c3:34:87:e6:6c:cc:
b5:1b:57:c7:57:1b:ad:cf:f8:da:ce:d5:ba:eb:58:
47:04:5a:8b:e0:a1:52:2e:12:2c:16:04:2b:54:67:
d5:4c:8e:bc:ed:9d:9d:d4:ef:33:90:61:51:84:c8:
d5:b4:ff:41:bb:43:ca:91:fe:2f:72:c0:1f:49:fd:
29:40:91:94:f1:ac:f2:89:11:44:5f:ab:9c:17:b0:
da:53:84:ff:46:0c:99:92:c5:7b:9a:99:80:56:73:
44:8e:56:c9:42:54:ed:86:c8:5f:1e:eb:49:34:8e:
2c:a8:75:1e:35:02:f8:83:a5:3e:c7:30:92:48:cb:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9D:B9:8D:D6:49:52:C6:28:C4:72:70:CC:FD:28:FF:94:D0:DA:2A
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/x525jdZJUsYoxHJwzP0o_5TQ2io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.220.0/24
Signature Algorithm: sha256WithRSAEncryption
55:70:a4:e3:9d:5d:f3:d3:4a:74:ef:08:2e:8e:22:86:94:43:
88:32:8a:64:94:50:42:35:ff:05:5a:30:14:29:ee:94:5f:81:
71:85:78:b1:c9:d1:87:ab:dd:93:b8:d8:6c:c3:1e:e7:26:c7:
88:91:4c:83:93:d0:ab:2c:e4:b6:17:d7:48:f5:f8:66:5b:98:
f7:ea:2e:e5:67:c3:e5:46:4a:d5:eb:7f:43:bd:54:2b:fb:20:
60:6b:16:80:15:49:8d:1a:74:90:d9:e3:09:4d:65:d6:d7:37:
ab:b1:5f:7e:43:56:3c:c1:94:45:85:9d:32:95:a9:16:ff:f2:
85:65:47:47:a9:d2:e7:e6:b1:be:42:a5:65:3c:d4:a4:0f:35:
c2:52:7c:c4:fb:a8:65:21:a4:60:e0:34:b2:d5:a3:fa:22:78:
48:7e:50:ea:6c:7a:2c:0c:6e:1e:90:e7:a3:25:50:10:0c:88:
d7:7b:70:41:91:37:7a:9b:0c:cf:58:cf:8d:9f:59:24:33:88:
31:ab:4b:7c:8c:19:d1:1f:f7:e2:12:94:97:7f:d6:a8:66:86:
0d:c0:81:d5:df:f1:52:5b:9f:8a:56:26:0f:5b:90:51:ce:f4:
7b:4f:bd:c5:a7:ae:d5:7d:27:21:cc:85:e1:13:22:75:ac:8e:
3c:6f:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:43:45 2025 by rpki-client