Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/5AKIjXxvlD1ejPdjcCa3GKRo67k.roa
File: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (raw, json)
Hash identifier: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=
Subject key identifier: E4:02:88:8D:7C:6F:94:3D:5E:8C:F7:63:70:26:B7:18:A4:68:EB:B9
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 019422FB4CF808D4887B8E3EF9A9F6D03143
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/5AKIjXxvlD1ejPdjcCa3GKRo67k.roa
Signing time: Wed 01 Jan 2025 17:48:02 +0000
ROA not before: Wed 01 Jan 2025 17:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206009
IP address blocks: 185.184.72.0/22 maxlen: 24
2a0b:2c80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4c:f8:08:d4:88:7b:8e:3e:f9:a9:f6:d0:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Jan 1 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e402888d7c6f943d5e8cf7637026b718a468ebb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:28:27:18:dd:a3:44:5d:b2:62:b8:2a:20:
b1:fe:e5:91:c8:a0:67:be:28:68:1c:e1:b2:bb:d0:
62:bd:c8:f5:6d:f3:2b:98:90:b6:12:1c:82:20:e3:
a3:4a:c8:d2:bf:da:f9:6b:4a:75:ce:1a:84:d6:f5:
41:55:be:34:d9:ed:46:94:3f:ce:20:52:27:ea:f3:
03:af:95:02:d8:41:7f:9d:9e:ea:b2:ac:a1:c5:d7:
5e:d0:8a:8d:99:e6:35:1f:87:1f:00:aa:8a:b9:56:
09:0a:ef:c6:aa:f5:bf:f6:34:69:e3:79:79:19:2f:
b9:fd:24:ca:95:6e:bd:43:b6:96:5a:99:03:0c:aa:
fd:3a:ad:48:b0:2c:cb:53:7a:25:ce:3c:ae:2a:36:
80:48:38:10:e9:c8:e0:a3:f9:1b:a5:b1:3f:00:d5:
5b:25:d9:6d:bf:43:d7:95:1e:b6:69:f0:62:04:d8:
41:db:16:2d:7b:66:21:2b:32:03:74:eb:22:66:99:
57:80:b1:9e:d9:f7:8f:5f:ab:ab:b6:23:55:bd:6c:
f5:0b:0b:48:73:67:94:3f:73:df:99:7c:77:ce:6a:
11:ce:c2:74:06:00:28:fd:34:09:ca:cd:4c:f1:f3:
e9:73:68:a7:40:17:b2:7d:dc:35:08:a9:27:57:a5:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:02:88:8D:7C:6F:94:3D:5E:8C:F7:63:70:26:B7:18:A4:68:EB:B9
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/5AKIjXxvlD1ejPdjcCa3GKRo67k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.72.0/22
IPv6:
2a0b:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
41:e4:5f:c8:18:30:06:b5:3c:08:01:b3:d4:29:dd:64:1f:09:
ab:6e:4c:ea:41:47:66:18:3f:ea:d8:48:f6:4a:01:41:eb:7d:
a6:57:8f:54:cd:2a:cf:e4:f4:3c:a1:3b:4a:ea:b8:7b:e5:d2:
86:09:8d:5f:a0:8d:91:6c:93:8c:bc:30:4a:d1:07:53:df:8a:
ab:cb:b5:aa:0f:75:83:c0:b9:ff:a4:84:09:bc:fc:34:0c:50:
c5:d7:ca:6e:1a:39:49:fc:b4:e4:59:bc:a0:a5:64:8c:e4:84:
1c:e5:42:d1:b0:3f:81:23:52:94:33:35:71:86:1e:94:67:d3:
c4:11:72:14:71:bd:09:9f:ed:fe:db:d9:f4:1d:10:84:9f:a4:
71:fb:65:f1:49:ba:8f:86:99:42:9c:0d:31:64:33:44:c1:b1:
50:9c:64:90:4d:dd:dd:f3:b0:1e:3e:e7:5e:79:22:a2:46:e5:
ed:b5:fb:45:2f:b0:ae:d2:2d:e7:73:bb:57:fb:ec:d5:a8:85:
e2:22:d5:c0:e0:4b:49:db:cc:5b:31:5f:af:a2:a7:6d:38:3e:
8c:68:c3:4c:b2:fe:63:98:26:dc:ef:35:41:e4:62:5f:08:68:
ca:4c:ce:95:7c:2b:97:29:06:23:3e:b7:d9:a8:e5:df:eb:1f:
96:24:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:28:45 2025 by rpki-client