Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa
File: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (raw, json)
Hash identifier: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=
Subject key identifier: D4:35:3E:F7:3A:5D:30:59:CB:0A:94:45:A8:4A:54:2A:33:F5:FD:25
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 01941FFA2AA3101579D4DC7EFE999046073E
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60750
IP address blocks: 185.26.108.0/22 maxlen: 24
185.26.108.0/24 maxlen: 24
185.26.109.0/24 maxlen: 24
2a00:8760::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2a:a3:10:15:79:d4:dc:7e:fe:99:90:46:07:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4353ef73a5d3059cb0a9445a84a542a33f5fd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:29:37:b0:2b:ce:0e:a9:33:81:2f:95:2b:
b5:14:62:f1:ac:cf:ee:b2:f0:88:b3:00:b5:49:91:
d2:f8:48:a6:51:60:56:6a:43:52:89:7f:8c:3b:12:
46:18:65:21:2b:7a:19:77:07:be:f9:bd:e8:c3:6f:
a8:ee:9e:d6:dd:10:81:88:bc:52:69:a2:38:cd:8f:
01:24:fb:67:98:e2:0f:43:b9:e5:c7:21:2e:81:fd:
53:7e:f9:eb:e9:51:2d:68:7e:09:7a:cb:f1:15:33:
f0:cb:d2:49:ba:34:6a:31:96:3c:4c:90:37:5d:18:
ca:b5:42:cf:18:65:3d:0b:1e:f3:96:d0:1d:4f:f5:
a9:3e:a6:f3:f1:4a:b0:e1:ae:0e:d2:0a:29:c8:57:
b8:b0:18:d5:2b:65:f2:19:04:5f:ac:ac:f2:9f:3f:
15:a1:aa:82:61:60:c0:be:a1:9b:4a:50:97:ab:09:
80:59:bd:b4:1d:60:77:b3:03:7b:4e:86:5c:aa:2d:
b5:e3:28:b3:70:56:21:40:94:03:01:d5:64:b8:18:
5f:3c:70:9e:8f:d4:db:e5:0b:84:e9:4b:fb:5e:dc:
0f:9f:46:df:6c:ac:d3:60:77:5a:43:01:9e:a8:45:
a6:37:92:d1:1e:fe:b2:a9:57:4b:03:78:96:8b:2a:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:3E:F7:3A:5D:30:59:CB:0A:94:45:A8:4A:54:2A:33:F5:FD:25
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.108.0/22
IPv6:
2a00:8760::/32
Signature Algorithm: sha256WithRSAEncryption
0e:85:91:30:f6:2e:2d:c1:d2:51:5d:e2:16:9d:72:13:69:30:
05:95:7d:56:a8:1b:4d:f5:76:19:0f:e0:c4:77:5d:85:2d:fe:
9e:6c:58:92:67:71:d7:c4:6f:79:4d:1b:35:4e:17:a0:65:fe:
c2:0b:dc:57:83:04:de:c4:97:97:16:03:a2:00:4c:ef:23:85:
ca:fd:42:e8:bf:dd:ae:be:27:47:75:93:b2:28:78:20:28:6b:
c2:32:b9:5e:25:e2:dd:f4:32:1f:81:98:47:b3:6a:dd:42:f1:
fd:1e:c5:19:9f:4e:30:e9:dc:15:28:e7:0b:45:11:90:e5:ac:
ef:40:57:80:d9:62:83:c6:e5:3f:d9:40:47:cb:f0:ad:e5:52:
6c:22:4b:55:ac:5d:ce:6a:50:7d:72:51:53:84:38:51:ac:ac:
e0:11:50:fa:38:6d:e8:6e:34:1e:c2:81:6d:b2:a3:6d:34:10:
44:ab:5f:5b:c6:90:05:e9:19:1c:00:d4:28:5f:17:37:60:17:
4f:b6:12:99:80:5a:25:1e:d0:55:38:32:16:e8:75:a7:89:b2:
b6:d9:2b:d9:fb:cf:ed:e8:64:41:8c:09:7d:91:b6:28:eb:38:
8c:7b:1d:d0:d7:f5:59:a0:53:42:6a:80:3d:0a:2b:7e:46:4d:
3b:90:50:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:57 2025 by rpki-client