Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/Al3GYSjIWjO-oik-aQgGBmqTDw0.roa
File: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (raw, json)
Hash identifier: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=
Subject key identifier: 02:5D:C6:61:28:C8:5A:33:BE:A2:29:3E:69:08:06:06:6A:93:0F:0D
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 01942068313E6A1576B66E735C578727BB22
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/Al3GYSjIWjO-oik-aQgGBmqTDw0.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199081
IP address blocks: 185.232.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:31:3e:6a:15:76:b6:6e:73:5c:57:87:27:bb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=025dc66128c85a33bea2293e690806066a930f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:e4:ed:f3:4a:2c:49:ec:d1:35:09:03:ce:
4e:2a:7f:d0:47:a6:d3:df:c4:01:c6:70:2f:5b:35:
ee:16:37:3e:e6:ea:7b:45:eb:53:f3:8e:9f:3a:d1:
4e:86:74:51:b3:0a:d3:73:d8:38:37:d5:72:d1:26:
a6:aa:f7:d0:f3:01:96:8c:d8:77:45:4b:7e:48:c3:
87:02:a4:2c:ef:08:3a:aa:2d:84:f4:07:4a:72:f9:
4a:6f:ff:01:dd:31:48:56:58:45:4e:94:f8:a7:77:
c9:e9:2b:88:59:b2:95:91:48:c0:83:0e:e8:a6:d0:
8d:4c:74:7e:f0:59:d8:ba:6c:09:8d:02:c7:7d:87:
c1:77:f3:50:91:ef:87:37:b4:c9:68:e9:45:ab:2a:
f2:67:6f:05:55:62:26:23:4d:0e:28:76:d2:0f:20:
b0:8b:15:74:cc:21:b9:3c:35:4a:e5:af:25:81:e0:
22:0b:e7:aa:d6:0c:81:3f:39:7c:7d:73:0c:cf:a1:
67:c1:44:79:5b:5e:b4:f5:2c:e6:2f:9e:41:59:0f:
e2:4d:5e:f1:f2:6b:0b:a9:70:d9:80:61:85:e5:8f:
1d:76:ea:a9:c5:33:c1:1d:6e:b9:e9:45:3d:5e:f2:
4b:f4:0a:ff:cd:90:15:cc:8d:59:f7:cc:91:14:1c:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:C6:61:28:C8:5A:33:BE:A2:29:3E:69:08:06:06:6A:93:0F:0D
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/Al3GYSjIWjO-oik-aQgGBmqTDw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:fe:ff:d9:ac:22:ae:ca:1d:c2:6b:2a:23:a2:be:de:32:9f:
02:49:3f:d7:c4:44:d7:b4:67:07:ff:ad:98:11:c9:2d:ae:91:
fc:6c:4a:ed:4e:4f:d2:f6:47:c6:96:c9:24:b9:46:f8:e3:39:
ad:b0:9d:59:8c:8b:f2:d0:e0:45:bf:11:34:9a:eb:de:9e:a0:
79:81:41:80:a6:58:ae:b1:02:9e:2e:e5:17:e8:22:4d:77:d9:
51:81:f3:e0:cc:8d:a7:4b:34:0e:25:d9:0d:5c:14:cb:12:d1:
0d:50:ec:57:3c:26:f9:78:f6:83:c5:62:b2:60:8c:61:6b:0f:
58:d7:31:69:95:5e:70:42:9a:3f:81:7b:c3:63:31:2a:95:5c:
25:37:9e:0a:28:db:24:6b:67:08:bc:5a:3d:e4:84:28:92:76:
83:f2:f4:5e:af:90:17:cf:1c:44:42:d8:c1:11:12:c3:c2:ee:
01:e1:f3:b2:93:07:27:51:8b:8b:45:3c:c6:59:3c:17:b1:df:
86:e0:79:5b:a7:91:50:28:29:64:ae:be:45:9a:a9:c0:ba:08:
64:51:e9:2f:b3:5f:27:b4:46:c6:64:cd:3f:e6:78:af:01:f8:
5f:ae:84:69:32:f5:12:1a:ac:28:04:31:3c:ee:90:bc:65:f5:
9d:71:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:33:48 2025 by rpki-client