Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/3bmAz9vtv2JfaPatPhAR81BLdD4.roa
File: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (raw, json)
Hash identifier: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=
Subject key identifier: DD:B9:80:CF:DB:ED:BF:62:5F:68:F6:AD:3E:10:11:F3:50:4B:74:3E
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 019423D717B75DA23338D97DB39DD7CA3E64
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/3bmAz9vtv2JfaPatPhAR81BLdD4.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61090
IP address blocks: 185.152.12.0/24 maxlen: 24
185.152.13.0/24 maxlen: 24
185.152.14.0/24 maxlen: 24
185.152.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:17:b7:5d:a2:33:38:d9:7d:b3:9d:d7:ca:3e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddb980cfdbedbf625f68f6ad3e1011f3504b743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:7a:68:f8:7a:79:cb:91:3f:21:78:1f:ae:
4b:70:4b:14:ce:25:b2:4c:b1:77:ad:3a:d2:f7:5c:
f4:18:67:74:ae:dd:89:1e:6e:44:bb:fd:06:e5:36:
da:f8:bb:b3:ac:db:b3:09:88:29:ac:61:71:03:f4:
9f:a2:22:62:b0:b4:2b:af:e6:db:a9:d1:00:20:fd:
da:b2:0d:b9:5c:79:9b:d0:d4:a1:97:97:aa:0c:75:
0c:06:a1:48:50:e1:ee:42:1c:91:5c:3b:c8:f6:b1:
7e:75:07:af:c9:fa:db:33:30:b8:4d:b5:73:02:94:
3c:92:0a:6e:0d:79:d4:f1:a5:7a:d3:e4:9f:45:e7:
92:bf:78:be:ea:7f:87:13:be:6b:c0:a9:b2:fd:c5:
36:ab:09:ab:84:ae:3a:41:1c:42:e2:e7:c5:5f:86:
2e:39:90:a6:42:aa:06:10:a4:21:3c:f6:37:f0:ee:
60:49:9e:01:41:b5:34:d2:2d:4a:be:1d:24:5a:88:
3c:78:fa:fa:58:ec:b9:5a:fd:c9:ee:55:30:1d:a7:
06:9e:a7:a6:52:e2:ad:f2:00:34:f4:29:76:32:e3:
35:56:45:52:21:1c:4d:15:e9:29:21:c2:06:f4:2f:
c7:56:d3:7e:6e:5d:5b:52:0e:63:27:16:82:3e:20:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B9:80:CF:DB:ED:BF:62:5F:68:F6:AD:3E:10:11:F3:50:4B:74:3E
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/3bmAz9vtv2JfaPatPhAR81BLdD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.12.0/22
Signature Algorithm: sha256WithRSAEncryption
71:b4:e7:ea:7c:02:01:aa:75:5b:31:f6:ab:83:a0:66:e8:ba:
34:b9:60:ee:93:3e:a5:4f:70:ba:0c:24:e9:8d:6b:88:b2:5a:
23:d8:ef:8c:6a:92:22:e0:1a:f8:c7:9c:d1:ed:ad:ff:86:63:
80:c1:cd:7e:67:83:85:28:9d:62:da:4e:25:43:60:b6:3e:4a:
a9:52:a6:a1:e6:9c:95:4d:10:47:36:3d:1e:90:00:1b:62:fb:
e7:a3:39:08:87:74:e7:d0:b9:b0:d1:3a:dc:34:ab:09:41:58:
cb:eb:52:c8:c4:5c:c3:4c:c3:b4:ed:a2:7b:11:f1:f7:2c:7f:
cb:ab:f3:c6:1b:a4:21:92:70:d5:2e:6b:9e:b0:c2:5c:10:c1:
db:58:9b:0f:4c:e4:7f:cb:8c:c9:c3:8d:2c:f7:bc:73:43:4b:
0e:46:73:10:60:25:88:76:54:bc:9e:97:aa:c8:1e:7e:ed:d7:
79:f2:35:8d:da:72:45:39:b6:67:56:4c:b0:f7:26:80:b7:db:
ca:b5:b9:70:ac:7d:b6:b8:c9:26:4a:b7:e6:2e:30:91:38:fd:
2a:2d:74:27:34:98:88:4b:5d:86:a0:e7:41:73:ec:9d:d6:e6:
ab:8e:ad:71:a9:97:c9:24:e0:3d:45:5d:8d:86:d6:f9:aa:4d:
0d:a7:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:00 2025 by rpki-client