Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/t69aTlQ1jUbtKm8S6swc1OePQro.roa
File: t69aTlQ1jUbtKm8S6swc1OePQro.roa (raw, json)
Hash identifier: YDjq03CmmOsPe7KKyzjFd8tC7HnKeQFrob/nIc/0Y4g=
Subject key identifier: B7:AF:5A:4E:54:35:8D:46:ED:2A:6F:12:EA:CC:1C:D4:E7:8F:42:BA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2734114B223BA6034577B7E2230B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/t69aTlQ1jUbtKm8S6swc1OePQro.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47458
IP address blocks: 85.120.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:27:34:11:4b:22:3b:a6:03:45:77:b7:e2:23:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7af5a4e54358d46ed2a6f12eacc1cd4e78f42ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:41:15:22:b1:ce:e1:22:12:93:e0:90:07:
dc:d6:99:5f:80:54:96:60:a7:17:95:9c:9b:da:6a:
88:01:e1:91:bc:ad:3c:f9:9f:57:71:2c:d8:2d:e1:
ff:ef:04:ad:de:5e:bd:11:a1:04:d0:b6:c5:03:94:
7d:15:23:de:08:d2:4e:a8:79:6f:1f:33:ab:22:c6:
1d:ff:97:ab:66:ab:a2:87:0c:f4:6a:df:3e:02:74:
94:25:2e:8f:18:f8:52:26:d3:47:63:17:c7:b7:88:
7c:b9:d7:2e:1c:05:a0:26:2e:72:7a:20:63:93:bf:
8d:e3:2a:ab:5f:27:da:b2:76:27:85:3c:28:0e:ae:
12:51:44:7c:33:39:cb:f2:8c:db:0a:d5:f2:6a:c0:
ef:3c:8c:54:a2:81:34:a3:45:d6:5e:d0:0f:59:76:
91:5c:73:65:9a:72:73:00:50:c7:24:66:e9:5d:2b:
f1:c0:4d:e4:c1:52:b5:07:36:10:b9:c3:3c:be:4f:
23:71:ed:f2:4e:2b:2b:99:3f:bc:b8:78:5f:6c:eb:
80:f9:e0:bd:8c:a4:e0:cf:db:a9:c7:52:34:07:19:
a7:e3:c3:10:68:13:b2:bf:e0:b4:02:04:e3:e8:35:
5f:a5:cc:73:dd:af:bc:76:ea:98:3d:bb:c8:6a:b6:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AF:5A:4E:54:35:8D:46:ED:2A:6F:12:EA:CC:1C:D4:E7:8F:42:BA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/t69aTlQ1jUbtKm8S6swc1OePQro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.21.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e4:87:f5:20:91:32:54:84:c0:64:02:28:22:0d:d6:49:8e:
e0:62:f1:eb:bc:bd:b5:12:82:43:03:e2:23:57:93:90:b9:53:
f6:57:6f:00:1a:10:14:c6:ad:22:06:ec:da:7d:dd:ec:35:1f:
f2:a5:39:6b:e0:8c:5d:e3:1f:d5:9b:34:fb:11:4b:2d:08:be:
7b:29:5e:19:75:1f:0c:f8:71:e0:15:0c:72:a2:9a:7a:aa:8b:
2f:22:5d:4c:f8:98:8c:72:ae:44:8b:01:47:84:44:2d:e7:b0:
c5:7c:a8:05:3b:3d:82:a3:4e:31:f2:87:44:72:ac:79:80:a7:
2d:dc:95:12:29:3b:76:cb:ae:89:4b:87:6a:01:1a:8b:fa:30:
cb:10:d2:d1:52:ce:e5:4a:6c:a5:b6:d1:87:8d:1a:48:ef:3f:
a1:d8:ae:56:e1:32:44:8a:c8:99:5a:4c:50:a7:6b:fa:ca:52:
b5:f6:80:a5:f7:98:bb:7c:e0:dd:94:60:a9:cd:f1:ae:cc:63:
44:47:7e:f7:3f:4e:3c:ce:29:af:8d:13:e2:af:eb:42:67:85:
a0:cb:a2:97:14:ce:d3:e9:ee:36:e8:f4:0c:90:f2:02:ce:48:
56:64:e4:31:6b:e7:50:5a:5e:b2:e7:b7:69:5f:47:7a:be:f2:
4a:de:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:30 2025 by rpki-client