Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tsODEo7av5zZlJXp0rfB1m1cyjM.roa
File: tsODEo7av5zZlJXp0rfB1m1cyjM.roa (raw, json)
Hash identifier: KjU3CxAMARK5bHoDsHUOA4ELT0VFOhVyh/jmJhoXmKI=
Subject key identifier: B6:C3:83:12:8E:DA:BF:9C:D9:94:95:E9:D2:B7:C1:D6:6D:5C:CA:33
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1BB7432CE6D54643D4743E42600B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tsODEo7av5zZlJXp0rfB1m1cyjM.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39081
IP address blocks: 85.120.48.0/24 maxlen: 24
85.120.55.0/24 maxlen: 24
85.120.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1b:b7:43:2c:e6:d5:46:43:d4:74:3e:42:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6c383128edabf9cd99495e9d2b7c1d66d5cca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:5b:eb:63:df:37:be:c5:75:0b:14:c8:06:
9c:37:02:ef:33:8c:9a:6a:f3:ea:3c:a1:c6:1b:5a:
22:be:d9:fe:6a:50:e8:6c:c4:c1:60:69:f1:fa:28:
79:d7:b9:a4:4a:e7:26:2e:0d:18:d1:92:6d:9e:e6:
38:a2:26:2e:cd:21:3a:a8:59:e1:b0:99:d6:33:36:
f8:68:5e:46:99:9c:ac:47:17:7b:fd:89:2b:d2:5e:
13:20:8e:1a:d5:89:21:bc:62:f9:99:60:44:f7:05:
d5:89:a1:f9:d0:65:38:db:3b:3e:f3:40:a9:04:05:
a8:d2:46:c4:3e:0b:4e:99:e3:46:0f:00:e4:e7:b9:
98:33:16:57:4d:ee:c5:3b:d2:a9:9e:a9:2a:a8:c9:
28:9f:e8:82:80:e6:d3:23:f1:1d:f4:41:6f:0f:2a:
10:da:d3:e7:95:6e:17:86:09:25:1e:76:6e:ed:b7:
80:33:62:09:6a:3a:6d:a3:29:7e:4b:f5:22:45:62:
55:d6:8a:37:dc:49:b3:d9:1f:e9:da:37:8b:f2:d0:
f7:36:79:5e:b3:5e:7e:bf:05:f2:eb:09:bf:22:ef:
65:33:90:62:52:0a:aa:a2:fc:45:a9:66:6a:ff:ab:
90:55:3b:f1:9c:24:7f:fe:91:7f:80:af:93:3c:d0:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C3:83:12:8E:DA:BF:9C:D9:94:95:E9:D2:B7:C1:D6:6D:5C:CA:33
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tsODEo7av5zZlJXp0rfB1m1cyjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.48.0/24
85.120.55.0-85.120.56.255
Signature Algorithm: sha256WithRSAEncryption
6b:dd:bb:7d:8e:17:f6:01:0f:be:7a:83:75:51:b3:cf:e1:5b:
0a:ba:ba:12:e9:d7:bf:7a:d5:52:f6:d8:99:d9:c2:13:65:d8:
03:cf:c8:b0:4b:7d:8c:68:10:f6:71:e4:c2:5b:73:44:c1:98:
22:75:16:91:67:45:5b:81:92:50:4a:1d:da:77:39:54:66:d9:
32:d6:0a:79:b6:51:52:d4:76:56:c2:2f:74:ce:48:d7:99:01:
18:d3:f0:99:a7:4e:2b:6d:4e:d2:02:7a:f6:a3:ab:e6:10:bb:
43:a3:f7:d1:82:2a:85:da:f8:11:bf:ad:43:31:91:68:dd:45:
3e:7a:c4:d9:5e:04:15:1c:0b:bb:89:69:b3:d3:68:5e:3a:f0:
a1:47:75:dc:2d:fd:a6:6c:62:99:2a:10:8f:0e:56:16:45:c0:
73:24:45:f2:cc:ca:5b:ea:f7:65:42:63:d1:9a:70:4d:84:28:
88:6f:81:ce:86:26:29:c2:8f:b7:bb:cf:0f:89:c6:9f:8d:ef:
44:db:6c:7e:d7:e0:bb:93:8b:77:d1:fb:4d:97:b9:f4:62:86:
98:ea:71:52:41:71:58:3d:88:05:66:df:f5:13:1d:13:9f:a2:
ec:1d:2f:ca:13:18:1a:30:5e:39:15:b5:55:c4:3d:e0:f9:a2:
8c:f1:d5:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:30 2025 by rpki-client