Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/dTuqgfHkWKRx6zDRFyr7wfbH78A.roa
File: dTuqgfHkWKRx6zDRFyr7wfbH78A.roa (raw, json)
Hash identifier: 2z0kuCT+rZ4YZMUscZu87PyQoyge5s4ineDLZLosNXs=
Subject key identifier: 75:3B:AA:81:F1:E4:58:A4:71:EB:30:D1:17:2A:FB:C1:F6:C7:EF:C0
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 0194228DF8FB202346B9422C4F5F4A44CB7F
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/dTuqgfHkWKRx6zDRFyr7wfbH78A.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204241
IP address blocks: 185.3.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f8:fb:20:23:46:b9:42:2c:4f:5f:4a:44:cb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=753baa81f1e458a471eb30d1172afbc1f6c7efc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:b2:ef:5f:02:10:cd:c2:c8:b4:85:7a:6a:
85:30:cc:03:e1:7e:2a:54:a5:f0:2c:1b:66:a6:08:
f8:58:ce:ea:63:84:55:98:15:cf:65:40:18:03:d2:
73:50:7c:f4:1b:a6:99:60:d5:30:c3:a5:25:5d:6c:
08:a7:3a:7a:3c:ec:68:48:88:39:57:05:d4:e9:c8:
c9:16:d0:eb:07:91:6c:7a:aa:bb:8c:6e:6b:05:d1:
19:13:bf:f3:9a:4a:d4:7c:f0:08:55:e6:9f:70:3a:
23:a1:e3:9e:90:17:a2:ec:53:d3:fe:28:5a:8f:74:
b4:88:7c:f0:fd:23:c4:51:e3:a3:29:cd:d1:f1:36:
89:52:3b:fa:8b:b1:b3:0a:7d:d1:20:6f:a2:e1:ff:
1f:96:03:b2:ec:5d:56:8f:90:1d:d7:49:aa:3d:0a:
ee:1e:d1:63:1f:78:fc:6d:12:05:3d:00:f4:3a:3d:
fe:12:b3:48:4a:e3:a0:18:56:d8:ff:97:25:f6:da:
f7:0e:09:5b:75:76:37:4e:1e:a2:b9:f1:7f:d3:b2:
7f:fb:d4:84:89:2a:a4:a5:a5:5f:0e:30:8d:c5:86:
40:8f:7a:56:f9:ce:24:86:3d:bc:e1:1c:ef:23:8e:
a9:a7:16:a8:a3:5a:a5:92:39:4c:fd:ae:94:ed:19:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3B:AA:81:F1:E4:58:A4:71:EB:30:D1:17:2A:FB:C1:F6:C7:EF:C0
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/dTuqgfHkWKRx6zDRFyr7wfbH78A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.190.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ba:6f:a5:cc:e4:0a:5a:60:18:c4:a7:1c:77:bf:1c:ff:d1:
65:e1:49:b5:57:1f:45:9c:ac:b5:b9:4b:28:2b:0e:de:dd:5a:
38:ba:a0:08:57:67:50:e1:3f:fe:9e:1a:6d:22:49:91:3d:fe:
33:1c:9d:2f:84:4c:d3:3b:d3:58:08:d0:8b:c5:ec:d2:2e:8e:
4d:c5:d4:f7:e9:6b:a2:ef:7b:b8:a9:c2:27:20:06:a5:b2:2f:
5d:d0:b7:3f:3c:e5:65:f4:b1:36:7a:fb:fd:27:d1:e2:04:f1:
4a:13:5b:38:ca:c4:70:44:c1:68:92:05:e4:b3:54:03:d7:b4:
68:bb:cc:b3:54:32:40:3e:ec:b0:08:ac:57:0d:ee:ed:ad:1c:
c2:1d:13:08:23:52:62:e9:5a:2e:74:0f:99:cf:29:c8:7e:9e:
ee:a3:a5:a0:ce:59:ee:2f:9e:82:ef:ce:00:88:6b:21:60:4d:
6c:ef:4a:9e:91:12:da:30:44:61:4a:31:e5:d4:91:2a:84:cb:
0e:5f:ce:f4:af:73:cd:60:3f:a9:59:4e:52:61:48:35:48:9d:
9c:b7:4c:85:99:98:8e:bd:2b:86:24:3e:ae:dc:32:75:3e:a8:
de:86:7e:4c:3d:d3:14:82:e5:23:a2:ef:6e:23:86:5d:98:d5:
ee:b8:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:24:54 2025 by rpki-client