Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/wRukRujev3BO2RN4ND9D6D63w5k.roa
File: wRukRujev3BO2RN4ND9D6D63w5k.roa (raw, json)
Hash identifier: BYKbibBqJO+JvICBVUX/a9TBtkzvHJs+kP8dXi4jNhk=
Subject key identifier: C1:1B:A4:46:E8:DE:BF:70:4E:D9:13:78:34:3F:43:E8:3E:B7:C3:99
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 01942143BE0832932B7E4E846C17E8A707A1
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/wRukRujev3BO2RN4ND9D6D63w5k.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43242
IP address blocks: 185.51.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:be:08:32:93:2b:7e:4e:84:6c:17:e8:a7:07:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c11ba446e8debf704ed91378343f43e83eb7c399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:f1:d8:63:e1:5a:d8:8f:ef:d5:3f:53:59:
6e:68:4c:86:c5:38:a9:2c:5e:ef:f2:53:67:e9:be:
a1:7d:e0:a8:79:fd:6b:91:85:e7:3e:63:ee:5c:6c:
c1:d8:3e:63:96:85:3c:5f:36:3f:1c:9d:2b:a8:50:
3b:a1:91:61:e9:44:75:cc:4e:dd:92:e4:d5:a7:5e:
5e:7d:26:28:5e:72:11:2e:46:3e:11:66:b0:54:5f:
70:4c:45:6d:d2:fa:85:1c:f2:d4:eb:57:0b:6a:a2:
06:99:06:de:9f:e4:3c:12:e8:f6:0f:4b:7b:09:43:
36:b8:dc:c4:3c:2c:60:27:e2:fa:ee:f1:0d:03:73:
e6:e5:8a:7b:0d:15:3b:21:a8:4d:85:16:77:08:e9:
da:74:59:3a:ac:ea:db:be:b9:0d:f1:10:97:47:58:
83:fd:d8:f1:a3:19:72:6d:6c:c0:61:ee:60:f7:7d:
d6:5c:b3:7d:47:40:27:85:70:72:bb:87:24:d7:29:
48:a7:52:fd:10:07:3a:9d:92:4b:03:d6:6a:f2:cb:
fc:8b:a2:4f:da:e5:42:e5:25:13:7c:c1:61:37:08:
03:ee:a1:ca:ae:73:8f:07:4f:60:d8:35:0d:2c:b7:
9f:24:cf:e5:48:a7:48:3e:3d:c9:f5:a0:d3:08:a2:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1B:A4:46:E8:DE:BF:70:4E:D9:13:78:34:3F:43:E8:3E:B7:C3:99
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/wRukRujev3BO2RN4ND9D6D63w5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.24.0/22
Signature Algorithm: sha256WithRSAEncryption
28:c1:fa:a6:3e:c6:38:42:e8:c0:03:d1:c3:97:4e:c9:10:0a:
92:38:c9:3a:09:93:4b:12:15:e8:19:b7:39:08:8e:7d:cc:1e:
e8:dd:eb:75:f2:83:30:1e:66:9b:57:52:45:c0:7b:7f:55:fb:
dd:68:3f:ee:b4:7a:a5:6a:7e:f8:aa:d1:35:84:0c:4d:7a:e9:
3a:e4:87:d9:fc:6c:46:7b:89:0e:8f:0c:a1:47:9b:3b:c7:69:
fe:23:5a:57:83:72:68:95:ce:1e:96:6a:e0:13:31:83:72:65:
1c:d3:6d:bc:a2:ad:b7:1e:06:99:d2:3a:59:f1:4f:01:d7:88:
81:87:01:78:d3:95:6f:cf:d4:ff:b3:0f:94:c1:e3:ca:24:0b:
a8:33:37:78:72:f1:31:83:86:83:e3:e1:5e:b1:7d:45:c2:76:
f1:31:9b:36:bb:01:20:2e:dc:2d:65:4b:99:81:36:e5:33:0e:
5c:2a:80:cf:b5:9f:36:c1:06:02:3f:dc:23:e1:ef:0d:5b:83:
86:90:6d:5d:fc:bb:33:57:8a:7d:cc:e8:82:84:87:8d:a2:f3:
0c:4e:d0:29:5c:1f:ba:da:98:f4:ed:bc:97:6a:6c:13:0f:b6:
e5:61:be:1c:c9:60:c3:9e:26:75:93:6c:76:de:29:e2:97:7b:
bb:9b:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:15:49 2025 by rpki-client