Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa
File: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (raw, json)
Hash identifier: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=
Subject key identifier: F8:BD:8D:D4:8C:4D:9A:AC:02:E9:29:D0:1A:B9:36:CD:F3:C2:F7:41
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 01942143DAAD9E6BB7FE5888386CA96FC1DC
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211734
IP address blocks: 185.147.136.0/22 maxlen: 22
185.147.136.0/24 maxlen: 24
185.147.137.0/24 maxlen: 24
2a07:3780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:da:ad:9e:6b:b7:fe:58:88:38:6c:a9:6f:c1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8bd8dd48c4d9aac02e929d01ab936cdf3c2f741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:e3:4a:84:b0:d0:78:07:c5:9c:05:eb:0c:
21:31:13:28:fb:e9:8a:9f:2c:a6:c4:dd:8a:41:03:
9c:9b:04:51:f5:c1:7f:0d:f0:36:e4:0a:a2:be:8a:
f2:21:73:92:b4:29:b7:b3:e9:65:23:b2:28:c7:46:
db:65:e1:fa:77:73:11:0c:98:ff:1f:a7:9a:8d:4e:
eb:42:4a:45:45:98:7d:48:90:ea:a0:4c:e9:24:f1:
a3:97:c6:e1:67:bb:86:77:70:f4:3b:c5:da:95:b3:
17:9f:ee:30:cb:d8:3a:1f:f1:05:e4:3c:80:d7:16:
1b:19:af:29:39:5c:d3:96:73:2f:f0:74:12:de:94:
d8:8a:2c:ef:ff:fa:74:bb:72:16:12:28:de:8c:6a:
69:a5:64:5d:8d:24:f9:6d:33:83:8b:99:39:fa:a9:
23:5d:4f:2c:f8:d5:6d:c4:62:86:2a:14:0f:bb:a5:
6d:dd:12:cb:43:ca:28:8a:94:11:4d:3c:6f:47:69:
a1:ea:5b:62:67:43:c1:f0:4f:f0:4a:b5:c1:98:02:
75:9e:dc:5d:60:5c:c4:34:1d:d3:d5:64:98:7a:95:
09:16:1c:ef:53:41:03:11:62:0e:50:06:32:b2:90:
91:8d:3c:03:39:6f:c8:9c:75:eb:9b:cf:44:21:53:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BD:8D:D4:8C:4D:9A:AC:02:E9:29:D0:1A:B9:36:CD:F3:C2:F7:41
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.136.0/22
IPv6:
2a07:3780::/29
Signature Algorithm: sha256WithRSAEncryption
27:17:50:e5:68:f7:87:ee:6b:0c:af:69:91:e5:80:0f:e9:1c:
0b:5c:be:13:a6:6b:ce:cc:21:1d:1c:73:53:df:a4:aa:60:65:
2d:8f:f7:1a:8d:c5:39:c3:cf:d8:4f:ef:cf:39:6c:2d:44:e7:
85:98:5f:84:cc:3a:b3:df:3f:8a:a1:81:bb:74:a0:b5:1e:66:
49:9a:d0:b1:af:5f:5e:96:96:77:fb:a0:55:ff:55:ff:9e:2d:
e2:13:d9:64:72:bc:aa:d2:8c:af:e2:90:0d:43:6a:dc:90:99:
9b:8b:d3:2e:a6:2a:77:cd:d0:df:87:69:e0:77:af:54:fa:c7:
c2:aa:57:70:58:0a:2a:02:50:3e:08:3d:e1:93:54:81:1e:51:
fb:e5:de:97:21:1b:fe:3e:29:3f:a1:b7:53:39:a4:ac:57:46:
87:b1:c9:35:8c:fb:13:2f:6b:be:c8:93:26:de:06:ca:c4:4d:
b5:07:05:1a:8b:f7:4a:4d:a2:ac:67:d3:a7:e1:0d:c9:6c:bf:
dd:1e:4b:da:36:24:1b:ef:86:8d:df:09:ed:45:bb:99:26:c3:
8e:39:17:3b:43:ea:f9:94:7e:30:ca:d8:4a:ed:02:48:81:c4:
4a:65:2a:12:31:27:f3:8e:1c:08:73:0b:6e:f0:d0:cb:d7:9f:
5f:a8:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:47 2025 by rpki-client