Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/dl9xN4pkOUMATzBUDPbZSMUjsGM.roa
File: dl9xN4pkOUMATzBUDPbZSMUjsGM.roa (raw, json)
Hash identifier: 7kZi/ZdJrUDScoanJo0Ay5pdIQ9TOVPgtHVnLSi9b9I=
Subject key identifier: 76:5F:71:37:8A:64:39:43:00:4F:30:54:0C:F6:D9:48:C5:23:B0:63
Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial: 019425220B98F98C19D182723C80BEA48BF9
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/dl9xN4pkOUMATzBUDPbZSMUjsGM.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41350
IP address blocks: 85.223.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0b:98:f9:8c:19:d1:82:72:3c:80:be:a4:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=765f71378a643943004f30540cf6d948c523b063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:35:9f:4c:01:d6:20:2e:90:6c:8b:cb:a8:
92:29:ca:89:d3:12:fe:37:43:f9:36:34:f9:e8:75:
59:13:bb:8b:98:e9:55:5e:cf:11:92:8a:06:20:fe:
f3:9e:a4:c2:4c:39:f3:24:d0:e9:11:9a:72:41:83:
6c:b8:ba:ce:41:87:53:70:71:f1:9d:ea:bd:3e:46:
0b:32:45:60:f7:24:d9:86:08:61:96:99:b3:fe:b4:
f6:4d:a1:c2:11:4f:2f:01:d4:b3:fc:77:5b:3f:eb:
65:24:1d:2f:fd:e1:8b:62:51:1a:9e:59:c3:93:11:
4e:a1:6e:af:c7:4c:80:4d:8a:5b:a8:6a:94:c2:36:
56:95:a9:b6:25:88:8b:20:41:ce:68:f9:51:62:6a:
7c:c0:af:02:ab:b1:77:27:d0:4f:17:20:6e:52:e9:
3d:1a:d2:8e:76:c3:d0:29:c6:dc:0b:28:36:dd:16:
b8:e1:ee:ae:dd:3a:91:ed:80:3f:40:13:c5:d6:49:
da:0d:f2:ef:ef:ab:c4:a0:e5:3d:8d:fc:b3:46:72:
f3:0a:61:d5:21:b9:af:bf:b4:30:c4:2a:db:cb:ed:
5d:ba:73:a3:b0:29:76:58:b3:de:d2:bd:6f:bd:95:
94:40:ba:a7:bc:3d:3d:10:03:b4:42:c1:6a:02:ff:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5F:71:37:8A:64:39:43:00:4F:30:54:0C:F6:D9:48:C5:23:B0:63
X509v3 Authority Key Identifier:
keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/dl9xN4pkOUMATzBUDPbZSMUjsGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.223.143.0/24
Signature Algorithm: sha256WithRSAEncryption
14:92:30:67:5f:6d:c3:f1:7f:26:04:a7:cc:da:f5:e3:cb:87:
2e:bb:94:d7:5e:0f:5b:ea:c6:16:10:30:61:96:aa:2a:f0:43:
06:8d:e4:fa:60:e1:b4:b4:cc:32:37:58:94:5d:6b:49:84:05:
7f:67:ea:f3:4b:82:02:c5:03:c7:24:34:f5:cc:7d:31:8d:1a:
23:92:e6:07:55:80:99:3e:f8:f0:f5:44:a1:56:e8:28:a6:30:
02:bd:2b:1a:32:f3:c9:99:17:50:5b:27:a3:be:9a:e7:35:21:
4b:67:43:62:89:36:43:61:0c:e4:48:e8:69:44:a7:b9:f7:77:
a2:5f:f3:04:36:d0:93:a0:8d:d4:f2:b4:e0:63:c5:b3:79:dd:
1e:bf:d5:11:c9:dc:9e:ba:11:54:38:d2:4b:48:f1:54:cb:8d:
85:f0:88:3f:11:a0:14:19:2b:36:4e:6a:e9:63:7d:d4:fb:52:
28:bd:e6:e9:a7:c0:7c:49:f8:cb:46:39:e9:07:29:b1:fa:d9:
d5:92:fe:85:4c:e7:a7:b9:5f:ab:9e:c5:59:ad:42:7a:81:9d:
2a:16:6d:a0:7d:3d:29:27:f5:d3:1f:73:ba:a1:17:0f:82:2d:
49:79:a6:78:97:4f:d6:90:b2:e0:08:a8:94:92:91:8f:8f:d8:
c7:e6:9c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:10:53 2025 by rpki-client