Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/auh7CDhWY48lyi05uSGvAmCeUEY.roa
File: auh7CDhWY48lyi05uSGvAmCeUEY.roa (raw, json)
Hash identifier: EQMFxwLeohahYmNy2tmys2Ve5N9/cgGCjeiUU7kajMM=
Subject key identifier: 6A:E8:7B:08:38:56:63:8F:25:CA:2D:39:B9:21:AF:02:60:9E:50:46
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 01941F8C958A9F43B3896D8F8DEC0E569947
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/auh7CDhWY48lyi05uSGvAmCeUEY.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208570
IP address blocks: 185.63.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:95:8a:9f:43:b3:89:6d:8f:8d:ec:0e:56:99:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ae87b083856638f25ca2d39b921af02609e5046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:0b:fc:22:25:fe:54:16:28:f1:7a:72:e5:
56:c6:37:01:d9:3b:d3:2d:ee:fa:8e:16:88:86:f8:
8e:dd:c8:c2:02:54:95:2f:12:8a:dd:23:cd:d5:f5:
d2:96:e7:e8:5c:84:09:1d:dc:38:9d:ce:54:ae:43:
85:41:2f:50:78:39:44:e4:ed:65:01:fc:15:83:df:
de:69:c0:f5:70:6e:06:3a:2a:15:b2:ba:7a:e0:6a:
53:87:22:91:1f:c8:ad:a9:9a:9b:9d:75:13:13:b1:
f1:33:1e:83:d3:3f:78:64:ec:00:b8:1b:fe:81:36:
0e:10:eb:eb:d8:d7:ad:d6:64:d8:fe:d5:65:b5:8e:
f0:46:40:d7:9c:0b:df:96:86:e1:9d:a9:c9:d8:3f:
3c:a8:0e:9b:93:60:c7:25:46:94:26:06:84:45:27:
cc:cd:b0:12:69:1a:4c:be:12:0f:e8:b6:51:05:5f:
b3:d7:b5:2d:da:9c:c2:87:0e:a3:78:35:26:b6:20:
e1:0a:52:11:81:0d:a1:ae:82:54:65:05:05:38:6d:
59:b0:c1:42:d6:36:b8:35:ae:3f:13:f8:dd:f1:f8:
8f:c5:cb:d1:cf:ae:46:6f:9d:97:e1:8a:0f:bc:4f:
a9:81:71:47:d0:b1:c7:47:2a:17:fe:e5:51:e9:b3:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:7B:08:38:56:63:8F:25:CA:2D:39:B9:21:AF:02:60:9E:50:46
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/auh7CDhWY48lyi05uSGvAmCeUEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:60:6d:57:7d:70:4c:37:38:63:e0:0c:33:45:0b:a0:59:4d:
c7:1d:a1:99:0b:6f:bc:73:da:08:46:22:2d:06:43:ce:66:1f:
26:d4:d4:4f:45:b0:55:92:5c:f0:9b:a9:5a:bc:12:bd:64:09:
37:6b:3b:02:b6:54:65:4f:76:e6:ff:5b:1d:b5:93:35:33:a8:
77:f8:a3:35:07:f9:46:ce:dc:88:d3:1f:30:5a:e2:b2:83:a7:
c5:a2:12:09:07:32:04:03:45:65:33:00:2f:d7:94:d9:96:94:
0d:e0:82:68:ea:99:f8:a2:a3:f1:b0:9f:07:74:74:8c:3f:a6:
1d:30:f2:f2:3e:ea:98:92:d2:63:2e:16:84:70:6e:bc:26:54:
26:8d:9c:8f:e1:38:02:36:81:be:3a:df:35:37:23:74:96:7b:
5f:b1:0b:a5:8a:4a:5f:44:f4:84:d9:ee:8c:72:ee:79:57:0c:
23:89:3e:65:7f:24:2d:e6:65:c1:a3:43:a1:ff:61:8b:07:5e:
59:de:c5:d8:e7:44:f4:e9:ed:fe:e7:ff:f9:cd:31:2b:ed:77:
ab:8b:ec:d6:8e:f4:7a:07:46:08:7a:45:52:ae:5e:08:7c:5a:
ea:3d:b9:57:53:39:1b:02:e4:28:30:5b:c6:e7:ba:f2:c3:bd:
54:6d:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:03:16 2025 by rpki-client