Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa
File: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (raw, json)
Hash identifier: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=
Subject key identifier: 88:5D:21:5A:A5:7C:9F:2A:ED:C0:63:31:BD:79:29:79:95:7E:01:DD
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 019422FB42AC81644B895C53F632FA4BD8D2
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa
Signing time: Wed 01 Jan 2025 17:47:59 +0000
ROA not before: Wed 01 Jan 2025 17:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12874
IP address blocks: 185.190.214.0/24 maxlen: 24
185.190.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:42:ac:81:64:4b:89:5c:53:f6:32:fa:4b:d8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jan 1 17:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=885d215aa57c9f2aedc06331bd792979957e01dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:05:d3:e1:30:e4:89:32:56:ac:f6:db:20:
55:ba:0d:d4:3e:c4:13:43:a7:c4:80:13:8d:76:cb:
7d:01:25:35:08:94:4c:ae:a0:ad:c9:6f:8d:7d:a0:
86:01:30:9a:34:ad:f3:db:6b:34:eb:76:5c:a4:1d:
3f:42:a6:4d:df:46:d0:c5:36:24:16:e4:19:a8:f3:
23:5e:57:5a:89:04:56:3b:e7:54:e8:71:61:fa:3d:
db:14:a4:3d:5a:5b:38:99:23:97:35:40:fa:f0:90:
57:72:18:2b:2a:eb:99:a8:22:e6:cf:fd:16:ad:b9:
94:a5:70:b7:8b:f0:93:6f:a0:c7:8d:ff:f5:16:71:
74:84:92:91:bc:b2:db:1f:43:d7:24:78:17:98:f9:
a9:ab:dd:1a:d2:7b:e0:62:64:02:9c:8b:ad:12:ad:
e7:af:df:09:a4:59:b4:04:f3:32:19:98:79:30:26:
34:7f:4f:3e:f1:f8:51:e0:2e:68:b9:da:c0:35:44:
39:ea:9b:c3:52:cb:b5:89:0d:5f:a1:2a:c1:e2:b1:
b3:be:cd:dc:cf:ba:10:5d:b2:d6:91:cc:3b:dc:5f:
46:76:cd:cb:e3:fa:08:0f:57:33:c5:f9:49:d3:37:
c4:fe:c0:a4:43:c0:b7:07:b6:79:1f:76:0b:71:bc:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:21:5A:A5:7C:9F:2A:ED:C0:63:31:BD:79:29:79:95:7E:01:DD
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.214.0/23
Signature Algorithm: sha256WithRSAEncryption
48:05:7f:34:9b:f6:59:8b:30:56:ff:1f:57:d4:55:1a:cc:58:
04:1c:e2:40:ea:91:41:bb:cb:bc:3d:83:21:93:86:03:33:51:
33:a3:bb:31:15:2e:40:f6:87:6b:d6:db:c4:e1:8c:ee:ac:bc:
45:dc:f8:f0:9c:5c:dc:6f:ca:9d:1b:9f:6d:49:56:85:be:ce:
13:53:bf:3a:13:f8:84:01:58:19:cb:54:26:d8:91:a4:0e:f3:
78:8c:9c:1d:78:ed:b1:cc:a4:d6:51:67:e9:7f:8d:01:5a:c4:
07:25:4e:44:bf:59:ad:b4:ba:a4:0e:98:84:43:d6:1d:a7:7e:
b4:8d:a2:97:9c:61:fd:74:15:71:06:29:ea:55:e4:5e:53:95:
4a:3b:b2:c9:5e:ad:32:2e:15:17:45:ad:31:b7:5d:63:6e:4e:
55:e9:ba:f0:89:a9:db:c9:1f:61:56:e5:3f:08:c2:30:36:67:
d9:b6:d8:43:b3:52:36:1a:cd:f0:0e:90:b0:7c:a6:ee:0e:89:
3a:86:cf:cc:a0:f8:28:8c:cb:25:03:c3:00:c0:4c:79:93:93:
5d:ce:9a:41:dd:d5:2f:bb:2d:a2:98:5c:65:36:e8:5e:4d:d5:
74:7c:62:95:8b:00:db:62:77:7f:23:59:9e:c8:ba:ce:15:7e:
78:c4:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:26:58 2025 by rpki-client