Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa
File: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (raw, json)
Hash identifier: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=
Subject key identifier: 6A:4F:D7:2E:3E:C1:65:27:D1:F6:F3:80:9E:7B:D3:3A:60:C4:AF:A0
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 01942369FF88EB271A2AD8E93DC19B35CE2E
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16312
IP address blocks: 185.116.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ff:88:eb:27:1a:2a:d8:e9:3d:c1:9b:35:ce:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4fd72e3ec16527d1f6f3809e7bd33a60c4afa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:00:8e:dc:5b:75:03:00:a2:7c:c9:b5:1e:
f8:db:2c:7f:e8:8c:45:d9:2c:1a:92:40:37:8c:0e:
55:42:ab:e9:ed:7e:cf:25:33:93:7b:e1:75:83:7a:
eb:57:69:94:7c:dd:20:6d:c8:43:35:3f:02:cb:64:
7b:ac:36:77:24:e4:bb:89:a6:3a:b8:34:1b:52:50:
48:59:4c:b0:3e:b3:58:63:4f:e7:32:68:f2:73:52:
ae:46:5a:54:08:55:df:f4:b3:97:9b:b5:99:a2:8e:
0e:85:21:b6:ae:55:80:4e:05:8b:51:29:49:99:25:
c8:d3:1b:5d:f7:3d:9a:ef:9b:29:c7:69:13:04:4e:
76:6f:ae:96:cb:b6:60:07:d0:13:aa:0c:34:4a:07:
ac:3b:70:17:55:e2:d2:5b:18:99:36:1f:f1:01:a3:
65:af:56:21:2d:00:59:71:d0:d0:bf:65:79:db:58:
4a:e1:d6:e1:e7:22:3f:56:91:48:ff:1d:fc:a0:c3:
57:f8:75:06:4c:1a:cb:af:54:3a:65:c8:26:b6:1e:
74:6f:50:3c:8a:cc:39:d4:4a:08:f0:ff:1d:3a:58:
a3:51:42:15:80:bd:ca:63:03:00:a5:cf:f6:e8:a5:
29:7f:9b:f5:ac:f9:96:c9:e9:d9:97:e2:37:9d:7c:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:D7:2E:3E:C1:65:27:D1:F6:F3:80:9E:7B:D3:3A:60:C4:AF:A0
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.240.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:a0:d4:2b:9c:90:2a:10:30:f1:c0:84:d0:1d:71:46:bc:a5:
2d:b4:89:d4:7f:d5:06:76:99:c3:0f:42:5f:f8:15:ed:1c:ca:
e1:08:dd:9b:25:f0:84:8b:81:38:eb:ad:7a:58:4b:93:7a:36:
17:96:10:79:a8:99:3f:b7:5d:21:61:3c:e5:b4:1a:bd:45:de:
7f:56:91:fb:3a:df:59:e6:e6:81:71:c2:34:71:0f:a3:22:36:
79:16:7f:66:d2:82:63:08:71:fe:12:f8:45:2d:bc:f6:e8:3a:
44:21:9b:55:7e:4c:1c:4f:be:06:f2:7d:05:34:12:ef:03:39:
3f:29:6e:8c:b0:3d:b6:27:c1:5c:9c:58:d7:d4:ef:05:c8:63:
5c:c2:57:4f:3a:b5:d5:61:f3:dc:61:02:ed:76:e0:00:f4:0b:
15:3d:3a:78:12:43:b6:82:6a:17:86:4a:0a:23:a9:1d:7b:f3:
65:2c:cc:e8:d6:6c:3e:ac:d9:63:71:a8:d6:c1:eb:65:75:2f:
e9:ec:00:f7:13:18:26:4c:9a:7d:c7:d1:dd:ec:73:95:75:c9:
46:21:bc:ec:95:ba:54:df:29:c5:5f:4b:eb:d1:73:db:9e:b8:
76:61:34:b0:07:a7:e5:ea:8d:94:7d:7e:cb:0a:6f:fe:26:25:
c2:80:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:33 2025 by rpki-client