Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rcteLidFERvpW3aicyZGo9zBq-k.roa
File: rcteLidFERvpW3aicyZGo9zBq-k.roa (raw, json)
Hash identifier: cGt1yTW6OGCqQEjIYjL7yNvwob0EaCMvI1+m70PBnvg=
Subject key identifier: AD:CB:5E:2E:27:45:11:1B:E9:5B:76:A2:73:26:46:A3:DC:C1:AB:E9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369FB0FA1CEC3D820BD25C256EC1A1C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rcteLidFERvpW3aicyZGo9zBq-k.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 185.244.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fb:0f:a1:ce:c3:d8:20:bd:25:c2:56:ec:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adcb5e2e2745111be95b76a2732646a3dcc1abe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:0a:92:a6:b3:98:90:7b:db:ba:23:bd:c0:
1d:bb:26:48:54:16:27:2a:e5:0c:36:78:49:77:4e:
85:46:c3:25:84:be:f9:dc:18:39:d7:4a:60:6e:12:
1c:0c:23:84:7e:ff:6e:c8:10:4c:54:04:6c:0a:2c:
dd:22:09:fc:a4:4e:0e:3f:26:b1:9c:99:04:f2:8c:
57:9c:1b:8d:e1:b5:3d:16:00:6a:5d:56:93:48:e4:
bd:46:0d:15:d3:d1:08:5d:aa:27:0a:9d:68:bd:9d:
17:64:8e:52:e4:7f:be:14:59:48:ba:cc:eb:48:8f:
07:8f:ef:52:e7:a0:ca:93:eb:83:d6:53:a7:37:2e:
04:29:e4:fa:1a:6c:d0:ce:66:6c:81:8f:24:6a:3e:
fc:b0:21:ed:65:18:aa:d8:92:1f:3b:88:da:e1:85:
28:45:3d:25:b1:90:5e:d5:e7:99:8d:26:66:8d:3b:
e3:cb:b6:9a:84:74:83:00:ff:47:25:0c:1f:0b:6e:
0e:38:a3:7d:02:35:66:ed:eb:f7:9d:de:57:dc:07:
18:90:e3:41:b4:3c:3c:3b:93:86:24:93:07:b4:ed:
03:4f:e7:89:02:26:c2:b2:fa:18:42:fe:df:81:a7:
4b:5b:13:81:d6:89:90:a7:73:60:b1:e8:3a:46:f6:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:5E:2E:27:45:11:1B:E9:5B:76:A2:73:26:46:A3:DC:C1:AB:E9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/rcteLidFERvpW3aicyZGo9zBq-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.107.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e0:c9:1a:a5:3b:c2:8f:4f:3a:03:c0:b8:c0:ea:1c:47:df:
ee:da:3c:1b:3e:aa:76:c9:bc:79:51:66:79:23:c6:98:e1:df:
ac:b1:d2:14:e1:54:dd:dc:f6:77:f8:31:6c:2d:51:8f:02:04:
5e:15:47:aa:23:da:56:fe:4a:56:4a:2e:61:e5:77:fc:e3:67:
7c:64:a8:d1:1a:37:4c:f5:58:54:4c:ee:fd:2f:ce:75:18:23:
91:59:20:8d:b0:15:0c:f8:44:db:18:33:06:e7:9e:43:11:c6:
4e:11:28:61:06:e7:19:c1:c1:4e:73:b2:1d:96:2d:2a:8b:7c:
71:d4:85:ad:d9:27:5d:1e:74:f5:53:03:c7:67:55:0d:3f:aa:
87:cf:76:f5:ec:65:70:15:1c:8e:f9:a0:f3:94:0a:f1:b8:6e:
4d:41:d7:f5:86:56:2e:6a:44:2b:21:a9:a0:bf:da:93:56:cc:
a6:b1:d6:ef:c2:b2:b4:b8:c2:ce:5d:f0:0a:1b:0f:7f:04:82:
6a:e3:a5:3e:f9:dd:d3:44:b0:46:88:80:9d:36:be:e1:6e:98:
ad:fe:2e:c5:fd:62:10:f1:37:36:c0:2e:3c:c4:69:56:21:5a:
17:b5:41:4e:2c:fc:f8:e9:7d:bd:b7:07:12:2a:e9:f1:fc:25:
b4:5d:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:48:38 2025 by rpki-client