Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/1-BU0QGGPOY6StLl6EjdaPUoRp0U.roa
File: 1-BU0QGGPOY6StLl6EjdaPUoRp0U.roa (raw, json)
Hash identifier: YErgeEfB3mK/ybWEoY6pFZ+o+6uteNHWASk7smyhzI8=
Subject key identifier: F8:15:34:40:61:8F:39:8E:92:B4:B9:7A:12:37:5A:3D:4A:11:A7:45
Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial: 0194228D23E87A2FDBF96DCA57D085A9E049
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/1-BU0QGGPOY6StLl6EjdaPUoRp0U.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209936
IP address blocks: 185.242.164.0/22 maxlen: 23
185.242.164.0/23 maxlen: 23
2a0c:e780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:23:e8:7a:2f:db:f9:6d:ca:57:d0:85:a9:e0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8153440618f398e92b4b97a12375a3d4a11a745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:98:70:aa:6d:d2:28:40:74:c3:e9:cc:c5:
05:79:36:bc:0d:c8:08:bd:6f:78:78:e4:27:1a:6b:
82:c7:bb:6b:24:03:82:58:81:1a:b7:37:22:10:c4:
75:e2:f6:bf:e3:7e:34:31:b8:d9:5a:99:b6:29:e6:
0d:e2:31:32:26:6f:52:31:10:e8:de:f2:0f:38:88:
ba:44:0d:56:88:96:1a:dc:16:f4:43:7f:c6:4d:f0:
53:fa:66:16:86:8f:1f:30:03:dd:24:d3:8d:fc:8f:
a9:ce:1f:2f:ae:fa:15:09:80:1f:72:8d:60:49:71:
b8:f9:67:7e:22:2a:91:c4:da:12:67:8f:2c:e1:25:
cc:17:24:95:c2:c9:f4:53:b5:3d:6e:ff:69:27:d2:
6b:20:61:94:9a:97:23:19:f4:1d:69:50:ed:60:1a:
6a:65:f5:93:9f:19:e2:9c:b8:55:ac:2c:7c:a5:ef:
cb:3a:c0:b6:db:f1:51:df:8d:f0:44:fc:ed:71:11:
fc:4a:02:30:a7:68:1b:5d:b5:24:b0:15:c4:ce:b0:
af:64:0a:1a:dd:fd:c4:42:65:2e:03:d8:e9:d8:0e:
cd:54:58:b5:9d:25:93:7a:26:a5:06:53:a3:36:cb:
b2:56:47:34:41:0e:ea:62:3c:d4:83:c0:99:1c:df:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:15:34:40:61:8F:39:8E:92:B4:B9:7A:12:37:5A:3D:4A:11:A7:45
X509v3 Authority Key Identifier:
keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/1-BU0QGGPOY6StLl6EjdaPUoRp0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.164.0/22
IPv6:
2a0c:e780::/29
Signature Algorithm: sha256WithRSAEncryption
29:a3:ff:c8:7d:7b:46:f4:35:89:2f:6c:ed:a6:a4:75:d4:78:
11:55:ba:e2:4c:b8:16:08:3b:61:75:cb:b2:cd:6f:df:83:0e:
2a:e7:68:54:44:b7:01:99:5e:ca:ec:9a:b0:c3:5d:6a:f1:0f:
2c:b9:70:98:a8:b8:e6:bd:a8:30:c0:46:60:e4:7f:9c:4d:f0:
8b:01:7b:a6:7b:6c:7f:99:fa:29:00:a6:71:53:ce:36:bd:35:
47:35:37:11:d1:35:c6:0a:b2:54:cc:05:10:ac:dd:3f:3d:1c:
31:29:fd:0d:01:c8:52:79:fd:23:bf:49:ba:4f:ba:fe:f5:c5:
1a:46:ac:1f:34:50:b2:7e:50:15:c8:fb:51:ae:d0:c4:b2:2d:
49:ff:5e:cd:a9:66:a9:93:7c:1a:ec:02:14:18:89:43:55:ab:
2b:1f:6d:ac:36:b8:ec:55:27:94:57:2e:95:81:3d:82:2e:d6:
f8:ca:c7:ec:77:1c:5d:b3:71:ae:6a:d6:20:34:4a:95:45:a9:
75:80:c8:b3:a5:55:74:52:49:e2:35:fc:1f:70:e2:38:d6:d4:
05:4a:ea:8b:44:3c:6e:de:d4:e7:f5:a1:12:79:c0:ea:86:6b:
e1:c8:e2:54:2a:ca:23:41:a3:12:dc:aa:6f:a2:81:bf:c0:02:
81:9d:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:07 2025 by rpki-client