Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa
File: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (raw, json)
Hash identifier: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=
Subject key identifier: 0C:8C:41:B8:90:D6:45:A8:CD:D8:6F:17:A7:91:55:E5:3C:8F:4A:F0
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 01941F8C8A2D9B37C5A23D9F5CF68624F1BC
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41847
IP address blocks: 185.144.220.0/22 maxlen: 24
185.144.220.0/24 maxlen: 24
185.144.221.0/24 maxlen: 24
185.144.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8a:2d:9b:37:c5:a2:3d:9f:5c:f6:86:24:f1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c8c41b890d645a8cdd86f17a79155e53c8f4af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:88:c3:1f:b0:6a:5c:1b:82:fc:e1:bc:8e:
eb:8b:fc:0a:6e:55:07:d4:ee:c3:9a:81:71:e7:83:
a2:25:5f:71:2e:7d:a0:f0:fe:69:df:4c:58:60:d2:
44:0d:09:d6:db:18:25:f0:39:93:0e:57:d8:82:4f:
fe:cb:76:6f:bc:5f:dd:76:2a:6f:88:fd:24:91:89:
a5:56:f2:b9:a9:f0:be:cb:0d:31:bd:93:43:4a:bc:
6b:07:23:ea:49:d1:c9:d2:29:3a:e7:26:ec:2a:26:
fd:d8:c6:2b:cc:ad:7c:e3:e1:7f:af:d7:8e:d1:e0:
cf:3b:17:dc:31:41:96:78:f5:42:dd:d5:85:77:44:
85:3c:ce:e4:ea:79:cb:41:d9:4c:f7:a4:14:4f:2e:
d4:a9:4d:5d:b4:aa:2d:2b:af:5f:2a:59:87:a4:96:
98:3b:0f:da:9e:11:d4:de:c2:2a:4e:c0:4e:4e:57:
c0:a1:b5:80:66:fd:8e:67:bd:cc:bb:15:31:12:28:
d7:53:9a:39:fa:77:d1:a0:c2:bc:eb:5a:54:87:83:
6d:c1:32:f0:d8:89:08:38:0d:50:a4:5b:d5:e8:4e:
53:a9:b3:64:2a:12:90:75:5f:50:e9:eb:3d:a5:9d:
87:2b:f3:97:95:c0:03:82:95:29:39:0c:e9:8a:77:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8C:41:B8:90:D6:45:A8:CD:D8:6F:17:A7:91:55:E5:3C:8F:4A:F0
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:6f:b2:49:74:8d:8e:af:9b:5f:84:36:ca:b1:04:fe:e9:9e:
d0:97:8e:f1:be:cf:30:c2:bf:10:44:d9:64:dd:fa:1c:17:9d:
f6:25:97:b2:36:83:ac:f9:02:2d:98:7b:20:2f:39:94:bc:d3:
71:f7:ee:7c:4e:03:a8:9e:45:87:4e:8c:8b:1a:5a:3b:cd:46:
fc:47:72:da:3f:ff:4c:fe:21:c4:af:d1:49:a2:d6:f4:1b:31:
22:4a:00:c0:af:fe:8a:da:31:99:2f:80:a1:c8:a8:8c:fc:14:
80:cb:01:28:1b:13:a2:99:f9:c2:e6:92:e7:51:69:79:67:22:
64:f4:29:fb:26:43:15:27:d1:7e:5b:a6:9d:69:6b:fe:8b:80:
76:3c:c5:e3:82:ca:47:af:c5:0f:cd:7e:ba:74:74:dd:e2:90:
e9:0d:e3:e8:57:82:c3:85:41:59:15:e8:d7:95:af:3b:45:3f:
77:1e:2c:61:4b:f1:f3:31:7e:11:9a:9d:20:b9:be:9e:32:45:
93:d9:9e:82:8b:0e:de:04:9f:11:a9:ec:95:16:18:af:2a:98:
a9:80:14:36:b2:be:6f:b1:db:71:63:b6:4c:f3:2e:b6:06:f8:
84:09:bb:3a:f7:29:92:52:6b:75:d0:90:bd:43:ae:61:88:dd:
a8:ff:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:18 2025 by rpki-client