Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/xqvPkHVlDD3xuumnlHy2tF-Btw8.roa
File: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (raw, json)
Hash identifier: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=
Subject key identifier: C6:AB:CF:90:75:65:0C:3D:F1:BA:E9:A7:94:7C:B6:B4:5F:81:B7:0F
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 019425FD43ECFA0F47750966CF4F028FC8AF
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/xqvPkHVlDD3xuumnlHy2tF-Btw8.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211340
IP address blocks: 185.182.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:43:ec:fa:0f:47:75:09:66:cf:4f:02:8f:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6abcf9075650c3df1bae9a7947cb6b45f81b70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:5d:21:b6:e3:85:99:10:10:39:04:c6:ef:
2f:71:2b:2b:f8:76:1a:9a:5d:b1:40:34:27:c9:ff:
ff:86:5d:80:1f:9e:68:11:57:68:a9:88:84:0a:69:
09:54:a7:c0:1f:2c:40:15:59:a1:17:21:6e:02:35:
d1:bd:ef:56:9c:31:09:af:73:6a:b3:e8:28:de:fd:
e9:41:8a:ed:a5:e5:ae:d5:f8:6b:b7:47:64:77:a5:
16:b4:1b:33:dc:21:0d:dc:15:37:3f:b9:08:96:60:
58:51:13:5f:50:4c:6f:01:a8:1c:57:47:a0:81:b2:
42:50:69:e2:40:64:58:cc:56:4c:d0:04:8f:3e:ea:
54:3b:79:ef:68:2d:b7:ee:df:ce:b4:b8:e9:ac:70:
30:fb:62:d2:75:cd:b7:b1:7c:06:33:2b:01:f0:89:
c4:9c:9a:97:72:40:d3:b5:9b:29:5f:5e:cb:1d:41:
3f:8d:a3:1f:cc:ea:1d:1b:55:af:f4:c9:65:bc:e7:
2a:0a:10:3e:d9:19:44:af:62:46:d1:fd:c0:3f:3e:
b1:87:b9:08:cb:71:fa:76:50:d1:51:e5:2d:8d:4d:
69:d8:c5:71:48:45:d6:14:e2:00:8f:80:23:ef:01:
68:2a:74:89:25:bf:6c:d1:f1:d2:0d:c7:2f:b7:0b:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:CF:90:75:65:0C:3D:F1:BA:E9:A7:94:7C:B6:B4:5F:81:B7:0F
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/xqvPkHVlDD3xuumnlHy2tF-Btw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:44:24:cb:08:75:05:94:15:d9:36:aa:52:c8:49:a9:8e:9d:
5e:30:05:35:2d:04:d3:cd:d1:35:14:54:8c:a9:93:be:78:45:
c3:11:8c:cc:f6:c1:9f:42:a4:2a:80:1c:c8:f3:f2:86:77:b6:
77:ea:fd:20:cf:17:49:bc:70:dd:a0:31:65:91:bb:4d:bf:39:
85:93:53:34:63:2a:9e:5e:98:3d:84:4b:f5:bb:ec:af:03:b8:
ee:08:48:bb:62:96:77:4c:8a:36:2a:45:00:05:17:60:3b:71:
eb:49:0b:b0:66:69:ad:51:87:b6:1d:d1:df:d6:ef:68:3f:47:
2d:8d:15:23:14:ea:1e:d1:07:cb:97:0d:25:26:13:11:91:de:
58:33:a5:18:de:61:65:86:e6:94:d5:c1:9e:a8:93:ed:a9:c9:
f2:74:68:a7:36:2a:99:9d:76:56:b4:ad:c5:27:4b:3b:90:82:
92:27:6a:21:6f:8d:ac:2a:2b:88:37:6e:5a:dc:eb:08:65:e9:
6a:53:0c:45:33:7b:12:3e:11:15:de:15:fc:57:c9:30:ac:35:
f0:b1:76:9a:9c:90:ee:92:d3:d3:eb:c4:16:e9:7b:2b:81:6a:
c8:bf:c3:51:b0:64:b4:cc:a8:0c:bf:a4:bc:59:27:dd:d7:9d:
39:bb:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:06:06 2025 by rpki-client