Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/paDHFexShR8IgT1Cfs8ojH6itFs.roa
File: paDHFexShR8IgT1Cfs8ojH6itFs.roa (raw, json)
Hash identifier: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=
Subject key identifier: A5:A0:C7:15:EC:52:85:1F:08:81:3D:42:7E:CF:28:8C:7E:A2:B4:5B
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F142B4A9715C152F302BF7086661F
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/paDHFexShR8IgT1Cfs8ojH6itFs.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 185.131.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:14:2b:4a:97:15:c1:52:f3:02:bf:70:86:66:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5a0c715ec52851f08813d427ecf288c7ea2b45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:64:87:f0:9e:00:1a:e0:46:4b:bc:a8:ae:
6e:29:34:fc:62:23:4a:d5:52:b1:43:73:fb:ff:b4:
aa:79:53:a8:20:f4:ed:68:41:5a:37:64:17:34:18:
8d:5e:64:12:67:7a:52:e0:57:3e:c5:25:69:81:bf:
ea:86:05:f8:6d:a2:8f:3c:19:32:4a:d8:0c:f6:6f:
40:a2:d1:24:63:ae:a0:05:bb:a7:39:4c:15:1c:8f:
58:28:c2:c8:c3:8b:3d:bc:9a:25:9a:04:55:6b:2e:
b4:d3:66:02:6f:ce:c9:96:90:87:93:5f:9c:b9:b0:
cc:2a:75:53:26:42:9e:ed:58:f0:0f:01:cf:cc:c2:
49:61:0e:0a:0a:fb:fb:ef:ef:b2:2a:0c:55:a7:0f:
6e:6b:8b:88:43:7b:02:64:dd:ce:d8:d9:01:93:ae:
92:78:78:1b:01:61:99:4c:d9:13:8a:7c:e4:89:46:
a9:8e:04:67:58:42:e8:0a:ab:be:12:e9:82:90:c9:
cd:f7:dc:60:9f:3d:be:a3:7d:7a:9e:54:f7:cb:0d:
66:6f:7e:60:6e:aa:ad:11:98:34:b1:9b:be:dc:73:
3d:69:b6:43:6d:eb:02:12:24:19:c8:1c:8e:8a:4b:
41:33:03:76:64:9a:64:c3:e9:d0:80:3a:35:7a:8a:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:C7:15:EC:52:85:1F:08:81:3D:42:7E:CF:28:8C:7E:A2:B4:5B
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/paDHFexShR8IgT1Cfs8ojH6itFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6a:57:98:78:30:6d:95:37:14:06:d8:0a:cb:69:d2:fa:e9:
98:51:b6:02:35:f1:76:54:0f:fc:99:76:84:4f:44:5f:7c:c5:
bc:fc:f5:56:75:9c:96:8a:a7:15:6e:b9:e7:61:21:db:dd:46:
77:d7:05:89:14:28:4a:9e:e0:34:11:a0:6b:9b:f3:e5:b1:49:
fc:0b:00:2b:c2:51:50:ff:56:18:53:41:7a:63:77:c7:70:91:
0a:a0:13:96:14:c0:2f:98:40:69:c5:b5:ab:85:f5:6d:81:98:
04:aa:26:d9:ab:23:08:b6:19:7a:09:43:ed:c5:25:62:c8:c5:
0d:91:02:b9:3a:ad:41:0b:b7:81:3b:05:7a:48:d4:11:fb:75:
55:59:50:99:00:3c:23:fd:30:e8:5a:e4:c3:8f:13:d2:77:c2:
a2:95:d5:2a:6c:5a:d8:be:ca:5c:76:cd:00:7a:51:87:4b:ad:
75:28:6a:c4:8b:cd:92:f0:60:5e:db:cb:5f:d5:54:76:15:bb:
2b:6e:5a:ef:d8:38:36:b3:f8:7f:b6:84:53:fe:a8:93:96:37:
08:94:66:f0:d3:20:10:bc:07:8a:0c:3b:81:06:de:5b:08:c5:
05:4d:ef:8c:8e:f6:bf:6d:cd:0a:5a:72:39:08:da:f3:64:b5:
cb:d7:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:04 2025 by rpki-client