Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/AcEkQsHgOk9cJvafcwY_24-gqJU.roa
File: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (raw, json)
Hash identifier: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=
Subject key identifier: 01:C1:24:42:C1:E0:3A:4F:5C:26:F6:9F:73:06:3F:DB:8F:A0:A8:95
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019422FAF2A3AF09AA5C65473D342E7245EE
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/AcEkQsHgOk9cJvafcwY_24-gqJU.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41699
IP address blocks: 195.170.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f2:a3:af:09:aa:5c:65:47:3d:34:2e:72:45:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c12442c1e03a4f5c26f69f73063fdb8fa0a895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:d5:be:c4:4a:96:ca:d4:7e:5c:5a:30:f6:
a8:92:1c:2d:01:9a:dc:6d:ca:59:91:ea:7b:16:23:
4f:8c:eb:1b:9e:8a:28:63:b2:6c:db:eb:46:d3:cc:
f0:28:73:69:14:c9:d3:b0:7c:0e:5c:ac:00:89:26:
ea:55:68:6f:48:4e:a5:e5:c1:93:99:85:8a:71:8f:
a1:c9:7c:7a:83:c6:6b:ec:48:c4:be:e3:df:27:6f:
3f:b6:81:27:28:14:7a:50:aa:81:1e:d1:bd:8d:b3:
d3:98:34:0f:0e:dd:26:aa:a7:ef:be:ba:03:4d:16:
20:1b:41:79:45:be:4d:86:51:0c:92:8a:06:e5:dd:
09:d2:c2:65:09:92:aa:f8:0c:ad:8f:ba:01:c9:0c:
9a:09:cb:ac:c2:ac:eb:1a:50:bb:57:89:7d:6c:9c:
1d:c4:dd:fe:45:c6:34:a6:af:7b:cc:06:b6:08:e3:
ee:59:0f:d2:31:26:77:82:91:8c:30:94:30:0f:3e:
f8:cc:ce:a6:8b:13:ab:f8:31:9e:c2:fa:68:f2:d8:
15:3f:1a:ef:fa:3f:dc:24:15:6f:88:a7:0f:63:6c:
f7:31:e2:5c:b7:03:53:5c:fb:3b:fe:5c:d4:b0:13:
05:40:0f:fd:b2:ca:4c:e0:9a:75:35:25:ff:05:de:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C1:24:42:C1:E0:3A:4F:5C:26:F6:9F:73:06:3F:DB:8F:A0:A8:95
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/AcEkQsHgOk9cJvafcwY_24-gqJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.185.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d3:c2:a3:53:ac:e3:9d:2e:c6:0c:b5:b5:fc:35:44:e4:f0:
68:ef:44:79:22:cc:3d:e7:7d:3f:71:69:d2:b1:48:d9:ee:f1:
5b:2e:e4:d1:de:24:9c:d7:0c:4d:5f:a8:8b:e9:a8:01:71:54:
22:44:d1:66:40:34:48:42:1b:bf:f2:50:85:6f:50:cb:6c:1f:
7b:88:7a:a0:03:28:8d:ed:06:e3:8b:d3:2b:a4:8a:d7:34:bc:
8b:ac:e2:4d:ed:25:2e:3f:d0:ae:c7:0b:17:a5:7e:98:72:e0:
92:c2:a4:7b:f1:e9:52:86:6d:9b:e9:b2:4d:7f:6b:4f:d0:f4:
34:e7:e6:a5:4b:f0:4d:73:cb:00:e4:6c:fd:d1:ef:da:82:d4:
29:3b:69:b2:ff:cf:af:32:4d:ab:22:04:ae:c7:fd:9c:a6:98:
9a:c8:03:cc:de:df:13:4f:21:ea:f5:be:94:c3:d1:44:77:a4:
2e:22:5e:b8:75:20:dc:93:ff:96:dd:0a:86:8e:86:18:be:61:
c2:36:b5:fb:0c:72:ff:25:28:00:55:43:f7:7b:50:ab:3a:fb:
97:8a:04:90:bd:16:eb:a7:eb:da:bd:bb:dc:34:67:67:d1:3d:
5a:2f:0b:ca:91:00:38:81:6e:c5:03:88:96:9a:5d:5c:0c:41:
d4:99:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:18 2025 by rpki-client