Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/05RXb99wN-uQvXxrzhInK4RsD3s.roa
File: 05RXb99wN-uQvXxrzhInK4RsD3s.roa (raw, json)
Hash identifier: UV1uMMo5K+NK6AVQ6fsxAakKbNHGpDMIrCb3Zm1QFRw=
Subject key identifier: D3:94:57:6F:DF:70:37:EB:90:BD:7C:6B:CE:12:27:2B:84:6C:0F:7B
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067DE618E80C75D8A9395BE9060BF04
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/05RXb99wN-uQvXxrzhInK4RsD3s.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212777
IP address blocks: 194.209.202.0/24 maxlen: 24
194.209.237.0/24 maxlen: 24
212.243.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:de:61:8e:80:c7:5d:8a:93:95:be:90:60:bf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d394576fdf7037eb90bd7c6bce12272b846c0f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:18:35:eb:17:33:34:e9:51:cc:9e:c8:13:
d7:06:bb:f9:74:41:30:e1:2a:e0:a3:bb:be:7f:31:
b2:9b:1d:4a:83:b1:6a:bd:67:8d:7c:82:44:03:28:
70:8e:40:ec:d0:ee:37:2c:63:08:32:a3:ea:58:c7:
a4:88:d2:5e:75:0a:aa:41:c3:9d:cd:67:f7:0b:8f:
e9:4a:24:a6:55:54:ad:73:e1:66:77:c6:8f:75:2a:
51:0a:d1:18:c3:ad:3f:3d:f2:70:36:b2:71:6e:3d:
31:f3:ab:c7:c3:27:c4:05:78:40:76:df:35:77:8c:
82:42:fc:39:d0:36:47:69:19:de:6f:34:ee:df:11:
3f:3d:f8:bc:b3:93:53:a4:d3:cb:d1:f6:cd:3f:00:
5c:26:83:49:a5:2f:47:17:98:73:13:28:80:f9:28:
43:7c:d6:e2:04:59:cc:cf:d2:44:bd:fb:46:e3:32:
90:ad:59:67:40:dd:5b:3b:00:88:c7:ca:4e:39:62:
fa:bb:68:be:0a:69:da:e9:5a:59:8e:d1:c0:0e:a5:
7c:c1:a4:03:16:90:08:90:f9:15:35:84:a1:ba:20:
ab:74:5b:94:6a:f7:96:7d:e0:80:99:d6:76:40:57:
08:5b:51:21:45:e3:a5:e4:e7:44:37:58:ef:72:0b:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:57:6F:DF:70:37:EB:90:BD:7C:6B:CE:12:27:2B:84:6C:0F:7B
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/05RXb99wN-uQvXxrzhInK4RsD3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.202.0/24
194.209.237.0/24
212.243.178.0/24
Signature Algorithm: sha256WithRSAEncryption
77:eb:ad:61:1b:3e:7d:76:87:ec:b8:73:a1:42:fa:79:ca:b2:
10:d1:b9:f5:fd:9a:63:30:5b:d5:f8:90:75:cf:68:f6:39:0b:
cd:04:87:36:b1:3f:7c:9f:b4:d2:bb:28:8d:2c:9d:8b:30:b5:
6c:d6:66:0f:77:7e:e3:c2:99:9c:5f:8f:36:b4:72:42:ea:2d:
08:d1:df:64:a5:1f:b4:7a:8d:e8:56:18:10:2f:c9:8a:ad:ad:
a5:e7:0f:54:50:8e:a6:e6:04:66:66:ea:72:17:7f:1f:b9:cf:
2b:ca:28:bc:48:b0:e2:62:58:35:1b:0a:9d:e0:ed:e6:16:c2:
45:16:fc:a2:16:e6:4e:93:b7:4f:60:9e:39:dd:1f:63:70:5a:
81:1b:6e:52:61:9d:73:f2:3c:21:64:f5:4e:54:1b:0e:72:7b:
c3:09:f7:0d:87:61:7c:90:1d:75:7b:59:1a:d6:7f:fc:70:7a:
e5:a9:6d:fe:93:b6:05:0e:c3:16:40:0e:df:2f:c9:57:34:b2:
68:7a:18:3c:bb:ae:72:3e:46:d7:6e:19:ad:ef:ec:47:d2:9f:
da:aa:38:68:3a:17:32:7e:3a:19:82:09:2b:f3:03:a6:9c:e3:
73:4e:8d:be:b1:a3:bf:b8:04:f2:09:cc:0f:81:5c:8f:fc:bd:
9f:ed:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:47:58 2025 by rpki-client