Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/lMvd5SqBL_Or0jhVPY7oWSF4yuw.roa
File: lMvd5SqBL_Or0jhVPY7oWSF4yuw.roa (raw, json)
Hash identifier: Z0xuaYoH87JP2hkLQ1lEz86Qpg9FfEJCXmemb0LqJF8=
Subject key identifier: 94:CB:DD:E5:2A:81:2F:F3:AB:D2:38:55:3D:8E:E8:59:21:78:CA:EC
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 01942827810C23EB3F196C269C274F52C1D4
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/lMvd5SqBL_Or0jhVPY7oWSF4yuw.roa
Signing time: Thu 02 Jan 2025 17:54:25 +0000
ROA not before: Thu 02 Jan 2025 17:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214359
IP address blocks: 185.122.252.0/24 maxlen: 24
185.122.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:81:0c:23:eb:3f:19:6c:26:9c:27:4f:52:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: Jan 2 17:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94cbdde52a812ff3abd238553d8ee8592178caec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:1d:7c:19:b2:dc:c6:68:f5:10:fb:5b:90:
52:44:20:9f:ee:c2:46:7e:fc:f8:06:35:52:c2:56:
ae:ad:1c:53:72:97:03:c7:e4:ab:6e:b1:9a:d1:24:
c8:02:79:da:4b:52:8a:9b:31:dd:b8:59:4f:0e:91:
c7:24:91:9b:bb:0a:eb:2f:81:de:b5:d8:f4:cf:54:
ca:5e:f5:b8:08:9d:eb:6f:21:7c:5a:7d:23:b7:82:
66:b7:36:44:83:e7:63:c7:1f:da:78:1c:1e:97:81:
8c:dc:d5:ee:fc:c5:79:10:0c:3b:28:d3:44:88:8e:
c0:d2:9d:da:67:78:15:9c:29:67:b2:f6:ea:fd:9d:
30:8e:e6:11:fe:2b:59:e8:44:62:70:54:b7:5f:fb:
cc:86:97:ae:cd:59:28:d4:9a:62:59:0c:3b:a1:af:
30:53:51:87:1b:8a:8d:12:38:8a:a7:dc:8e:fc:fd:
e1:98:e9:34:0a:37:de:d4:20:e3:50:95:5a:ff:db:
58:0b:70:ae:4f:4d:91:da:b5:55:9d:60:2b:c4:bf:
9f:09:ff:ee:de:55:41:c8:80:d5:6c:ff:1b:d4:5e:
3d:e2:2a:b3:17:e4:88:b8:b5:2c:7c:42:59:75:cb:
3b:54:9d:1e:16:80:db:f7:26:f7:1e:b9:17:02:d0:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CB:DD:E5:2A:81:2F:F3:AB:D2:38:55:3D:8E:E8:59:21:78:CA:EC
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/lMvd5SqBL_Or0jhVPY7oWSF4yuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.252.0/24
185.122.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:92:a6:2d:52:97:7b:19:2d:6e:77:52:dd:45:25:49:47:b5:
de:38:65:e9:52:4e:c9:ea:3e:f8:3b:a3:be:ce:da:ce:c7:9d:
42:7e:45:2c:54:ce:8a:fd:a8:12:13:74:01:5d:fd:54:e0:14:
53:8c:d9:14:4f:a9:f0:e2:4f:c0:3e:48:92:47:91:c4:f3:35:
19:a0:50:ab:a7:15:ab:68:70:50:25:88:e2:97:c9:0f:d1:57:
01:33:04:a3:53:7a:a3:86:a6:65:75:72:a1:16:5b:9d:af:1e:
e8:6f:f9:4a:84:66:7f:1c:f0:71:e5:58:ec:d4:40:4f:bc:65:
be:ad:ac:c5:7e:1e:98:a3:b6:e0:4f:46:3b:f0:03:70:d5:4a:
9a:62:0a:fb:ed:51:52:b8:54:af:ae:af:cd:85:30:34:c2:82:
d3:25:a2:3f:96:8f:4d:01:ed:ef:01:81:71:cb:62:e6:4c:57:
4f:9b:4c:6c:05:e2:c6:a2:e5:0b:62:b6:f1:b0:5a:8e:f2:c0:
47:59:3a:b8:3c:bd:e3:c7:02:ab:df:43:80:7a:23:98:44:90:
ec:23:8c:14:de:e1:38:47:38:e0:e2:61:19:73:71:ae:ae:ed:
dc:68:c0:7a:91:96:1c:ce:82:73:2f:ee:ae:c3:4b:b7:08:94:
48:48:36:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:55 2025 by rpki-client