Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/cQb4a56386hwKkX2XTV23EzTpVI.roa
File: cQb4a56386hwKkX2XTV23EzTpVI.roa (raw, json)
Hash identifier: T6mT7SHm8VLGp8LXtDhfbm2F1razovLuYTeTLKEqGFE=
Subject key identifier: 71:06:F8:6B:9E:B7:F3:A8:70:2A:45:F6:5D:35:76:DC:4C:D3:A5:52
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 0194258F59BC78A196B937F13CF2450544A7
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/cQb4a56386hwKkX2XTV23EzTpVI.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211894
IP address blocks: 185.116.114.0/24 maxlen: 24
185.203.113.0/24 maxlen: 24
2a0a:5480::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:59:bc:78:a1:96:b9:37:f1:3c:f2:45:05:44:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7106f86b9eb7f3a8702a45f65d3576dc4cd3a552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:51:eb:4b:83:c3:db:e0:37:68:ea:09:03:
e3:74:c8:9e:6d:8d:bc:a7:7b:40:0d:09:36:9b:33:
9e:e8:ac:4a:95:ab:06:d0:56:2d:0f:8d:08:48:19:
5b:57:e6:7d:fd:eb:8e:6a:a4:18:4a:2e:41:ac:3b:
a4:4c:3c:7d:b4:cd:e5:bf:9b:3c:86:6c:ca:cb:43:
93:c4:f3:2a:1f:0c:fc:b7:b0:4e:42:6d:38:04:42:
2c:5f:8e:47:ee:f9:53:05:0d:87:02:c2:4e:52:d3:
76:6a:d7:5c:f7:57:81:a9:11:7c:f9:e3:7e:db:c3:
a7:49:81:44:a1:fb:92:b5:14:38:82:10:0c:fa:b5:
3a:e7:1c:d3:e2:be:44:74:20:a9:fb:58:17:d0:3c:
5a:d7:fd:74:19:e8:df:4f:fa:2e:bd:0c:68:e9:28:
7a:75:0f:e4:67:c5:9e:10:b0:de:5b:f0:a6:39:ed:
88:6f:ca:ce:9a:f0:56:50:5a:44:8e:45:bd:6b:b8:
7b:38:e9:b5:eb:bd:f0:82:41:07:1f:80:8e:df:41:
23:db:5c:80:0a:08:9f:56:20:c6:f4:5e:d6:88:3c:
3e:a4:aa:d3:16:a1:d3:db:0a:b9:ae:9c:0a:70:fb:
4f:ec:65:e9:6b:1d:7a:25:6b:43:93:ec:e5:82:5a:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:06:F8:6B:9E:B7:F3:A8:70:2A:45:F6:5D:35:76:DC:4C:D3:A5:52
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/cQb4a56386hwKkX2XTV23EzTpVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.114.0/24
185.203.113.0/24
IPv6:
2a0a:5480::/29
Signature Algorithm: sha256WithRSAEncryption
84:ed:00:97:4f:e8:69:79:18:ba:f8:b3:82:4a:4f:a8:f3:63:
89:48:5a:63:66:65:84:da:df:a4:c1:e6:42:92:f6:e5:28:2f:
84:da:bb:d6:08:3d:60:89:aa:39:c2:26:87:d0:79:ee:f2:d6:
6d:db:4d:c7:90:8c:fe:8d:7c:46:9d:c0:db:fd:b8:37:8d:12:
0d:8d:aa:15:4b:76:c9:83:8f:b8:82:54:46:15:40:b6:d1:7e:
cf:93:7d:c9:8b:39:f8:53:b5:aa:e0:fb:15:f1:e7:16:40:6a:
e3:6a:1b:6e:92:9f:33:3d:2d:cb:85:ef:dd:6d:2e:2d:91:5d:
1a:a3:3f:6b:57:11:ba:40:af:47:d2:0b:15:9c:b9:42:8b:95:
f9:5f:d1:42:ea:6a:af:cd:cf:e6:10:a9:a3:be:13:52:90:02:
b8:0a:af:34:61:a0:9b:47:4a:73:c8:83:a7:c2:e8:cf:53:aa:
37:1c:bb:35:a7:6b:9c:13:97:3b:ca:25:6c:6e:58:0c:17:ec:
23:85:ad:da:df:b4:19:ef:89:15:68:f4:1d:e5:9b:a2:6e:9c:
88:ab:83:90:47:f0:65:83:9f:b1:e5:71:2e:c3:e2:32:f7:f6:
78:79:bb:76:60:50:af:96:8e:a9:96:8f:d6:67:10:25:75:0b:
f3:37:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:09 2025 by rpki-client