Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/pG0gZB0nkw3GnTji0o-IVbuNrD4.roa
File: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (raw, json)
Hash identifier: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=
Subject key identifier: A4:6D:20:64:1D:27:93:0D:C6:9D:38:E2:D2:8F:88:55:BB:8D:AC:3E
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 019421B2506AF4EA468B226788D5A174502B
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/pG0gZB0nkw3GnTji0o-IVbuNrD4.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212086
IP address blocks: 185.231.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:50:6a:f4:ea:46:8b:22:67:88:d5:a1:74:50:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a46d20641d27930dc69d38e2d28f8855bb8dac3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:9d:93:a0:37:51:d2:5b:25:9e:96:bb:01:
3d:5d:fb:96:59:db:2d:b7:8a:e1:46:cc:6b:16:cd:
83:44:b4:ed:a6:29:82:6a:d7:6a:61:7b:1e:7c:90:
80:5d:f9:b7:09:67:52:b0:cd:3e:c6:a1:d0:66:12:
80:b2:f7:f2:e4:1b:85:17:43:23:d8:56:0d:82:77:
c9:04:49:39:f9:df:27:58:9c:ad:9a:e5:34:83:f4:
a8:6a:6a:63:30:6f:96:5f:ff:cb:44:78:46:65:d7:
38:f3:8e:24:96:6a:7f:19:0f:6d:22:6b:8f:9b:17:
76:80:c2:5a:06:bc:59:11:43:8c:66:f4:d3:80:4d:
d7:07:f6:06:de:4f:12:37:27:cf:6f:50:55:84:d9:
81:13:8d:63:b6:25:d9:e0:fc:04:17:54:b5:6f:0a:
2d:8b:fb:c2:3e:d4:1d:c8:ff:aa:5d:6f:86:81:78:
8c:1f:6d:c1:5c:6d:36:d2:46:2f:ae:bb:21:e2:98:
ad:8f:f4:88:21:94:b0:dc:36:08:61:de:ca:c8:e2:
9d:03:a1:c9:39:69:8e:1c:43:63:0c:5e:41:eb:1b:
7c:3c:aa:81:96:de:e5:bb:40:0c:6c:be:da:2e:48:
2f:13:c6:2a:58:e4:21:39:2c:7b:17:76:11:d2:78:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:20:64:1D:27:93:0D:C6:9D:38:E2:D2:8F:88:55:BB:8D:AC:3E
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/pG0gZB0nkw3GnTji0o-IVbuNrD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0b:c7:5d:29:e3:57:90:92:34:d6:fc:9c:58:eb:16:66:95:
d7:cd:ed:a1:ca:5a:47:fb:09:f5:cf:67:d8:31:5b:01:1e:4f:
ff:d3:de:c7:d2:b2:e6:15:58:1a:ea:f1:54:d6:18:ba:0d:14:
10:7c:e5:52:be:7f:14:f8:33:1d:aa:15:95:96:04:72:1d:a5:
75:7a:4d:8b:68:46:b4:69:34:5a:3d:74:2d:69:98:69:99:e1:
bf:5d:66:99:a9:e9:af:80:e4:1b:af:f4:a7:a5:0a:d6:aa:99:
fb:52:14:50:dd:3e:56:22:a5:c2:35:c5:a1:f4:43:5c:60:d3:
aa:d3:a2:c1:02:a5:b0:c0:7e:9f:b7:41:60:0f:ce:94:a5:42:
b1:40:ae:28:b6:01:87:c7:96:52:01:d3:fd:05:cd:a8:36:b0:
b7:f1:7d:74:c9:5a:6e:ba:93:83:89:38:c8:31:83:44:91:17:
41:97:b5:db:52:1d:a5:ec:f2:3c:ae:83:12:62:cc:45:4c:a3:
fb:c1:3c:2b:f9:bb:ca:a1:5d:12:82:2e:b6:54:21:dc:5e:48:
6e:d9:53:dd:4e:b0:93:b8:b5:f1:f9:0b:7f:1e:c7:11:7e:34:
aa:e1:b3:0b:8c:56:85:0a:d8:4b:80:f8:eb:c2:9c:28:9a:8c:
8a:ec:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:24:35 2025 by rpki-client