Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/0LPzaTRGADRQ7NYT2u33MSGVUAc.roa
File: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (raw, json)
Hash identifier: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=
Subject key identifier: D0:B3:F3:69:34:46:00:34:50:EC:D6:13:DA:ED:F7:31:21:95:50:07
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 019426D9F5673F1CFED992BE4E00E6172AA8
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/0LPzaTRGADRQ7NYT2u33MSGVUAc.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 185.84.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f5:67:3f:1c:fe:d9:92:be:4e:00:e6:17:2a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0b3f3693446003450ecd613daedf73121955007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:4c:49:48:0e:bf:a9:8f:84:e9:7d:fd:92:
03:1d:50:30:c1:c7:1d:39:48:c5:db:4f:e9:ea:6e:
0a:5d:9a:ea:62:cb:61:1f:1c:ff:78:9c:39:1a:7b:
7e:7a:e7:93:d1:ce:f4:40:9b:8a:68:55:8d:f2:fa:
5e:72:93:13:cb:aa:3c:26:53:12:96:7e:f4:4d:89:
b7:a6:64:24:58:6a:31:b7:ef:f9:0b:eb:c2:df:85:
89:f1:af:fa:3b:e2:0e:69:bc:2b:67:06:c6:68:8c:
f4:95:5d:41:d0:bf:8e:97:01:5c:0d:be:5d:6b:46:
22:0f:10:ee:fb:85:b4:4a:75:75:b9:be:f5:a0:f6:
c0:b4:7c:e8:2c:98:20:9d:c1:db:ab:2f:e6:65:99:
e9:6c:de:4f:5d:75:ce:34:55:45:53:42:ee:a6:45:
71:6f:d2:f6:bf:55:fa:22:9a:a6:f5:4e:ff:a7:45:
a1:6e:14:5f:ed:b9:be:47:b1:30:db:74:6d:55:62:
29:3e:59:5c:e2:fc:b5:a0:63:a6:a5:c5:c1:e5:f6:
97:75:71:36:71:79:cf:4b:22:ec:04:cd:c5:19:5d:
79:7d:6e:77:cf:00:26:73:97:af:46:f9:48:00:15:
6d:53:89:42:6b:2b:e1:67:bd:2d:ca:f2:1a:fe:25:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B3:F3:69:34:46:00:34:50:EC:D6:13:DA:ED:F7:31:21:95:50:07
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/0LPzaTRGADRQ7NYT2u33MSGVUAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b0:64:5c:6c:2d:d9:90:f7:58:81:02:45:d7:72:96:da:28:
ce:8d:19:b8:2f:5a:53:79:81:51:4e:ba:d7:6d:4e:a6:f7:95:
bf:e8:62:5a:05:29:98:89:0f:2c:f0:1d:59:70:42:72:99:ec:
58:bb:42:e3:a2:44:89:f7:ff:4f:19:9b:f9:dc:f6:0f:7b:7c:
dd:de:cc:b8:d3:8d:36:6d:c1:98:ae:8f:b0:10:e1:07:87:d2:
80:03:c4:fe:da:a9:27:6d:fd:b9:28:d3:24:79:76:f6:2e:9b:
f3:d0:60:b1:e6:3d:52:ae:82:1f:e5:9e:c7:0a:da:a0:6d:e8:
f6:f2:b4:8d:ef:7a:49:f6:a0:32:40:09:df:18:d7:8e:4b:87:
1d:0f:24:a4:d8:65:bf:31:03:d1:48:c2:54:61:08:d5:57:b1:
a9:92:91:3c:bd:1a:24:4e:32:f7:c9:f3:41:ca:84:35:ff:fe:
25:a2:ea:f5:80:63:23:75:67:ab:2c:e1:28:af:6c:44:d7:80:
93:a1:63:3c:16:a0:bc:ba:8e:79:f6:d0:f2:b3:a9:4f:c7:fa:
6a:cf:39:49:e6:c3:d1:22:23:de:bd:db:4a:e1:b5:85:9e:bb:
a5:90:d7:48:76:bb:b8:45:d9:d1:78:1f:35:31:b9:49:73:9d:
fa:d9:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:58:33 2025 by rpki-client