Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/s25eqAa9Ba2subgM6OQ8ydOvSIs.roa
File: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (raw, json)
Hash identifier: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=
Subject key identifier: B3:6E:5E:A8:06:BD:05:AD:AC:B9:B8:0C:E8:E4:3C:C9:D3:AF:48:8B
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 01942143F498EF552527C854339B0768B7C6
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/s25eqAa9Ba2subgM6OQ8ydOvSIs.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50563
IP address blocks: 185.102.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f4:98:ef:55:25:27:c8:54:33:9b:07:68:b7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b36e5ea806bd05adacb9b80ce8e43cc9d3af488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:8c:36:7e:a9:cf:45:6c:30:d0:6f:f4:aa:
d0:6c:58:f4:19:af:19:45:ee:5e:fe:5c:5b:53:39:
66:12:25:59:a9:d9:6e:2b:dc:22:7c:5d:52:d8:80:
65:6b:3d:54:2b:93:48:e8:94:c0:bf:75:17:d1:f5:
0e:e5:d8:6f:51:79:ce:02:e1:79:65:8a:00:75:33:
f6:61:3e:93:1d:a8:ca:f4:42:fd:25:16:f9:6b:a2:
9e:2e:25:d8:db:d9:b7:3c:5f:8c:b9:38:7d:47:8a:
9a:24:52:1b:0d:27:8c:05:f7:cb:29:76:bd:94:f2:
51:c2:81:7e:cf:19:17:0a:a3:6d:ca:e3:f6:1f:3d:
89:23:8b:96:9a:72:c0:66:d0:8e:81:62:53:ae:9d:
7f:5e:06:ff:cd:e2:ef:88:90:f0:39:c8:71:5a:9f:
78:a0:70:4d:54:22:ff:2d:9c:2d:1b:f8:7c:0d:cb:
2f:c4:00:f4:e8:c5:de:17:95:fb:14:01:d7:ca:33:
73:c9:71:4f:0d:33:64:88:e7:6c:ba:fe:a4:73:b6:
e2:9b:75:21:6f:93:45:49:df:68:fa:67:29:62:4c:
6d:8e:41:7a:83:ae:f5:1d:75:2e:c8:70:6b:38:ef:
70:38:93:70:06:22:e5:a4:46:ee:7e:f7:86:99:6c:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6E:5E:A8:06:BD:05:AD:AC:B9:B8:0C:E8:E4:3C:C9:D3:AF:48:8B
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/s25eqAa9Ba2subgM6OQ8ydOvSIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.210.0/24
Signature Algorithm: sha256WithRSAEncryption
82:43:a1:8a:ff:9e:eb:c1:d5:a1:d6:67:d8:c1:16:8e:7a:66:
2e:09:10:ad:22:95:cb:1c:4e:82:89:37:2d:aa:af:ef:6b:97:
1d:58:d1:d5:2a:dd:5a:dd:c5:31:79:37:72:af:72:39:66:df:
e6:94:b0:7a:28:8e:ad:98:c2:f3:ec:10:e5:f6:03:ac:58:ab:
a9:45:6b:43:b4:6a:d9:28:01:c3:7c:57:2e:45:a6:ef:f1:49:
0e:d4:ba:a2:85:68:3d:0b:2f:40:93:43:65:cf:51:06:28:98:
83:71:74:66:94:69:f8:8d:de:39:ac:83:5a:d6:ae:77:b8:ae:
e6:c7:16:e5:dc:0e:96:7d:59:06:08:6f:63:a8:9f:75:44:4b:
55:4e:1e:99:be:fc:a0:5a:7f:b8:4b:a1:45:0a:9c:d8:6e:4c:
d5:c3:b2:f2:61:8c:e4:ff:c7:59:8b:ee:93:f4:97:11:de:2a:
b2:51:21:91:b3:97:d8:72:82:2d:9e:4a:54:b3:29:c5:bb:16:
64:b0:79:9b:0e:a9:a8:dc:d1:3a:b6:15:fd:b1:79:bc:79:05:
7e:41:ce:8d:cd:81:55:b2:d1:94:77:0a:b1:54:2b:7d:f4:b9:
90:c7:bc:25:23:88:c0:60:14:36:bf:0f:fc:2d:83:58:eb:a8:
ef:0b:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:35 2025 by rpki-client