Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CkXXQPJaaUDcGZXca877DoZAZBs.roa
File: CkXXQPJaaUDcGZXca877DoZAZBs.roa (raw, json)
Hash identifier: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=
Subject key identifier: 0A:45:D7:40:F2:5A:69:40:DC:19:95:DC:6B:CE:FB:0E:86:40:64:1B
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0196464D906C6B69624F5BFA2BE7CBBCAC25
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CkXXQPJaaUDcGZXca877DoZAZBs.roa
Signing time: Fri 18 Apr 2025 00:30:10 +0000
ROA not before: Fri 18 Apr 2025 00:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 185.199.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:4d:90:6c:6b:69:62:4f:5b:fa:2b:e7:cb:bc:ac:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 18 00:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a45d740f25a6940dc1995dc6bcefb0e8640641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:da:df:c5:09:80:99:78:b0:31:af:aa:5c:
b4:51:84:01:2a:d9:15:90:2d:bc:88:3d:16:9a:67:
41:70:5b:f5:c0:e9:6b:07:1e:a3:8e:cb:e8:21:2b:
d2:bc:82:41:49:88:ef:32:84:88:82:8d:8d:5f:da:
ce:85:85:a2:6c:63:55:d7:d3:c4:a9:c2:46:31:46:
de:98:a4:9d:c5:16:59:b9:57:85:9a:a7:d4:72:f9:
e0:f7:48:c2:4c:1e:01:bc:25:89:bf:22:96:56:b3:
ae:a9:d0:da:11:d4:b4:30:b5:2a:ff:e6:61:60:ba:
20:19:35:05:78:e3:14:a2:26:ca:3d:f6:2e:70:51:
34:4c:aa:63:3a:06:78:80:eb:48:65:7d:e7:49:d7:
9b:dc:de:5a:f2:33:d5:46:4d:28:51:70:12:f2:58:
39:ac:b4:a6:ba:1b:23:14:05:0e:6e:f8:84:24:8a:
3a:9b:d4:92:8a:2d:08:6b:c6:06:72:29:64:b6:f3:
64:c6:7f:af:f0:fb:18:d5:09:35:2a:f8:df:ae:a6:
b2:e9:a1:31:e3:79:bc:47:f0:85:d9:38:80:33:2a:
23:15:28:2a:00:3c:30:d6:bd:41:9e:d4:9a:55:71:
fc:14:dd:bc:d0:23:22:68:1c:87:a0:f9:25:9d:c4:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:45:D7:40:F2:5A:69:40:DC:19:95:DC:6B:CE:FB:0E:86:40:64:1B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/CkXXQPJaaUDcGZXca877DoZAZBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.150.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:7d:d2:4b:59:76:f9:13:9c:11:39:1a:78:52:aa:d2:da:1c:
31:aa:04:fd:4c:14:24:b0:24:f9:8e:bb:49:37:c1:22:95:b8:
36:f0:ae:47:c4:a2:4e:a2:5f:3b:53:e7:5f:d9:8c:1b:eb:51:
06:36:88:de:ca:b8:2f:02:3c:11:69:26:71:ce:03:c8:3c:97:
f0:01:41:6e:db:0b:c7:20:58:ee:68:8f:37:0e:6f:6f:a8:66:
21:7f:14:8c:1e:a7:95:51:f7:a7:4d:35:3b:66:44:c2:50:c0:
d8:43:28:69:dc:3e:29:21:07:45:58:c2:54:bb:49:3f:ae:89:
4b:dc:bf:94:df:fc:b9:58:ea:51:5a:37:62:46:d5:77:5b:a6:
08:f9:a4:99:f9:3c:26:86:1b:6e:e8:ff:3b:c4:fe:0d:60:5f:
a9:8a:c4:54:11:7c:f5:a2:ca:67:18:fb:77:50:64:b0:dc:9f:
7c:b7:8c:9e:46:cb:56:3f:c3:94:db:5e:6f:d0:95:b3:e0:9b:
e0:b8:97:5b:8b:0d:1a:ed:03:33:1c:6c:8f:0e:00:a3:df:e8:
ff:68:98:d1:95:e3:85:b3:6b:1d:17:58:6c:fb:3b:5c:03:17:
be:c9:51:24:58:f9:0b:3a:39:cf:22:f3:b7:25:7f:a4:c6:4e:
a5:4b:6a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:23 2025 by rpki-client