Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/E0LmXjQbMH-5PikYPEcuzzsWqGg.roa
File: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (raw, json)
Hash identifier: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=
Subject key identifier: 13:42:E6:5E:34:1B:30:7F:B9:3E:29:18:3C:47:2E:CF:3B:16:A8:68
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 019421443280F839CD7BD4F69E806A3D0E12
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/E0LmXjQbMH-5PikYPEcuzzsWqGg.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7262
IP address blocks: 185.152.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:32:80:f8:39:cd:7b:d4:f6:9e:80:6a:3d:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1342e65e341b307fb93e29183c472ecf3b16a868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:47:11:36:f5:ab:47:69:ba:b2:30:f4:e2:
a9:b0:5b:f9:76:71:27:e5:a9:25:0a:81:d8:22:c7:
bc:e0:c2:64:80:b7:dc:c0:76:05:09:db:b7:c8:dc:
5e:92:43:c8:d1:de:cb:8e:69:fb:7c:72:e3:d3:8a:
72:60:ae:34:2e:86:a6:a9:8d:57:ef:ab:ba:da:28:
12:f9:37:37:73:ea:11:c9:08:8c:f6:c7:ec:a6:b1:
15:93:6e:ab:27:ff:50:01:57:f5:83:f3:68:22:40:
a1:70:a7:fe:08:78:d5:31:a9:9f:df:44:02:f3:41:
d9:8e:dc:63:6b:fd:6a:10:f5:89:55:c4:23:dd:6d:
36:95:fe:e4:ad:c2:9a:a6:eb:73:dc:dc:89:2e:9e:
29:38:66:a0:97:0e:96:60:96:18:e1:cd:48:ed:81:
20:d8:b4:7b:f7:d4:d1:22:8b:68:0c:83:1c:20:de:
aa:af:f7:76:21:32:55:49:84:84:df:a1:18:69:b5:
25:af:ac:70:2f:99:df:23:18:a6:1f:d4:5a:bd:3e:
72:b3:c3:32:29:7f:e2:4e:20:a1:2c:58:5f:48:15:
ef:9a:3d:24:c7:f4:2a:f9:5f:d4:61:e0:c5:f6:95:
07:43:c5:46:97:7c:3f:54:ad:fc:5f:47:d3:8d:89:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:42:E6:5E:34:1B:30:7F:B9:3E:29:18:3C:47:2E:CF:3B:16:A8:68
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/E0LmXjQbMH-5PikYPEcuzzsWqGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.51.0/24
Signature Algorithm: sha256WithRSAEncryption
33:29:a4:97:07:a3:ca:07:79:1a:09:af:73:d8:dc:72:d3:e8:
ba:0d:50:1c:e3:65:af:ed:aa:00:43:1a:3a:0a:d8:dc:45:5d:
a2:8e:7f:84:1a:f7:be:e9:da:aa:37:18:c9:e0:cc:1b:e0:81:
df:00:23:c7:fc:b2:48:fd:2d:bf:ed:b1:7f:60:4b:cc:02:09:
1c:69:8f:1e:97:7c:26:36:60:95:2d:e7:c2:16:2d:5d:16:01:
4f:6a:07:f3:f1:25:10:15:e0:f9:c6:98:69:58:a8:e8:01:cd:
ba:9a:3e:fc:32:59:9c:81:eb:14:4e:e1:3c:ae:9a:5b:88:38:
e2:f6:53:4e:a2:87:2a:e5:0c:a2:ee:af:5e:72:c1:08:95:cb:
af:d6:39:6e:f4:33:5f:07:01:3d:e9:bb:3f:1f:42:25:54:62:
fc:84:c0:70:66:20:0d:3b:35:a6:06:88:7a:ca:bb:77:50:ff:
f5:c0:f0:1d:4d:94:08:23:23:63:15:57:63:7c:f0:06:29:23:
16:6f:64:03:cf:b9:10:e3:f4:cf:c2:90:92:09:a2:bf:59:02:
2d:aa:35:fa:a1:00:8e:d3:d6:f8:10:ca:9d:21:80:d9:63:32:
35:f2:6a:8c:df:ae:8b:b5:3e:0a:b5:79:57:f3:c4:7f:71:1b:
74:2b:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:48:55 2025 by rpki-client