Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/bQEYESoW6-YfVJJkms0PN9EdFG8.roa
File: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (raw, json)
Hash identifier: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=
Subject key identifier: 6D:01:18:11:2A:16:EB:E6:1F:54:92:64:9A:CD:0F:37:D1:1D:14:6F
Certificate issuer: /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial: 01942369F17D10477E3E1A82BCE07C54E982
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/bQEYESoW6-YfVJJkms0PN9EdFG8.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.88.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f1:7d:10:47:7e:3e:1a:82:bc:e0:7c:54:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d0118112a16ebe61f5492649acd0f37d11d146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:b6:20:02:ae:06:26:23:6e:46:b3:45:9e:
23:7d:47:ae:a4:49:a4:20:6c:45:d7:ea:56:e9:78:
71:2c:df:e1:f1:06:a2:bd:1a:51:75:9f:8f:e2:a4:
ef:0b:dd:3f:36:46:ec:fb:d1:b0:4a:81:d9:d8:d3:
49:cd:06:f3:cf:e8:dd:b8:3c:cf:61:6e:b1:3a:47:
42:29:3b:20:4f:b7:5b:47:72:ab:4a:b5:28:69:cf:
5d:2e:ec:ff:3f:79:d4:07:21:e4:e7:eb:a5:00:73:
81:37:7b:3f:b5:10:9a:b1:c8:d4:87:74:a0:dc:7b:
8c:28:77:a9:3a:0e:fe:bb:47:17:0e:94:34:7e:b5:
8b:3d:fa:fe:02:e2:ad:a6:cd:85:57:a2:16:71:d1:
36:3f:93:7b:5a:bb:db:bb:3a:bd:fa:c0:5d:b8:00:
e8:21:e5:5c:1c:02:c8:ee:fe:f8:01:71:72:31:be:
29:63:9e:de:a2:1c:65:a2:f5:28:c9:1d:a2:6e:eb:
a0:59:bd:e3:21:33:ba:da:4f:44:d7:68:24:95:f2:
22:37:4c:c8:0f:e3:7b:11:8f:f0:f7:3d:c5:71:d4:
e9:4b:21:14:66:10:35:a3:2b:49:7b:56:3a:02:b6:
ee:76:c0:ee:14:18:51:1a:d0:2c:3a:86:7f:75:7e:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:18:11:2A:16:EB:E6:1F:54:92:64:9A:CD:0F:37:D1:1D:14:6F
X509v3 Authority Key Identifier:
keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/bQEYESoW6-YfVJJkms0PN9EdFG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.148.0/22
Signature Algorithm: sha256WithRSAEncryption
35:f8:7b:0f:02:0a:be:2f:46:9e:b9:74:d4:da:64:1c:6c:8d:
c3:9b:2c:39:60:ba:37:4a:d5:02:c5:c1:fd:d6:7d:27:73:9e:
dc:f8:9b:2c:a6:1f:bd:ff:cf:5c:6c:e4:36:d7:af:4b:c0:05:
ff:e2:d0:38:7c:fc:dc:bf:d9:06:5b:16:19:48:7a:fc:b7:7d:
f1:bb:8c:81:d7:38:65:91:07:e7:56:ae:17:32:df:03:5d:24:
e3:ae:55:04:48:74:08:50:46:44:69:f8:fc:00:0e:c4:e6:7f:
5c:d3:db:46:25:ec:98:5f:1e:68:53:ca:91:c4:14:36:9e:6b:
2b:ed:6b:07:9d:2a:02:28:0c:f4:66:d7:5b:73:00:31:3a:26:
38:e9:23:05:95:59:7f:fc:73:e6:68:a5:93:0c:2e:24:22:ff:
1b:51:de:9a:37:5e:b4:be:70:fd:6e:92:cf:a7:ff:cd:ca:a6:
a8:b0:c8:ef:b7:f4:6a:19:74:c3:c4:57:19:1a:43:d1:d3:0b:
1c:bb:44:ca:80:84:6b:46:c0:1e:6e:11:d2:b2:c2:f1:5c:3e:
ec:4f:36:be:36:5f:8b:27:37:6f:5f:07:e2:26:c0:f6:e0:5b:
95:80:3c:ea:8f:9d:c9:7b:a7:62:68:98:f1:6e:7a:2b:d7:c2:
b0:74:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:58 2025 by rpki-client