Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/1QST1OPlWGgU_KfeCd6-eSc5Fws.roa
File: 1QST1OPlWGgU_KfeCd6-eSc5Fws.roa (raw, json)
Hash identifier: 0IX3SPWo/YRidApWFZTcBmj27iQz+V20vqeZhxHtpTk=
Subject key identifier: D5:04:93:D4:E3:E5:58:68:14:FC:A7:DE:09:DE:BE:79:27:39:17:0B
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019424450FC64DB39B97396F2E80BE3C0192
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/1QST1OPlWGgU_KfeCd6-eSc5Fws.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 185.182.228.0/24 maxlen: 24
185.182.229.0/24 maxlen: 24
185.182.230.0/24 maxlen: 24
185.182.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:0f:c6:4d:b3:9b:97:39:6f:2e:80:be:3c:01:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d50493d4e3e5586814fca7de09debe792739170b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:4f:f2:a8:c1:b6:da:37:64:4e:15:66:c5:
c9:64:a6:97:76:d2:7b:1d:c1:54:82:cc:df:65:fc:
02:06:2b:d2:51:63:35:01:b2:fc:d8:e2:05:ef:9a:
1c:26:d9:cc:43:ea:8b:f0:60:ff:d6:f6:bc:90:7b:
aa:14:2f:c8:5a:fa:d2:0e:e6:80:ba:87:d4:dc:36:
5e:fb:eb:0d:bb:bc:18:c8:69:6f:1c:63:48:a5:46:
1d:ef:0c:ed:34:0c:61:b8:a2:98:94:8f:e5:ec:3c:
fc:ae:1f:9d:1e:8c:27:62:6f:3a:75:81:b7:03:90:
f7:b7:8c:89:64:96:0c:55:37:9b:d1:8d:db:94:a2:
9a:63:51:e9:4e:1e:2a:37:8e:88:44:47:f7:06:02:
80:c9:86:e4:e9:1e:32:76:26:e8:84:13:90:31:d6:
36:ab:20:b7:32:a8:25:c2:82:8e:1a:79:9e:f5:a9:
96:4d:0a:59:c2:0b:fa:1f:b8:81:d5:a9:7c:e8:1d:
69:2b:2c:ae:d6:eb:91:a2:55:f6:c5:78:bb:d3:d1:
85:11:06:78:7c:c3:e5:c3:26:6a:b4:40:99:5c:c8:
11:5a:38:3a:7a:31:d0:bd:30:a5:90:5f:9d:33:7d:
b8:ef:5b:c3:b8:14:86:13:33:90:32:e1:7d:58:0f:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:93:D4:E3:E5:58:68:14:FC:A7:DE:09:DE:BE:79:27:39:17:0B
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/1QST1OPlWGgU_KfeCd6-eSc5Fws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.228.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ad:4a:f1:c0:56:02:4a:98:18:d6:76:dc:29:f6:07:d1:1f:
81:93:03:59:49:24:21:53:10:c4:a8:b8:a3:b0:f5:b8:62:30:
bf:78:f8:bc:f6:e3:b9:9a:43:4a:01:5d:67:88:fb:5e:da:d7:
cb:ec:36:2d:3b:4b:8a:94:7f:3b:06:a0:1a:95:b2:55:79:41:
4a:15:49:14:4b:86:f8:7e:dc:d2:89:e2:ff:40:4e:93:f2:27:
4e:f2:1d:6a:7b:e6:59:70:5b:b8:fa:ed:f9:1b:0e:37:7b:78:
ec:02:85:f6:7f:0e:27:35:ab:fa:fd:fe:3a:c8:52:12:ff:06:
55:da:8f:38:13:79:fc:1b:43:d3:06:83:5c:10:e5:12:fc:0c:
90:97:dd:1b:b7:69:ed:97:d9:05:73:4c:05:21:6d:cd:51:43:
63:c6:0d:a6:ff:b2:50:8c:92:de:c3:d0:c3:a4:3f:b8:14:13:
b5:52:a9:a9:70:53:2e:8d:64:1a:0e:1b:2f:b5:b9:10:4f:21:
96:c2:a4:29:bc:a3:0f:02:fc:de:cf:6a:07:d2:09:ef:d9:c3:
5b:e2:a1:9c:31:c2:24:5a:4f:1a:6a:8f:8a:c9:9d:78:a0:9d:
6b:ab:9a:7d:6e:0e:a1:7f:4d:2b:f8:c6:c1:be:b0:7d:a4:98:
eb:b5:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:15 2025 by rpki-client