Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/shlWOO7Z9iMRimNwtzvMpj0xCOw.roa
File: shlWOO7Z9iMRimNwtzvMpj0xCOw.roa (raw, json)
Hash identifier: OGVs5eP2ukqgeMF6xh4aW39jWErAU5TSB9h+2E53gSo=
Subject key identifier: B2:19:56:38:EE:D9:F6:23:11:8A:63:70:B7:3B:CC:A6:3D:31:08:EC
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019426D96840ADC5D0DBFA9D6B7D63C735C4
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/shlWOO7Z9iMRimNwtzvMpj0xCOw.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211094
IP address blocks: 185.240.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:68:40:ad:c5:d0:db:fa:9d:6b:7d:63:c7:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2195638eed9f623118a6370b73bcca63d3108ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:95:eb:2f:72:52:cc:02:21:19:2f:cf:92:
8e:ea:61:55:f3:61:07:4e:cd:65:a9:ea:f3:28:2f:
52:90:94:19:7c:5f:5d:68:0a:c5:4a:cf:05:66:13:
91:21:84:e5:07:09:e6:34:1c:d4:62:a9:bb:a6:b8:
5a:22:c1:16:e9:00:51:2b:fb:03:da:d9:2c:2e:3f:
e9:c9:23:0d:58:a8:57:3a:6b:a0:e5:9c:d3:c8:b7:
ac:bc:ef:c3:75:ed:7c:1e:17:6f:bb:82:51:db:9e:
a6:c6:56:e2:53:67:57:ce:2e:09:d2:b7:9b:61:f7:
ad:65:46:9e:6d:73:f1:28:02:3d:5a:3d:5d:ec:2f:
aa:e9:90:46:19:c2:4a:c7:c6:89:cb:02:4f:01:07:
9f:66:f4:52:7c:81:86:04:bb:42:6c:c4:da:a7:aa:
09:ea:11:b1:89:93:25:01:62:a7:87:fc:fc:a5:2a:
72:ca:9d:70:7d:b3:ff:1c:6e:4e:e5:24:d4:64:b3:
85:d1:9a:e6:a9:57:3b:c4:3e:62:49:e3:55:d0:df:
9f:32:a8:f9:5f:5c:c2:56:bb:52:c5:78:bd:81:fe:
1c:2c:da:d7:be:8a:2e:28:95:49:dd:72:9d:82:c2:
28:1d:31:11:20:d3:c6:04:2a:08:0c:34:b2:98:08:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:56:38:EE:D9:F6:23:11:8A:63:70:B7:3B:CC:A6:3D:31:08:EC
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/shlWOO7Z9iMRimNwtzvMpj0xCOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.240.0/24
Signature Algorithm: sha256WithRSAEncryption
43:21:a7:df:86:7b:95:9f:1c:1e:4e:78:9f:29:b3:12:6d:a5:
f0:4d:f5:db:6b:b5:a1:3e:74:92:0e:d3:0c:3f:96:6c:f7:d9:
f0:cf:33:7f:1c:93:90:98:90:d6:ac:83:2a:d3:b2:75:7e:c1:
33:94:e0:21:12:3d:0c:a2:80:09:f6:69:de:9c:4b:d6:a3:f5:
4c:76:1e:ee:56:ec:96:b7:a5:e0:84:8d:23:1b:70:a1:2e:c0:
fc:dd:72:ed:08:13:78:8a:96:a5:fa:90:0d:94:8b:81:a5:93:
f2:bb:fc:a9:a5:d3:32:d9:70:65:b2:f3:8c:86:fa:29:44:4e:
f6:22:df:20:d1:50:27:ed:22:f3:71:d2:7b:a3:56:34:59:3e:
31:25:57:8a:21:af:88:1a:86:7a:37:eb:31:fe:19:e9:45:a6:
86:e3:5d:00:90:79:d5:2d:28:73:f0:7a:67:70:e9:42:37:47:
89:b2:6d:f4:82:f7:4f:45:bb:14:6d:62:50:51:ec:52:37:3b:
23:3e:22:f3:a2:e0:92:dc:0d:6d:5e:57:62:64:e5:9c:51:10:
46:41:32:f0:91:a1:1c:a1:be:9a:ba:f6:92:c9:3e:51:e9:b5:
19:09:98:93:3e:29:42:08:89:c6:66:25:14:32:2c:4a:20:f3:
7e:8f:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:37 2025 by rpki-client