Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/uL8wQ5suTSJs6R1LegMqq0w_KnA.roa
File: uL8wQ5suTSJs6R1LegMqq0w_KnA.roa (raw, json)
Hash identifier: q1cpaZXwQ8FTgzr+1V+AjkI0yfC5jTYIkOuwUOw+jNs=
Subject key identifier: B8:BF:30:43:9B:2E:4D:22:6C:E9:1D:4B:7A:03:2A:AB:4C:3F:2A:70
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 01942521FBF29A5150D51CA9C7C8A493FB6E
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/uL8wQ5suTSJs6R1LegMqq0w_KnA.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198477
IP address blocks: 185.117.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fb:f2:9a:51:50:d5:1c:a9:c7:c8:a4:93:fb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8bf30439b2e4d226ce91d4b7a032aab4c3f2a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:0a:ee:e8:1b:1f:55:66:0a:c8:b1:c6:c1:
d7:0b:2d:f2:79:90:6d:fb:36:fc:c6:f2:f6:d9:e2:
25:4c:fe:7d:5f:1e:09:eb:be:3d:9a:9a:00:50:59:
08:f3:39:5f:a5:69:d6:56:90:48:40:20:cc:ab:eb:
45:67:f5:e3:46:85:e7:4c:c6:cb:2c:eb:23:81:ef:
60:a0:6b:51:ae:76:97:b2:99:0c:54:f8:a6:ac:a3:
ab:2a:71:c2:61:76:a1:25:0d:ca:4e:f6:29:de:ab:
a5:a5:f6:35:d1:cc:70:01:3a:17:22:19:cb:83:83:
24:eb:e6:23:a7:7f:a1:41:63:ff:a0:eb:e4:1f:22:
2f:32:91:55:e7:42:f4:1b:6d:ae:a6:77:c4:34:bf:
65:6c:e0:8f:a4:93:2c:0b:14:c4:04:4b:be:78:17:
e2:ac:f7:ca:f8:2f:77:5d:d4:d9:af:79:1d:83:61:
86:ab:f4:eb:a5:6c:45:1b:47:17:2b:0f:b5:38:16:
9f:4d:62:5b:be:e5:aa:60:56:9d:ca:07:27:c2:a1:
87:69:a1:ec:b2:9b:7f:c4:38:47:6f:fc:10:f7:63:
a2:ef:3e:b5:d0:c0:0a:ec:ed:b4:d9:cb:b7:c0:c4:
26:cd:f1:e8:0e:ca:7f:1a:89:e3:10:93:0c:d6:c3:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:30:43:9B:2E:4D:22:6C:E9:1D:4B:7A:03:2A:AB:4C:3F:2A:70
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/uL8wQ5suTSJs6R1LegMqq0w_KnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c0:e8:08:a1:84:99:f0:73:0c:ce:b2:bf:67:66:d1:3c:df:
57:1d:67:e9:67:53:78:87:5d:a1:c4:6c:7e:a0:9c:d6:b3:6f:
f9:44:b4:df:8f:07:a4:91:6a:6e:d9:f9:ce:4c:21:d0:6e:76:
47:97:a6:67:a6:c0:9c:4b:ce:b1:52:6d:62:91:19:fd:f7:fe:
bc:cf:a3:4c:5e:2e:4b:de:54:9e:b8:f4:8a:75:27:23:25:ef:
eb:82:68:91:62:e9:fa:eb:32:c5:60:ee:df:1d:2f:99:e2:e9:
d0:9c:a7:56:ac:57:7c:d8:2d:c9:01:ce:a0:64:38:0c:aa:51:
29:af:bb:a0:46:84:c5:66:42:a8:00:f6:ab:22:14:3d:7b:59:
a5:03:7b:42:95:32:a9:27:3d:6a:85:f3:9a:3d:5b:52:36:c2:
81:a9:35:50:d2:71:2a:21:88:be:36:b1:6e:5a:24:6f:d9:c4:
e3:62:f4:19:02:8d:84:5a:d3:12:fa:c9:8a:c5:68:83:20:87:
40:2c:38:c8:e2:6a:c4:65:e9:a4:d6:e8:a8:aa:42:52:9a:6c:
9d:42:ce:51:f1:a1:35:53:49:ac:6c:a1:8f:cf:b4:e1:89:bb:
8c:3f:35:a0:2e:c4:9a:38:86:0f:96:41:f8:1c:c4:fa:19:66:
d0:27:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:05 2025 by rpki-client