Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/CGoYKUbztdIKKtCC46FwnLxxAJQ.roa
File: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (raw, json)
Hash identifier: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=
Subject key identifier: 08:6A:18:29:46:F3:B5:D2:0A:2A:D0:82:E3:A1:70:9C:BC:71:00:94
Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial: 0194B1114569DDA2E9593883C427FA79D555
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/CGoYKUbztdIKKtCC46FwnLxxAJQ.roa
Signing time: Wed 29 Jan 2025 07:58:06 +0000
ROA not before: Wed 29 Jan 2025 07:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215452
IP address blocks: 185.201.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:11:45:69:dd:a2:e9:59:38:83:c4:27:fa:79:d5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Validity
Not Before: Jan 29 07:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=086a182946f3b5d20a2ad082e3a1709cbc710094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:8b:ab:bb:58:7e:ec:b7:81:8e:a0:35:2c:
65:26:3b:33:fb:4f:30:4e:cc:1f:0a:06:cf:0e:39:
7a:6f:d6:85:08:59:9d:96:b3:1f:71:5d:8d:cf:9f:
c3:91:2e:6c:c2:ac:ce:af:f1:e1:58:2c:21:36:c4:
b2:66:ab:55:8d:f3:01:b8:93:84:75:10:be:0c:07:
b7:1d:e7:12:1c:8f:05:e7:93:54:54:ab:56:2b:0b:
3b:0e:58:db:19:0c:5a:ea:f3:d8:0f:06:45:4d:fe:
a7:54:4f:2d:d8:15:34:93:da:cd:40:55:97:8d:50:
7f:d5:1c:3c:11:58:d1:d0:96:e8:eb:78:b9:a3:23:
17:81:a7:be:bd:ac:da:c6:28:89:e8:28:80:92:ed:
ad:b2:97:0f:4b:84:74:aa:55:6c:1e:42:c6:71:f3:
7a:df:81:3a:5f:43:a2:c6:89:df:d5:b1:12:23:51:
62:18:7c:84:10:f1:c9:20:aa:36:9f:f3:54:d8:ac:
33:98:38:1d:0c:e6:9a:42:69:45:f7:25:71:c6:5c:
69:3f:18:84:10:9c:46:66:c9:b8:5d:63:76:f0:35:
3e:7d:e2:67:7f:f0:b1:46:7c:a5:4e:5d:61:29:8d:
d7:ff:34:5d:33:ea:ee:16:fd:61:a8:0d:4e:6f:45:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:18:29:46:F3:B5:D2:0A:2A:D0:82:E3:A1:70:9C:BC:71:00:94
X509v3 Authority Key Identifier:
keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/CGoYKUbztdIKKtCC46FwnLxxAJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.68.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e4:38:bc:fe:e5:94:9d:92:27:8f:b4:f5:91:4e:2a:a0:ec:
42:34:11:31:ff:66:b3:db:e7:2e:7d:9e:a8:b3:b9:94:e0:4d:
b1:e5:14:86:f6:49:df:0e:96:d5:86:ee:da:35:bf:c4:a1:cc:
a8:92:d9:c8:7c:7f:8f:29:fb:a5:88:b8:0f:06:92:69:b2:c7:
bb:e8:5c:c4:c1:fd:af:80:df:5e:76:d4:1c:30:6c:3d:b6:65:
8b:f1:33:f6:3a:19:30:79:92:98:9f:f1:10:3a:0d:ff:b6:67:
3e:5b:b5:63:38:3c:32:71:ab:5a:3d:5e:8f:42:bf:a2:ad:ae:
f1:23:60:d9:d5:22:6b:88:5a:45:80:db:3b:2b:d9:02:08:11:
3b:8d:68:88:c2:fd:9e:10:43:0f:9d:31:44:f8:a5:a2:82:08:
b5:b8:ad:df:23:99:bc:19:00:53:28:56:5f:4f:de:b5:9d:15:
f1:e3:fd:eb:c8:d9:5b:2a:f7:ce:d8:79:7a:de:3c:06:4e:70:
45:33:db:e7:b4:01:0c:4b:9b:cf:fe:4c:a0:9d:c7:81:44:7d:
40:a1:43:d0:77:f8:7b:8b:1a:46:23:cf:b4:a1:12:c6:d2:33:
3e:2d:a4:35:aa:9f:2e:8c:60:51:91:18:7d:5a:37:08:96:45:
96:01:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 14:37:56 2025 by rpki-client