Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/So0J85BPs3UG_C6BWLfnLZ9c_3I.roa
File: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (raw, json)
Hash identifier: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=
Subject key identifier: 4A:8D:09:F3:90:4F:B3:75:06:FC:2E:81:58:B7:E7:2D:9F:5C:FF:72
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019427B402F16A59309D478E62084FF06A31
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/So0J85BPs3UG_C6BWLfnLZ9c_3I.roa
Signing time: Thu 02 Jan 2025 15:48:16 +0000
ROA not before: Thu 02 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207192
IP address blocks: 185.161.48.0/22 maxlen: 22
185.161.50.0/24 maxlen: 24
185.161.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:02:f1:6a:59:30:9d:47:8e:62:08:4f:f0:6a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Jan 2 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a8d09f3904fb37506fc2e8158b7e72d9f5cff72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:6e:82:18:c2:19:4b:8b:df:00:fa:60:41:
52:97:a6:0c:6b:90:24:e5:73:02:9a:4f:8c:24:40:
d3:7e:0b:b9:f8:8a:32:6a:9f:de:d2:58:63:15:4c:
2d:58:58:25:3f:9f:fa:6a:29:60:b6:8c:d9:67:f1:
7a:66:87:56:75:48:3d:da:36:53:b6:46:73:ad:01:
09:d1:1e:6b:53:eb:a2:ae:b4:53:33:94:d4:c9:b2:
9f:26:8b:59:6b:ee:3d:9a:ec:ee:b4:81:41:93:71:
c4:df:dc:40:b9:ff:7c:d9:50:4a:f0:f1:ef:06:fd:
9c:64:e7:98:3c:85:4f:97:c2:c4:7b:ee:b8:80:8a:
21:02:af:1b:d9:bc:6f:40:32:80:7f:14:9b:92:51:
93:11:d0:37:cd:9d:d5:81:6d:60:25:76:ac:d6:0c:
e5:92:0a:0f:56:c8:6b:f7:7e:71:7d:d3:a2:b6:59:
ee:7d:c1:02:d4:bb:17:b9:cc:45:a6:79:79:c4:9b:
40:a8:b8:03:b0:44:29:ac:be:a8:23:05:5f:a1:b7:
cc:ae:78:53:d6:a7:a7:09:d5:55:65:eb:b8:07:dd:
b4:99:88:88:57:fa:19:fb:04:ac:98:2c:58:c3:86:
c4:cc:37:10:1c:5a:3f:6c:72:c7:fe:b6:73:a3:72:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:09:F3:90:4F:B3:75:06:FC:2E:81:58:B7:E7:2D:9F:5C:FF:72
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/So0J85BPs3UG_C6BWLfnLZ9c_3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.48.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:d9:b3:68:57:e8:ab:53:55:f0:cf:08:bb:ce:9a:00:66:95:
b1:cc:8b:96:68:31:36:fc:15:66:1f:21:2d:ac:11:86:ee:1d:
cf:6c:30:8e:0e:8b:e7:fc:dc:9a:52:96:29:34:86:44:b6:c4:
2e:63:0c:6c:bd:39:aa:7f:15:e8:b7:2a:23:bc:fd:6c:b1:b8:
2c:88:89:3e:e4:61:4b:a6:fe:c7:e6:db:26:af:8b:b7:fe:ea:
0c:ae:2e:94:9c:94:ff:85:0d:84:f5:e4:5f:a9:10:aa:76:66:
d9:9e:f3:af:36:22:07:86:a9:e9:1b:18:77:e7:2c:fb:89:93:
39:1c:0c:f1:8d:ee:b8:7e:67:ee:6d:df:c1:46:d6:05:e4:a1:
1c:53:6e:51:61:64:16:cc:58:9a:de:32:76:5f:b0:4d:b2:6a:
72:8c:c8:8f:46:5c:76:74:e6:b5:71:32:ae:06:cf:29:22:d5:
1c:46:90:89:64:25:7a:ed:5f:88:2e:b1:e5:35:4f:ed:31:f4:
47:cc:ad:1d:16:09:ce:37:69:bd:35:7d:fd:12:3b:2e:63:8e:
0d:3e:df:93:d1:1f:22:04:80:91:60:64:09:ac:b7:be:9c:35:
ce:73:7d:d7:c7:6a:d0:81:7c:1e:32:4c:4d:ff:86:45:a3:77:
65:77:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:01 2025 by rpki-client