Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa
File: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (raw, json)
Hash identifier: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=
Subject key identifier: D1:2C:50:91:86:44:9D:72:A4:9B:3F:8A:7C:71:3F:9E:0E:1D:15:FE
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 0194214449F453801E2012C805B4369F862C
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206674
IP address blocks: 185.179.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:49:f4:53:80:1e:20:12:c8:05:b4:36:9f:86:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d12c509186449d72a49b3f8a7c713f9e0e1d15fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:4a:b8:4f:63:7b:4b:6f:cc:e8:a8:06:0d:
f7:c9:af:3a:7e:d2:17:6b:2e:bc:bd:ff:81:db:e9:
c8:8e:8e:4a:b0:f8:e2:d9:5a:9c:54:a0:29:d4:35:
6b:dc:8d:19:fd:5b:62:c0:21:61:d7:f9:ba:17:29:
0b:ac:18:f5:41:a4:51:0c:ca:8d:d3:c3:39:9b:40:
db:d1:7a:bc:80:94:ab:7b:19:22:df:3d:c1:ef:f7:
ac:71:5f:bc:79:4b:70:56:c8:f9:ed:b3:de:5a:05:
a7:0a:b0:09:86:85:c6:9f:73:5f:22:08:0f:3d:94:
fa:55:81:62:aa:38:de:b2:c5:12:97:16:4d:cc:f0:
13:32:76:29:82:09:87:20:0e:6e:1a:20:12:ae:4e:
03:dc:5f:1a:ef:59:6e:07:e2:ee:dc:5a:b5:b2:4d:
5f:17:4e:52:4f:20:07:27:fb:b2:3b:91:fe:9d:9a:
8a:d7:eb:51:04:11:d9:5a:18:7d:c3:27:a7:51:b8:
bc:06:eb:30:4c:f5:78:c6:f4:60:3b:7a:3d:f2:bf:
9e:cc:a3:0c:23:62:3b:7d:a2:87:a2:a8:53:36:d8:
8f:bd:cf:51:07:d4:f1:5c:e8:08:cf:42:c2:f2:dc:
42:91:f8:d6:bf:42:dd:e8:c3:49:4d:a3:65:e3:57:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:50:91:86:44:9D:72:A4:9B:3F:8A:7C:71:3F:9E:0E:1D:15:FE
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.56.0/23
Signature Algorithm: sha256WithRSAEncryption
04:22:d9:14:81:62:69:c8:0d:33:9d:06:f2:1a:47:b4:ec:c6:
fe:49:b0:24:d0:ab:8e:50:0b:b6:60:82:8c:fd:54:08:bc:51:
43:6a:a2:2f:3e:86:76:a2:05:e0:2b:50:ef:58:3e:05:88:0a:
29:4b:4f:0b:98:b3:6b:84:c9:9b:2d:58:1d:47:81:2c:94:2f:
37:65:cc:a0:5c:8e:c2:cc:30:64:9c:23:23:5a:9a:cb:8b:e5:
dd:24:ed:33:db:7b:db:b4:80:90:41:d8:7f:5f:25:5d:a4:47:
15:e3:ea:75:5f:78:9a:b4:29:ef:3d:a6:94:53:7e:a5:0e:88:
aa:29:39:36:ac:d1:5f:54:cd:2c:f2:8c:7a:5a:54:a4:a5:a2:
ab:0c:2b:1f:88:63:db:24:79:6a:03:ac:32:e0:28:21:1a:d7:
1e:09:00:16:c5:9a:39:a0:ca:50:cb:64:43:e0:7b:a2:a6:41:
8b:62:52:c2:eb:41:6d:d5:ea:25:02:db:a3:53:70:d7:2f:80:
a3:79:bb:94:95:fd:49:b0:b7:60:9c:3c:ad:08:56:a3:cf:c0:
d4:aa:00:ed:82:0a:06:cd:ae:92:a7:f1:49:f7:49:0c:df:2d:
5b:b6:fa:61:cc:a2:c1:8b:ed:91:90:30:94:f7:ac:da:9b:eb:
d5:26:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:12:26 2025 by rpki-client