Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/3boydbqbtwhdZ5CEmeaE1nZurKs.roa
File: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (raw, json)
Hash identifier: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=
Subject key identifier: DD:BA:32:75:BA:9B:B7:08:5D:67:90:84:99:E6:84:D6:76:6E:AC:AB
Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial: 0194258FC55E4376E99749CDCBD6EC3FAAB1
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/3boydbqbtwhdZ5CEmeaE1nZurKs.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48374
IP address blocks: 185.141.144.0/22 maxlen: 22
185.168.180.0/22 maxlen: 22
2a07:2500::/29 maxlen: 29
2a10:abc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c5:5e:43:76:e9:97:49:cd:cb:d6:ec:3f:aa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddba3275ba9bb7085d67908499e684d6766eacab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:c8:0b:d5:15:6a:ee:50:d0:8b:a4:02:b6:
60:a3:b5:25:40:a7:1b:35:f5:f7:f3:38:36:a1:34:
3d:de:5e:c0:84:5e:be:9d:53:be:53:3d:e9:b8:43:
cd:18:e7:a1:eb:12:69:51:c0:2a:55:7c:56:02:3b:
88:dd:eb:5f:e4:71:24:49:0d:0c:bb:6b:f3:bc:0e:
65:a9:0d:62:d9:28:bb:a7:a6:75:1a:23:9f:51:39:
17:51:25:63:11:94:9c:b1:6f:55:00:c6:0d:88:44:
3e:21:6d:e6:17:3f:62:28:83:a1:d8:73:58:b4:a6:
3a:28:85:18:9d:d9:65:8f:5d:43:dc:46:62:44:01:
63:25:d1:7c:a3:e3:04:e4:12:de:5d:e3:40:24:f4:
76:d2:51:32:1a:1e:6e:1b:91:50:56:2f:1b:d9:79:
bd:6a:cd:c9:b2:5f:db:7a:ad:31:aa:7f:8b:41:f0:
fb:68:17:84:8e:13:d0:4b:43:82:a4:a6:9d:9d:b5:
5b:de:aa:84:bb:6a:de:32:fc:40:8f:85:44:d2:36:
03:a4:d6:8f:f4:c9:d2:39:fe:58:ba:c3:41:3a:9c:
1d:2c:f0:84:c0:d3:a6:57:0c:e0:06:99:72:f5:7b:
9a:6c:2b:07:ab:d1:ac:93:0b:f8:c9:ba:4f:2b:1a:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:32:75:BA:9B:B7:08:5D:67:90:84:99:E6:84:D6:76:6E:AC:AB
X509v3 Authority Key Identifier:
keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/3boydbqbtwhdZ5CEmeaE1nZurKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.144.0/22
185.168.180.0/22
IPv6:
2a07:2500::/29
2a10:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
14:8d:b0:92:ba:00:3d:bf:f8:ca:f3:2f:2c:1c:e8:dc:08:2c:
f4:ae:78:71:48:32:45:1d:a2:8c:22:3f:9a:1f:be:29:d3:d0:
69:de:91:c8:cb:2a:f5:95:e2:54:44:f5:ab:ed:02:6c:b6:f3:
bb:6d:4f:6e:ab:ff:4e:4f:cc:7e:90:77:07:32:96:86:d4:d2:
76:49:cb:6f:f2:3d:93:9a:22:f5:77:d1:c3:24:f0:25:c9:b7:
23:d5:69:46:75:c3:14:df:d7:49:a2:42:2a:4c:25:34:fb:83:
4e:5f:fe:b5:33:d1:8f:93:78:39:ab:5d:41:98:bb:fa:de:bd:
f4:40:6c:71:b3:0a:ca:58:43:80:4b:58:7a:61:3d:ed:77:f2:
eb:87:04:9d:c9:71:fc:4c:81:7c:ea:82:8b:43:5a:9d:33:2b:
2b:f1:81:ba:b1:ca:ef:70:4a:66:a2:a4:de:f7:bf:05:ed:5b:
bc:23:38:69:aa:3d:7a:9b:14:91:28:e8:da:4c:a5:37:d1:c5:
7a:d9:e2:56:9f:ff:05:c7:8e:e7:c4:4e:22:e9:38:02:19:ec:
c9:61:07:38:94:5a:74:41:4e:2c:8c:97:5f:b9:2f:8f:a4:5e:
73:96:2a:e4:0f:79:1c:a6:69:1e:91:35:bd:a1:45:91:8c:12:
e3:ca:16:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:53 2025 by rpki-client