Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/c1218tMrC-SYY-Yo1ITctKUD9_k.roa
File: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (raw, json)
Hash identifier: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=
Subject key identifier: 73:5D:B5:F2:D3:2B:0B:E4:98:63:E6:28:D4:84:DC:B4:A5:03:F7:F9
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 019422FC2013FAAFA46A7B3946C76AE7C8DB
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/c1218tMrC-SYY-Yo1ITctKUD9_k.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.112.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:20:13:fa:af:a4:6a:7b:39:46:c7:6a:e7:c8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=735db5f2d32b0be49863e628d484dcb4a503f7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:48:f3:7d:84:d2:9d:34:ea:1d:78:60:06:14:
81:6b:79:dc:59:09:c3:20:e2:e1:6c:4b:a8:ea:26:
af:a9:47:3f:8c:ac:16:aa:02:56:1d:6b:7e:37:e9:
9b:2c:e8:b7:6f:8c:e4:d8:9a:25:9e:da:bc:d0:dd:
ba:b0:b4:65:2b:f5:31:4a:be:c3:62:4f:4b:9e:5e:
aa:c5:68:ac:e5:07:ef:6a:3f:90:b0:d8:2f:ac:56:
c3:85:ae:15:b6:6f:58:63:02:83:c8:bb:b1:37:8e:
b9:36:56:2b:87:b4:04:f1:07:7c:cd:b5:71:e6:90:
00:a9:4d:46:3b:c7:5d:da:dd:6a:e1:2e:29:ec:b8:
cb:a1:c9:8b:72:0a:3f:1b:46:b6:37:61:43:0b:b6:
dc:d7:70:e3:86:b0:34:c2:5b:ad:29:78:c8:28:c7:
4f:d0:74:9a:05:38:33:c0:f4:67:a3:09:8e:cd:ec:
2a:fc:c3:6f:9e:d8:71:9d:99:0f:51:0e:9e:c8:f4:
bd:cf:3d:1e:b2:b2:5a:96:71:e7:b3:a4:a7:4d:b8:
4a:75:fd:79:26:2b:a6:69:65:36:25:99:7d:fe:8c:
4d:34:44:2b:cd:df:64:f2:82:5d:1d:7b:0a:97:ae:
c3:89:20:f1:56:10:d4:66:37:5b:e5:b2:c9:3a:98:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:B5:F2:D3:2B:0B:E4:98:63:E6:28:D4:84:DC:B4:A5:03:F7:F9
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/c1218tMrC-SYY-Yo1ITctKUD9_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.232.0/22
Signature Algorithm: sha256WithRSAEncryption
99:e4:20:0e:53:1a:5d:31:ab:b1:60:9d:dc:88:69:3a:37:cc:
5d:d1:ea:59:64:f9:f2:0d:74:04:6e:60:7c:95:af:28:1c:27:
6b:7c:75:bf:7a:a8:f2:52:9f:a2:2a:54:1a:08:2d:f4:52:14:
0d:cf:36:f2:b1:1c:4f:cf:5b:b3:9b:87:75:eb:d3:1d:f5:7e:
f3:97:8f:88:a2:74:dd:14:69:d6:dc:42:19:c4:c5:2a:7a:09:
1a:b7:e2:ab:23:aa:5c:db:68:a8:f5:16:90:97:04:52:33:b6:
ea:f6:2d:5e:1c:9c:55:6c:51:52:21:e7:a4:66:a4:0e:4c:6e:
67:1d:f0:c6:e8:fd:4b:0f:e2:08:ab:41:e0:c6:3c:85:75:01:
d6:fa:cc:3f:5e:bd:9d:9c:3e:c3:14:61:19:2c:32:3b:7b:e2:
ef:ae:8e:89:aa:da:9e:e7:9a:5c:93:db:9e:da:9d:ae:af:36:
71:d6:2d:83:02:da:82:da:74:c9:b7:25:e2:ba:9d:81:c5:73:
99:75:2a:94:ff:a7:66:b6:3b:a8:8a:38:12:75:94:eb:17:33:
bd:08:e6:7b:89:ae:24:2e:67:93:f4:b6:1e:ca:f8:bd:1e:28:
ff:aa:6c:cf:78:68:eb:bb:43:83:e8:17:8a:38:6a:51:b3:90:
c5:e1:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:41 2025 by rpki-client