Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DBujK5R0zoe3qw7E9KaTWvJc-k8.roa
File: DBujK5R0zoe3qw7E9KaTWvJc-k8.roa (raw, json)
Hash identifier: o9O6Ak1kQ1kdPd8FD4VlTLYDm7rddjftG9OZnkY0eBs=
Subject key identifier: 0C:1B:A3:2B:94:74:CE:87:B7:AB:0E:C4:F4:A6:93:5A:F2:5C:FA:4F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE663EE98BA4C08E5F52E352F9E24
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DBujK5R0zoe3qw7E9KaTWvJc-k8.roa
Signing time: Thu 02 Jan 2025 05:49:35 +0000
ROA not before: Thu 02 Jan 2025 05:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198681
IP address blocks: 95.46.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e6:63:ee:98:ba:4c:08:e5:f5:2e:35:2f:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1ba32b9474ce87b7ab0ec4f4a6935af25cfa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d0:d6:0e:a5:b3:1a:f3:9a:be:89:ca:b5:87:
d7:bc:a4:a7:c9:29:98:33:dd:6f:a3:95:4b:db:34:
4a:d1:1e:2d:01:95:9d:91:6a:97:4c:e1:2f:d8:3d:
72:6c:08:38:fb:fe:74:91:86:b3:51:44:3c:7c:2e:
0b:fa:6c:9d:10:de:79:c6:14:89:70:32:10:d3:05:
f2:f0:3d:0a:11:a9:44:7c:50:65:c1:33:21:ef:ba:
94:1c:54:52:04:94:93:4c:6a:3d:48:c4:99:5f:d3:
6b:74:01:32:69:64:d7:cb:67:a1:24:2c:77:00:34:
d3:11:63:a1:66:f5:59:b9:10:d6:71:fd:99:42:dd:
63:37:1d:6f:dc:98:77:d5:b3:19:43:9c:51:6c:9d:
b3:79:35:3a:2d:de:16:d7:0f:87:e1:cb:5b:23:2a:
fd:9a:ec:22:60:a6:58:1a:9d:b3:25:ce:08:0b:f2:
02:23:00:c4:67:81:8a:38:07:05:68:a7:0b:78:72:
d9:58:6a:69:c7:3a:2e:31:08:12:a6:8b:4e:77:a8:
a3:31:11:1c:7b:e2:4d:6b:f4:0f:71:69:dd:79:38:
9e:a4:96:74:2e:0d:35:68:65:06:64:b7:45:91:8f:
3c:c2:0c:21:5b:8a:bf:bc:0d:08:30:4d:cd:a1:02:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1B:A3:2B:94:74:CE:87:B7:AB:0E:C4:F4:A6:93:5A:F2:5C:FA:4F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DBujK5R0zoe3qw7E9KaTWvJc-k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e6:89:ec:6a:16:37:1e:25:4a:29:c6:8a:a6:31:4f:c4:bc:
09:d4:73:f1:6c:b0:45:c1:3d:b5:99:33:9b:88:e5:9a:b9:d1:
81:f5:92:28:aa:8d:93:8c:15:1b:2a:a5:7d:5c:28:96:5c:4b:
f9:fa:7f:dd:c3:c9:11:aa:b4:a3:e3:83:42:50:6b:7b:38:23:
d7:51:69:75:64:d9:82:6f:a3:b8:b6:e7:9e:8b:a2:bc:e9:47:
a3:2e:cd:26:75:a8:fa:56:92:e0:23:c3:f4:32:6b:fc:62:da:
74:30:64:46:cf:b4:79:54:78:23:ca:c5:8c:0a:d8:9b:72:89:
76:d2:90:58:1e:61:ce:8c:d4:0f:85:ae:d0:03:db:4b:89:25:
bd:9e:9c:7b:b9:19:8d:d8:c1:27:35:b2:c0:65:e0:f4:ae:41:
cf:7d:de:3b:d4:75:c0:62:8b:83:35:fe:fd:43:2f:c3:c0:7c:
a1:f0:58:53:b8:e5:c9:6f:31:1d:81:02:4b:00:03:2b:c8:3a:
a4:57:97:ff:de:7e:7d:55:2d:03:4a:16:3e:87:89:55:74:2b:
32:bf:11:3c:49:be:c3:43:e3:44:72:c8:cd:1c:68:59:4e:97:
29:f9:27:17:0a:5d:98:b1:35:26:1e:c9:04:36:cb:36:4a:71:
a9:d8:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:38 2025 by rpki-client