Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/soGpXNW6NF8P8zo-D88psSWBqUA.roa
File: soGpXNW6NF8P8zo-D88psSWBqUA.roa (raw, json)
Hash identifier: nmPn/1Qo6gZbPuWrHhpvq3aZoMkJkiogtQ3//KWzD1w=
Subject key identifier: B2:81:A9:5C:D5:BA:34:5F:0F:F3:3A:3E:0F:CF:29:B1:25:81:A9:40
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9C0746004C59C1F9504F37E75FD2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/soGpXNW6NF8P8zo-D88psSWBqUA.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42581
IP address blocks: 146.120.212.0/23 maxlen: 24
146.120.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9c:07:46:00:4c:59:c1:f9:50:4f:37:e7:5f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b281a95cd5ba345f0ff33a3e0fcf29b12581a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:7e:f3:58:53:7d:d2:f1:8b:b5:4e:69:83:
e7:42:33:b7:12:fa:b7:d6:13:c7:e3:56:35:e8:cf:
19:7a:a5:d2:6e:12:79:2a:cd:97:4d:ff:4f:e4:55:
72:11:63:ed:ac:20:da:43:05:ca:c2:2a:ed:00:ea:
29:8b:71:e4:04:38:77:14:83:62:9d:7c:c9:c0:53:
6e:26:09:ba:df:95:79:77:6e:6b:74:ca:82:8c:43:
09:a5:35:8a:4a:81:93:47:0b:f8:e1:ac:59:09:61:
58:fc:73:95:1a:0a:7e:42:54:dc:a1:ed:5f:fb:9c:
5c:9f:92:f8:7f:0a:78:90:c3:1a:e1:eb:f3:73:06:
fd:1f:e5:f6:f6:ec:08:21:f9:49:2b:38:fe:df:43:
b8:26:2c:d6:5a:2b:86:58:90:bb:57:fd:52:24:51:
14:ff:7b:94:8b:f0:0c:f9:6a:e9:f9:a5:c6:c0:69:
06:17:29:b1:bc:91:93:60:c1:3d:5d:60:91:a5:49:
c3:cc:73:20:b7:39:9b:ce:1d:f1:b5:e8:e4:0a:f2:
5e:9f:b0:9f:5a:9e:da:27:01:c5:2b:04:cd:cf:97:
9b:e2:17:c7:c2:04:1f:64:2a:12:f0:22:83:0f:49:
e3:27:e1:c8:8c:f9:01:fb:f4:95:ee:b4:91:b4:f8:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:81:A9:5C:D5:BA:34:5F:0F:F3:3A:3E:0F:CF:29:B1:25:81:A9:40
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/soGpXNW6NF8P8zo-D88psSWBqUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.212.0/23
146.120.230.0/23
Signature Algorithm: sha256WithRSAEncryption
34:92:1d:7e:35:65:a2:ce:3b:3b:81:9c:05:36:b3:cc:c3:dc:
b2:3d:57:93:42:6a:fd:d7:c0:15:d2:75:cb:a3:01:54:0a:83:
3a:c1:b6:14:5f:9c:75:ed:b8:48:34:5b:b7:fd:3b:0e:d0:1f:
13:8c:c7:cf:d9:82:41:ce:12:38:db:3b:c5:29:1f:2b:01:f3:
87:5d:cd:60:03:9d:31:e7:96:46:e0:3e:d7:3e:0d:6d:c0:a0:
e1:13:c8:8f:e4:90:c7:74:4c:64:b5:ef:f1:b6:86:26:6c:01:
e2:53:1e:6d:09:58:9b:47:ef:9b:fe:44:a2:19:af:fe:83:c2:
3d:ac:4f:c3:43:c7:02:e8:b9:86:93:07:8c:50:32:31:ee:ef:
4e:fc:8b:ce:1d:da:5e:1b:cf:49:da:54:4d:68:09:a7:04:0f:
ba:7e:aa:ad:bd:ba:90:26:09:25:b2:54:30:86:0d:68:a5:07:
c9:11:33:38:53:49:00:b3:c0:f4:b8:ef:b9:5a:4f:92:d3:33:
fa:02:08:eb:e5:c0:46:ef:e5:09:34:b9:30:f4:b1:cc:9a:f3:
a8:21:2e:29:2c:e2:41:80:01:60:cd:28:01:4b:10:d9:51:ee:
1c:42:bf:75:20:7b:2d:97:2d:15:63:53:3f:f9:b3:9a:1c:4c:
ae:ce:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:33 2025 by rpki-client