Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/AwjoyZI8RTyi89MX4-dvyjy68_c.roa
File: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (raw, json)
Hash identifier: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=
Subject key identifier: 03:08:E8:C9:92:3C:45:3C:A2:F3:D3:17:E3:E7:6F:CA:3C:BA:F3:F7
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 0194258FAFDA670AE86CE77AD24EBF6D806E
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/AwjoyZI8RTyi89MX4-dvyjy68_c.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58010
IP address blocks: 185.71.124.0/22 maxlen: 22
185.71.124.0/24 maxlen: 24
185.71.124.128/25 maxlen: 25
185.71.125.0/24 maxlen: 24
185.71.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:af:da:67:0a:e8:6c:e7:7a:d2:4e:bf:6d:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0308e8c9923c453ca2f3d317e3e76fca3cbaf3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:b7:e2:ad:ea:c8:69:52:c3:c7:2f:ff:87:
70:c0:c9:48:7d:1d:78:68:d6:e5:26:2b:14:78:df:
d6:23:f6:23:27:e4:c0:86:82:44:34:0f:d5:8d:fa:
4c:f9:98:ca:e4:ec:a6:eb:53:41:5c:2b:08:68:41:
9c:bc:b2:97:98:f5:eb:fd:d2:ef:08:f0:76:dd:04:
00:8b:8a:a4:a1:ea:bc:ec:f6:2b:08:32:0f:69:c4:
fd:fa:e8:1d:fe:61:40:44:53:48:e6:95:fd:7e:ca:
95:f6:0b:7c:f8:70:1a:ba:13:8b:5b:03:8d:5b:c2:
23:ad:49:6c:08:56:5d:85:21:90:6e:cf:e5:f0:53:
20:e2:a6:cd:c1:44:80:94:e3:cd:b8:4a:3d:80:e7:
8d:dd:73:f0:63:ef:ff:8d:3f:70:7e:b0:1b:fc:89:
39:89:e2:15:7d:a2:a0:77:1a:00:b4:1e:92:24:9f:
94:4f:86:45:4e:b0:87:8c:20:d8:6e:e3:17:25:48:
35:4d:da:c5:7f:a3:67:2e:a5:61:0b:0f:7c:ff:43:
d3:5f:24:4f:72:80:7e:39:e8:0a:51:9d:f8:b8:88:
30:93:1d:ed:5f:96:6b:64:a9:0b:59:4c:c9:3f:58:
be:da:33:ad:55:8d:42:4e:9c:27:88:aa:12:8e:36:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:E8:C9:92:3C:45:3C:A2:F3:D3:17:E3:E7:6F:CA:3C:BA:F3:F7
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/AwjoyZI8RTyi89MX4-dvyjy68_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b3:ad:2c:98:50:5f:d8:8e:c4:f7:d6:ea:d6:1a:1f:40:7c:
e4:58:2e:f9:4c:d0:c4:98:9d:6f:0c:e0:49:4e:6e:0e:33:2d:
b7:37:b7:dd:c8:dd:e2:2c:4b:1c:f7:95:c7:be:4d:03:f8:a4:
41:65:12:4f:73:85:78:13:e3:16:ee:1a:e8:f7:4b:68:5a:b3:
36:ad:48:ff:06:30:6e:ce:09:83:df:82:9e:53:2b:75:c8:43:
e3:47:78:39:b4:fc:f1:b0:ce:61:b6:d7:f5:66:61:8d:45:c6:
2c:df:0b:46:d5:15:b2:e7:88:9b:18:04:d8:10:25:8c:3e:70:
e1:0d:d8:86:50:30:71:39:ad:8a:5d:a3:7e:50:e8:fa:dd:ed:
ef:ac:48:7d:7c:80:6f:12:b2:e0:f7:43:6d:8a:db:a7:f9:55:
9e:5a:82:fa:94:8e:32:b4:b6:3f:94:fe:e9:1f:b7:ff:98:4e:
4e:80:5c:62:94:1b:57:44:47:36:0d:b6:86:c1:4d:95:a6:cd:
86:37:35:81:e9:74:00:0f:75:6c:a6:e9:98:3f:de:fd:2c:df:
0d:82:30:13:67:e2:59:ad:b2:00:67:c7:82:db:12:e3:a7:04:
56:1e:04:ce:e1:7f:35:a0:c3:17:fa:e9:ef:25:3b:17:b0:a7:
b7:dc:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:59:27 2025 by rpki-client