Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/axNN3PR5BYZSBckAYRhvHQEN0tw.roa
File: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (raw, json)
Hash identifier: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=
Subject key identifier: 6B:13:4D:DC:F4:79:05:86:52:05:C9:00:61:18:6F:1D:01:0D:D2:DC
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 0194258FAECE0E05B78A1762CF2545C2F0CB
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/axNN3PR5BYZSBckAYRhvHQEN0tw.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34624
IP address blocks: 185.71.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:ce:0e:05:b7:8a:17:62:cf:25:45:c2:f0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b134ddcf47905865205c90061186f1d010dd2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:d0:b2:87:38:d8:58:c0:90:2d:b5:30:8c:
cc:ef:e9:f0:0a:1e:9c:de:ff:00:4f:94:46:bf:96:
a9:4d:fa:09:4c:57:6b:e4:bd:2e:35:f3:99:f0:41:
1b:5d:f8:5d:98:7f:ab:7a:78:24:61:92:1d:e1:a6:
4a:ab:84:2f:36:cb:18:33:1a:09:bb:f9:18:87:60:
16:26:bc:32:c5:b9:71:d1:81:b2:88:58:2c:16:d1:
be:8e:e9:e3:48:00:06:a5:7f:2e:8b:e6:d5:35:6c:
65:e4:c3:bd:d5:3e:d5:3d:c6:55:19:c7:95:08:6b:
1e:20:58:03:86:95:82:a6:ab:7f:72:e7:94:dc:c8:
1d:22:bd:5a:d2:6a:b2:8b:68:e1:09:d8:3c:5c:63:
49:a0:ff:8b:e9:23:5b:d3:6d:ab:44:3c:48:2b:9e:
e9:de:28:e4:8a:42:2b:8e:ff:c1:ee:c2:05:61:80:
91:97:26:50:fd:e9:72:32:ba:87:a4:28:1a:d8:2c:
be:9f:7c:c0:56:32:bf:23:e8:97:0b:7f:0d:ed:a0:
ac:85:3d:d3:07:47:9c:72:00:9b:aa:d0:dd:06:bb:
7a:37:b2:d0:89:00:7c:0b:af:28:6d:f7:59:ee:2d:
c9:dc:d7:d0:b6:35:50:a3:30:e6:fe:1b:ef:ef:9d:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:4D:DC:F4:79:05:86:52:05:C9:00:61:18:6F:1D:01:0D:D2:DC
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/axNN3PR5BYZSBckAYRhvHQEN0tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.124.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e3:b5:e7:8f:d6:0c:e1:08:2b:6b:33:3d:71:d6:3a:48:b6:
4a:68:2d:29:e7:23:aa:bf:1c:cd:65:06:fd:fc:74:5d:44:55:
31:4c:d1:87:53:32:5f:3e:a8:1a:a0:db:99:e0:21:b0:22:bf:
dd:c3:ad:50:4f:c8:c2:39:50:29:24:4b:64:29:9b:63:8d:49:
d4:c9:c6:dc:2e:ae:fe:13:49:c1:72:fd:5d:3b:b9:3a:7a:5b:
13:d6:b6:42:94:04:ce:2b:dc:f1:e2:87:6b:0d:c8:90:aa:53:
fc:86:2c:a8:b7:88:a8:a1:8c:e0:3c:35:3d:20:a9:8c:e6:0d:
b6:ff:03:bc:51:59:47:c1:77:98:1f:87:cc:f9:b3:c3:25:08:
25:c4:8e:45:48:5c:02:63:74:32:ee:ba:d5:ae:97:16:e8:9a:
23:e3:cf:ca:9d:05:66:c3:9d:49:a9:19:a6:a5:43:4a:a1:80:
67:aa:9f:47:14:05:d7:42:3c:56:ea:f1:35:cb:0c:21:02:da:
60:01:cf:c9:96:1e:f5:98:ff:e3:57:73:58:28:0c:a6:f8:85:
5c:36:b5:18:9a:a9:9e:1f:ff:09:75:13:32:5f:15:6d:74:c6:
c8:10:9c:d3:13:91:0a:70:6c:96:2c:b7:05:d4:6d:15:1d:04:
69:ed:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:59:28 2025 by rpki-client