Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wD39RGI7rowc2TUxuIL6LKxtOOM.roa
File: wD39RGI7rowc2TUxuIL6LKxtOOM.roa (raw, json)
Hash identifier: tBVHSSGRtV60IRdcTG29hqjbc8XZjuF7F67KGZN5mAQ=
Subject key identifier: C0:3D:FD:44:62:3B:AE:8C:1C:D9:35:31:B8:82:FA:2C:AC:6D:38:E3
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483FE1B0F64CC8EB80F1DA49A2E6A3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wD39RGI7rowc2TUxuIL6LKxtOOM.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56909
IP address blocks: 185.244.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3f:e1:b0:f6:4c:c8:eb:80:f1:da:49:a2:e6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c03dfd44623bae8c1cd93531b882fa2cac6d38e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:09:c4:73:8b:08:c2:ce:f4:d9:12:53:50:
0a:db:b5:83:84:7b:2d:f7:98:5a:84:5a:f6:be:18:
40:dd:e5:b9:22:c8:97:4e:df:4d:65:b9:0f:fc:73:
0a:8a:11:08:0c:37:73:61:da:84:a9:0a:04:53:f8:
2c:5c:2f:9e:bc:47:d3:42:a5:34:b2:90:91:00:4e:
a7:03:6f:de:73:5f:63:31:8e:c2:28:b4:f9:53:76:
c3:e6:5a:32:1f:18:e0:31:30:f8:99:66:31:d6:ae:
2d:1b:55:36:31:5a:da:1a:f1:e0:3c:f3:e4:1d:3a:
54:03:c4:b8:81:68:bb:a2:8a:4c:4f:2d:01:6b:d9:
89:72:e8:fb:9c:de:84:79:c2:24:00:e9:36:ac:51:
ac:ed:92:37:c5:cc:0b:20:ca:d6:e0:4a:88:16:3a:
85:a6:97:f1:6a:62:38:19:aa:8e:d9:12:67:5a:4a:
f9:e4:b8:0f:9d:52:ce:cb:36:c5:4f:04:da:51:a6:
4a:de:f6:b2:4e:85:02:07:35:b5:d6:13:67:e3:12:
e0:1b:9d:d2:45:63:b9:12:07:c7:88:48:71:f3:59:
4b:3b:be:01:b6:b2:98:5c:a2:a0:c8:51:5a:e9:89:
41:b4:ac:4c:2c:95:1f:5a:1e:92:2b:87:10:02:91:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3D:FD:44:62:3B:AE:8C:1C:D9:35:31:B8:82:FA:2C:AC:6D:38:E3
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/wD39RGI7rowc2TUxuIL6LKxtOOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.234.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ce:af:a5:29:8f:48:f9:bd:91:d3:27:c9:f2:bf:f5:e0:42:
74:5f:df:71:4d:41:34:4f:6a:9d:66:a5:cf:6f:3f:a7:a7:c5:
a1:08:c9:66:25:c2:7a:04:21:f3:35:27:de:78:d7:a4:bd:74:
c2:41:6c:2d:d1:03:87:c4:28:0a:34:5a:11:6a:2d:ff:11:98:
be:a1:37:34:7a:0b:2b:ef:31:ef:5d:94:f1:09:a1:3c:ce:6f:
80:6c:6c:b9:71:4b:bc:1b:26:7c:69:c8:25:ad:09:c1:ef:4b:
bd:ef:8f:d7:cf:78:47:32:8e:3e:4e:da:86:04:34:c9:87:c8:
13:34:55:e5:92:60:be:3b:6b:e6:c7:ea:37:91:fa:62:ab:28:
50:22:cd:4e:5d:ae:4c:99:03:98:46:51:36:89:03:7a:bc:58:
f0:df:73:0c:08:f8:cb:4e:33:2d:f6:c2:a0:9e:61:67:df:80:
ce:a4:e5:ac:e7:61:f5:e0:1f:63:c3:c6:e8:2b:79:ee:f4:49:
62:17:75:a2:c2:51:4d:5d:aa:2d:8d:3b:2e:94:f1:6d:36:5d:
02:b4:ab:42:66:3c:8b:54:99:84:f7:bc:b7:ee:df:64:96:c8:
91:30:32:dc:58:d7:00:a7:2f:15:12:51:32:9b:d2:80:65:f9:
c7:18:01:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:27:01 2025 by rpki-client