Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/0k2RQNwafgZ-e81VbpAz2vrqb3k.roa
File: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (raw, json)
Hash identifier: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=
Subject key identifier: D2:4D:91:40:DC:1A:7E:06:7E:7B:CD:55:6E:90:33:DA:FA:EA:6F:79
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019420D5F21A74AC80C08F4CDA3E63CE1876
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/0k2RQNwafgZ-e81VbpAz2vrqb3k.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41960
IP address blocks: 185.75.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f2:1a:74:ac:80:c0:8f:4c:da:3e:63:ce:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d24d9140dc1a7e067e7bcd556e9033dafaea6f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:e1:aa:07:66:df:70:ef:ed:03:53:6b:e6:
6f:e6:d0:7f:f4:a7:03:bd:3a:34:80:39:64:53:99:
45:ab:55:d9:2e:49:c5:0d:19:28:a7:ac:24:8d:7c:
51:1e:a8:17:1e:ce:01:33:a6:33:d9:df:0d:4c:2b:
16:a1:c1:92:7d:66:06:d1:86:eb:e3:72:f0:ad:d6:
cd:4b:bb:bc:43:04:c3:76:1b:a4:43:00:0e:ee:51:
3a:9e:c9:5f:3c:34:e5:af:2e:81:27:60:ce:b4:d0:
fd:46:7f:1e:12:83:5b:3f:56:12:80:91:f7:88:7d:
60:09:de:cc:40:a6:64:a3:ea:f8:44:a4:e7:e2:56:
bb:cf:2b:af:00:91:e5:07:b0:37:33:5e:e0:76:63:
da:eb:b7:2a:c0:0d:19:93:8e:29:49:7b:48:1d:2e:
1e:40:a6:91:34:c3:6d:87:2e:fd:19:98:92:b9:39:
43:6e:a8:f2:3f:e1:a1:48:91:46:35:07:01:a7:b5:
30:a0:ad:20:ef:25:f2:08:c4:87:1e:70:07:3c:1f:
1e:91:ac:ae:cd:f3:19:51:b1:07:32:b2:fd:e0:45:
87:83:89:90:5a:f5:31:de:d5:8c:07:79:06:7a:a6:
aa:21:3d:cc:c3:50:57:61:40:81:2d:91:a9:75:89:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4D:91:40:DC:1A:7E:06:7E:7B:CD:55:6E:90:33:DA:FA:EA:6F:79
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/0k2RQNwafgZ-e81VbpAz2vrqb3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.246.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a1:4f:20:16:eb:4a:7c:68:a9:8e:af:82:29:13:1d:ef:66:
14:ce:f0:1f:bc:6f:c3:7a:e3:13:d9:a7:da:7d:d6:78:af:cc:
50:cf:0d:be:9a:07:6d:f2:ba:1f:05:40:ca:a2:01:39:4c:8d:
9a:b1:9f:19:c6:5c:7c:6a:c1:97:88:96:bd:73:9e:25:e7:10:
c6:50:36:51:ca:d4:69:11:6a:f1:a4:93:b5:de:b8:e1:97:36:
a1:b1:c9:e7:b5:19:ee:6d:da:89:c0:01:9c:11:66:b0:93:8e:
d9:6a:89:ad:11:bc:db:61:36:a8:7b:1e:32:ae:25:39:e2:1a:
40:a5:7b:39:9a:63:46:6a:37:0b:88:a1:b3:d5:aa:05:47:24:
ce:d5:90:40:82:f6:8d:29:97:6b:b2:10:bd:51:fe:fd:05:2e:
4f:f1:87:71:aa:63:7a:d4:d6:ed:83:fb:7a:c9:53:f5:45:56:
fb:2d:88:5c:ce:96:e5:c6:3e:e6:71:21:f6:93:1b:08:c6:6a:
82:88:00:7d:be:f2:0a:25:4b:01:f2:6f:40:64:54:82:5b:07:
dc:f5:85:91:89:4e:76:eb:de:27:28:05:50:e4:55:66:d6:92:
65:56:5a:bf:d9:4a:7a:b1:a4:9b:3d:c7:29:b3:05:c1:5d:54:
b5:06:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:35:23 2025 by rpki-client