Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa
File: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (raw, json)
Hash identifier: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=
Subject key identifier: 44:12:7E:2F:48:27:2C:23:3B:46:FF:5F:D5:AE:AE:C6:7E:D8:BB:ED
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019421B1B160F63E73A30492F82245AC8941
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.213.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b1:60:f6:3e:73:a3:04:92:f8:22:45:ac:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44127e2f48272c233b46ff5fd5aeaec67ed8bbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:36:75:26:35:9b:3f:ad:d0:d3:da:a4:87:
4b:89:c3:36:74:14:56:81:be:a6:9d:92:9e:57:0b:
fb:88:27:84:37:8f:4a:86:a6:9f:1b:4d:4d:5a:a5:
97:2b:4d:1e:67:90:46:ab:fe:6e:3f:12:b4:ce:9c:
a6:54:a5:5e:67:ea:f8:50:fa:6d:b8:7d:b1:12:5a:
ea:bb:23:a4:0d:27:38:3c:6f:4b:b3:d1:bb:ee:e4:
c0:46:39:d3:60:af:cd:11:74:fe:a8:17:26:b4:75:
fd:94:ea:08:81:27:7f:9f:80:ba:8a:1a:68:d4:a3:
de:4b:6e:3b:f9:d4:10:60:98:1d:9d:c8:af:f8:dd:
6b:17:f1:08:7f:d7:c4:7f:51:69:de:10:7c:4f:29:
e7:5f:5e:02:30:2f:37:76:0f:a9:d8:9b:d8:17:85:
d9:95:9f:65:3e:e2:16:f6:08:e8:6a:1b:1d:d1:26:
32:1f:9e:6d:5b:16:db:42:78:0f:13:34:94:63:f0:
58:fe:15:48:57:d6:81:46:38:96:a8:b6:16:78:10:
40:67:9d:9b:c8:77:6c:67:95:3e:9f:b8:b1:83:d9:
f0:6a:38:3e:11:c7:34:27:ea:f2:28:c2:d8:9c:6a:
fd:b8:d3:b4:d6:23:48:82:dd:7a:d2:ae:89:18:f4:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:12:7E:2F:48:27:2C:23:3B:46:FF:5F:D5:AE:AE:C6:7E:D8:BB:ED
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.47.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4e:d5:1c:66:f7:6d:30:b9:c6:eb:15:18:c4:c6:9c:a5:8e:
48:17:11:8f:30:4e:30:93:ef:38:9b:a7:ac:83:b1:21:ff:e9:
b1:46:08:82:85:4b:ee:18:c8:d3:b7:22:1d:bf:97:ae:f2:bf:
37:66:0d:03:c4:9b:73:74:77:4c:04:42:19:66:e0:3e:b8:0b:
aa:7a:24:3d:47:8e:5c:a9:c6:d9:b8:49:86:ab:50:a4:72:5d:
24:90:25:c1:45:39:97:e4:39:4d:9e:66:5b:9a:db:6b:8f:90:
65:91:e3:b9:57:c3:b9:bb:1b:66:6f:7f:58:08:03:8d:81:b1:
ca:66:43:99:3a:01:17:2f:dc:b1:78:7d:3f:27:b9:69:27:b3:
3e:64:04:c6:31:16:a3:89:24:47:a2:a9:6a:a8:ab:6c:88:11:
a8:3a:be:12:f8:36:43:e0:82:55:a4:96:05:df:30:aa:9a:88:
e3:33:bd:69:31:1a:ac:05:4a:70:36:c9:95:56:8f:6f:d2:d0:
7a:df:61:9e:f4:d2:91:c7:d5:37:aa:79:f0:3f:72:18:8f:95:
26:02:9b:4b:e8:9b:22:79:6e:8d:3f:1a:54:d2:ec:de:e4:64:
21:a9:b8:90:f9:84:90:1f:96:be:2c:66:83:0f:50:a1:15:4a:
8d:47:1e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:22:19 2025 by rpki-client