Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/cZUoXKNyODDdYDJJ689IFt9l7Fg.roa
File: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (raw, json)
Hash identifier: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=
Subject key identifier: 71:95:28:5C:A3:72:38:30:DD:60:32:49:EB:CF:48:16:DF:65:EC:58
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019483D2EE52370BFAFAC7E19DEDD733B735
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/cZUoXKNyODDdYDJJ689IFt9l7Fg.roa
Signing time: Mon 20 Jan 2025 13:07:06 +0000
ROA not before: Mon 20 Jan 2025 13:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 185.182.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:d2:ee:52:37:0b:fa:fa:c7:e1:9d:ed:d7:33:b7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Jan 20 13:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7195285ca3723830dd603249ebcf4816df65ec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:ea:26:75:25:82:36:ff:51:c7:77:8d:84:
60:3c:f9:88:62:69:ee:96:2b:24:90:75:2c:b8:8e:
d1:d0:bb:b8:1c:91:50:8c:04:20:03:9f:08:f5:06:
13:19:55:58:2f:d0:b6:50:7c:91:10:dd:87:34:3c:
f5:c3:9e:19:88:4b:77:51:41:ee:f3:a6:36:7a:73:
7a:10:03:35:d5:0c:b9:97:77:c0:74:31:32:75:c5:
f5:c5:e5:cb:a7:59:43:db:8f:8d:c2:11:ea:14:3f:
b8:7c:da:86:be:a8:44:e0:1c:bb:a7:7a:79:67:21:
fa:10:7a:92:59:2c:56:e4:c0:45:4e:8c:05:e1:47:
c6:19:e2:b0:db:e7:c8:8c:be:96:1d:2e:fd:ac:33:
86:2e:ef:dc:8c:f9:0e:2c:a1:43:fe:62:c7:ab:3b:
c2:b0:a9:64:fe:9a:cd:54:e0:ec:ae:d5:b4:a8:68:
80:80:9b:8d:48:9c:12:24:2c:11:0a:a2:b1:10:42:
5e:e4:df:a0:0a:bc:5d:10:16:9a:53:de:76:19:87:
79:ee:d4:01:63:cd:51:fa:a4:98:c3:13:96:13:1e:
58:18:bb:0e:ff:42:1b:ab:1d:c9:55:b5:77:f8:1f:
8b:f9:f6:9e:f9:c7:4c:02:63:73:f2:27:68:11:bf:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:28:5C:A3:72:38:30:DD:60:32:49:EB:CF:48:16:DF:65:EC:58
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/cZUoXKNyODDdYDJJ689IFt9l7Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:69:fe:85:04:1c:f6:ad:bc:b9:3b:aa:3c:7c:e0:c8:e8:c6:
96:4c:d0:3c:b4:7e:bd:a6:19:20:2f:5e:b6:74:5a:fe:b8:1a:
f6:c4:40:8f:b5:46:cd:7a:f6:a6:92:a8:d7:e8:2e:85:bc:2f:
95:c4:e5:58:0f:a1:d5:2d:31:ca:49:a4:ce:78:b1:ed:a2:87:
43:75:07:17:1e:cf:bd:bd:e3:c5:28:5e:f0:33:a5:15:71:e8:
d2:66:25:ed:59:e6:8c:d5:80:77:43:f3:61:3c:50:ed:6f:ec:
27:b1:a8:a2:f9:05:56:06:e9:f7:23:69:6e:c7:fe:48:a4:b8:
ce:55:b2:06:6c:53:8d:5c:9b:e8:55:1c:d9:1d:7f:ed:16:ec:
20:ff:bc:99:cc:09:48:73:f4:10:fb:de:f2:8a:7a:00:ca:e5:
14:21:89:2d:c2:48:8e:b0:aa:7f:a4:74:30:37:18:cf:08:a3:
dc:70:10:f4:74:14:ab:b0:65:c3:15:cd:9a:3c:e5:75:80:c8:
ac:fc:d1:1f:f7:b7:09:e9:99:a1:93:3f:ef:84:52:2b:c7:b0:
ff:fe:93:9f:31:d3:db:d1:29:5a:cd:e6:99:b6:bb:e0:bd:39:
08:3e:1e:ba:01:0b:c0:d6:17:c8:c7:35:08:f0:64:d7:36:62:
61:d0:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:49 2025 by rpki-client