Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa
File: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (raw, json)
Hash identifier: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=
Subject key identifier: 30:8D:63:14:18:0A:FE:5E:16:70:20:79:88:AE:68:FA:FD:8E:B7:2A
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 0194244543B182F326EA2F0C91DA32C379F1
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 185.115.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:43:b1:82:f3:26:ea:2f:0c:91:da:32:c3:79:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=308d6314180afe5e1670207988ae68fafd8eb72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:93:d2:74:56:67:f9:f2:8e:35:ac:f1:05:
33:22:7e:2c:1c:fb:9f:52:73:dd:46:cd:db:51:1e:
a6:ba:72:d5:97:cb:f0:9d:b3:6b:f5:53:44:06:7f:
8a:88:93:a9:c7:36:d0:95:e1:d8:9b:c7:99:6a:41:
a6:74:ce:9f:80:21:d0:8b:94:b1:33:39:f2:67:1c:
c4:3c:27:c2:0c:24:e1:5e:be:ea:8b:d3:4b:88:dd:
b7:36:89:bb:f8:f1:d8:fd:c7:39:e3:d4:0b:ef:c0:
c4:03:ee:2c:c4:38:d3:96:87:12:75:4c:72:2b:f7:
3d:58:f0:f4:28:1c:1b:fe:4d:a4:23:78:4d:af:d0:
f6:8f:38:89:c2:38:3d:97:2b:0a:a7:05:ce:00:f2:
13:5b:e8:13:c7:17:8a:5d:0f:d3:cc:bb:1d:6e:24:
a7:60:3c:d3:ba:ee:fa:9a:55:2e:24:9b:7b:2b:44:
b6:7d:1b:3b:fe:53:af:e2:22:77:4c:d1:49:2e:d1:
5f:1a:71:15:43:03:88:6e:f8:dc:22:06:62:c0:77:
fa:a0:ad:88:4d:0a:4b:45:a1:fb:24:40:d0:77:6f:
80:ae:a3:c9:97:dc:44:4e:49:10:62:4b:80:c4:a2:
04:a0:6f:82:2a:e4:9f:0c:00:10:b9:51:c1:eb:b7:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:63:14:18:0A:FE:5E:16:70:20:79:88:AE:68:FA:FD:8E:B7:2A
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:54:63:62:77:e7:b7:32:4d:82:a5:a2:a1:e9:69:2c:d7:7d:
40:2b:2c:aa:84:ce:ae:96:1f:4a:ca:b1:34:be:7b:86:9a:92:
11:d2:a2:13:bb:6c:2a:9b:72:51:f3:19:b4:7d:06:d6:e6:e0:
95:e2:70:d6:24:55:14:e1:22:e1:4b:ba:ca:5f:a9:e3:fe:71:
f5:62:6f:2b:e0:d8:d5:04:c1:8c:dc:c7:89:7b:d9:5c:c6:8d:
01:4f:dc:8f:68:6b:5c:5e:37:c6:38:c9:84:7c:4d:67:ee:82:
1f:98:25:02:f7:cc:bd:6f:49:3a:0c:cf:7c:6a:6a:cf:b3:86:
33:79:bb:09:6d:44:d7:e5:cb:56:e4:9d:ff:f6:59:7b:ce:ee:
7a:cb:8f:3b:2a:c3:8d:b1:ef:5c:66:f4:8b:27:d6:a9:d3:86:
1f:b9:d9:c8:3a:a3:02:91:48:db:f7:b9:ad:08:ff:7b:33:14:
e9:c7:ab:04:6f:2a:27:f9:b9:1d:24:b0:89:93:8d:ea:3e:14:
01:0e:0f:d6:d9:bd:23:d5:72:bb:11:a8:dd:24:3e:82:f1:a1:
d6:7b:33:60:28:8a:5e:f6:46:b6:72:54:a3:33:f3:21:8b:07:
d7:36:bb:31:dc:39:fa:e8:43:1b:97:d0:91:51:48:d8:64:0b:
68:95:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:00 2025 by rpki-client