Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/S5idv9RUVm_2J5GgNAX09HgvY7U.roa
File: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (raw, json)
Hash identifier: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=
Subject key identifier: 4B:98:9D:BF:D4:54:56:6F:F6:27:91:A0:34:05:F4:F4:78:2F:63:B5
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 0194266B13C3864AF6BBDBC3D421CAB9BAFA
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/S5idv9RUVm_2J5GgNAX09HgvY7U.roa
Signing time: Thu 02 Jan 2025 09:48:59 +0000
ROA not before: Thu 02 Jan 2025 09:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205565
IP address blocks: 185.213.244.0/22 maxlen: 22
2a0b:90c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:13:c3:86:4a:f6:bb:db:c3:d4:21:ca:b9:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Jan 2 09:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b989dbfd454566ff62791a03405f4f4782f63b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:28:43:05:29:62:3c:42:11:d5:da:9f:3c:
8e:04:47:9f:c9:bb:dc:c7:9a:6f:b6:04:61:15:5c:
d3:7b:9f:2e:a9:a1:da:16:81:0a:59:41:23:87:59:
a1:ac:b1:f0:1b:b3:61:86:22:c8:75:be:a9:82:38:
c5:11:2e:bd:ea:f1:a6:d8:17:f6:2d:de:3d:a9:84:
5c:42:0f:32:b4:00:58:68:10:e3:7e:0f:d4:ec:d6:
2d:9c:04:4d:08:ab:f4:2f:39:0e:f0:b2:61:5e:95:
4f:14:a2:c6:0d:b7:4d:39:86:47:2d:b8:4a:24:a0:
5c:f9:39:0b:4b:28:d8:db:ce:ca:e8:6d:2a:c9:66:
23:49:e2:35:3d:c9:9e:be:a9:b5:64:42:8e:8d:15:
af:a9:99:ad:c8:ee:27:f2:b3:5a:38:00:ef:55:1e:
a7:45:68:1e:63:b9:42:1a:c5:9e:63:57:49:28:bc:
57:d3:f2:a2:af:fc:80:00:31:35:74:0d:05:02:01:
29:b7:8b:7c:ab:8c:85:95:ad:c0:0a:82:7a:2f:bf:
0b:d6:e0:b4:fc:bd:de:06:56:58:5c:ba:f0:97:01:
21:08:fe:67:80:d6:91:71:b3:f9:28:05:51:76:ce:
25:ff:39:18:a6:ea:45:6c:68:8c:7a:b3:d8:f1:d5:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:98:9D:BF:D4:54:56:6F:F6:27:91:A0:34:05:F4:F4:78:2F:63:B5
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/S5idv9RUVm_2J5GgNAX09HgvY7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.244.0/22
IPv6:
2a0b:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:3c:4b:c4:a8:fd:61:11:72:3a:38:38:c7:58:89:af:f5:ca:
ba:61:04:5d:78:26:e4:ee:35:2d:12:04:5d:2e:da:02:4f:e6:
a2:87:ce:f3:63:d3:58:22:4d:51:a5:4b:02:c7:5b:8f:83:a2:
7f:4d:77:d8:54:6d:f7:53:d3:58:bb:e6:5d:4e:dd:b1:ef:a1:
9b:e6:45:8c:ae:5b:70:0b:de:a5:4d:96:96:cb:f0:28:5b:05:
40:b7:49:c1:97:67:ea:ed:b4:78:4f:8b:37:4e:ac:2a:55:c1:
46:a9:1f:84:95:de:91:12:7c:c2:ca:85:be:e1:87:37:e8:65:
94:f1:30:84:4f:5f:57:ee:3c:42:46:4b:21:c2:27:8e:09:5f:
0f:6b:d6:83:6f:e9:7d:fd:fa:c1:40:4c:51:ae:44:41:85:ee:
70:5a:d0:a0:8f:69:27:11:67:91:0c:ed:ae:17:40:78:08:ac:
95:f8:c0:ad:70:85:f1:fc:07:94:a5:19:df:eb:93:b4:78:df:
15:79:49:76:5e:4a:d6:ae:45:80:e3:6f:e2:fc:c0:54:e8:02:
a0:d4:69:06:65:e1:36:ca:1d:f8:65:fb:2a:7f:05:86:b4:e4:
ce:26:8d:2b:40:fe:99:8b:ea:ae:d5:85:6e:59:07:58:26:76:
c3:85:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:05 2025 by rpki-client