Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/v4giAVOJMEch9tYcozCGJgelH1M.roa
File: v4giAVOJMEch9tYcozCGJgelH1M.roa (raw, json)
Hash identifier: OUMy4ShdW4gTpBY9LdojzedOmb/sODuZT4FZY1l2uCM=
Subject key identifier: BF:88:22:01:53:89:30:47:21:F6:D6:1C:A3:30:86:26:07:A5:1F:53
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019423D806E933126B12F77A1D25919ABD74
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/v4giAVOJMEch9tYcozCGJgelH1M.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212097
IP address blocks: 185.227.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:06:e9:33:12:6b:12:f7:7a:1d:25:91:9a:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf8822015389304721f6d61ca330862607a51f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:43:a8:94:bc:28:43:8a:e7:6b:5e:5f:84:
06:11:eb:cb:c2:b2:a2:81:34:b3:4f:11:10:cd:21:
1d:28:64:1f:8c:71:e7:eb:12:8e:32:28:02:ec:53:
94:10:14:33:a6:bd:ad:17:fa:2e:3c:57:44:6f:dc:
10:2c:0e:8f:24:b3:2b:a0:f3:f5:b1:3b:7f:5a:76:
f0:2a:1d:0b:9d:53:df:eb:d3:bf:ea:6c:7d:69:db:
c6:4b:bf:6d:9d:da:8f:fa:76:ad:a8:dc:19:87:68:
33:00:32:35:e3:6b:d1:b5:6d:e8:cf:cd:80:81:84:
bb:d0:9b:b5:76:23:50:4c:28:c0:b7:79:1a:61:3e:
ef:ac:2e:25:f5:8b:4c:73:9b:cd:68:c5:89:3e:24:
21:76:44:76:7b:58:3f:19:ed:7e:22:50:48:f8:fc:
4b:5e:c5:a9:96:ad:7f:99:74:57:34:29:e6:b5:03:
8c:e1:84:42:e9:3b:17:56:8a:61:55:7a:81:23:fd:
57:0c:ad:4f:2c:1c:9d:c0:62:1f:27:ee:34:71:a6:
e5:20:d9:5b:92:c5:9c:17:37:7a:cd:d5:ee:87:91:
19:7d:4f:15:68:a7:33:05:4b:3f:52:53:9e:21:8b:
1d:96:0d:f0:f5:89:e0:7a:90:67:be:2a:29:28:c7:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:88:22:01:53:89:30:47:21:F6:D6:1C:A3:30:86:26:07:A5:1F:53
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/v4giAVOJMEch9tYcozCGJgelH1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.219.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0b:7e:00:a9:a7:e6:1e:a9:0c:46:ba:6c:a2:50:b9:63:60:
5a:f3:c1:19:e3:61:90:cc:94:6b:46:5e:bf:25:6b:cd:25:86:
b7:46:f8:d0:89:fc:81:2f:9f:8b:cb:2e:5e:f3:f3:e9:6b:5a:
ce:7e:05:d3:ba:e6:3a:3a:69:55:55:52:d4:37:9c:80:3d:68:
3d:9d:13:e3:87:d4:a9:e5:52:b1:d6:dc:f3:7e:82:8e:45:75:
91:a4:f2:6b:08:87:68:a7:34:40:75:ad:28:5d:17:35:39:8c:
c4:70:9f:7a:47:38:12:f3:a7:4b:aa:66:dd:97:42:97:f9:b8:
32:f7:6f:d6:14:85:a4:dc:40:06:1e:8a:3d:7c:7d:47:99:b4:
ed:0a:14:b7:16:be:51:69:a5:21:b0:0d:81:67:4d:35:25:05:
7b:91:36:ef:7a:16:23:e8:1a:df:4d:3f:fa:50:c5:0c:81:57:
bc:ef:73:87:da:19:25:6f:d9:d2:98:93:ec:94:34:ab:cd:9f:
08:31:a2:18:c3:b2:51:1e:ed:20:6d:ab:8d:9d:c7:de:10:1e:
3f:d3:7e:71:03:bd:1b:1d:41:71:b8:e7:ac:1e:7f:e8:76:ec:
89:2f:9a:51:20:e8:f5:bf:58:fd:ee:12:61:be:90:98:a2:34:
42:93:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:35 2025 by rpki-client