Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/rADueZxFQHJbIbrjKeYeAXGGBpc.roa
File: rADueZxFQHJbIbrjKeYeAXGGBpc.roa (raw, json)
Hash identifier: qtSN6Vm03JzTJBZ5ewdm444W/Qon6bt3NPDuYq9sI8U=
Subject key identifier: AC:00:EE:79:9C:45:40:72:5B:21:BA:E3:29:E6:1E:01:71:86:06:97
Certificate issuer: /CN=1530fbea2501495977d38815ad3c270826f063a0
Certificate serial: 0194266C08970E99B7CA29802BD02C5A13EA
Authority key identifier: 15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/rADueZxFQHJbIbrjKeYeAXGGBpc.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205783
IP address blocks: 185.200.48.0/24 maxlen: 24
185.200.48.0/25 maxlen: 25
185.200.48.128/25 maxlen: 25
185.200.49.0/24 maxlen: 24
185.200.50.0/24 maxlen: 24
185.200.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:08:97:0e:99:b7:ca:29:80:2b:d0:2c:5a:13:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1530fbea2501495977d38815ad3c270826f063a0
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac00ee799c4540725b21bae329e61e0171860697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:9e:a8:29:e8:26:6b:07:3f:c5:50:ab:4b:
01:51:ee:5c:00:21:39:a3:e1:c7:ce:df:b3:50:73:
52:ca:94:00:0e:49:20:de:8c:28:c8:8d:39:ea:b8:
56:b5:5a:ef:17:73:46:e4:d1:2c:47:ca:68:02:0a:
ff:08:16:ae:a2:0d:0f:ea:af:39:71:3a:1c:7e:64:
3d:b8:0f:11:d1:a0:1e:67:24:34:3d:d3:4f:ee:c0:
ef:38:8f:ca:15:c0:0d:1e:a5:3f:7b:9d:f1:ab:c4:
d3:92:ae:3e:19:a4:ce:2f:8d:75:59:97:fe:8e:3a:
f1:52:2e:7d:5a:17:3c:f0:ce:74:bd:ef:32:d3:eb:
c1:42:b3:f3:8d:93:2e:18:67:1d:58:78:d3:75:17:
a4:8b:4d:fb:85:f0:b3:75:33:39:76:c2:c4:9f:f5:
34:ec:08:32:ed:8a:64:d4:b6:d6:19:94:7c:84:bc:
6c:88:45:37:62:64:e6:21:c7:4a:ff:ec:61:b4:62:
71:4e:4b:ae:ea:08:01:86:e4:38:d8:26:36:fb:6a:
41:5a:2c:ec:f1:02:e6:64:1c:f1:5f:af:1c:fc:ae:
40:5c:dd:99:80:d3:2d:d5:48:b9:ed:5e:ff:7b:c2:
b4:27:58:7e:ef:86:c9:5f:68:01:1a:e6:0e:86:a9:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:00:EE:79:9C:45:40:72:5B:21:BA:E3:29:E6:1E:01:71:86:06:97
X509v3 Authority Key Identifier:
keyid:15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/rADueZxFQHJbIbrjKeYeAXGGBpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.48.0/22
Signature Algorithm: sha256WithRSAEncryption
69:10:34:ec:01:69:3c:02:fe:01:0c:fa:86:e4:44:94:85:e4:
80:39:ed:23:9d:b7:be:5a:27:e7:e3:77:8b:1f:cd:e7:74:ab:
32:6b:80:0a:fb:85:8a:76:95:57:33:a6:14:e4:10:2a:f9:e1:
87:6f:46:04:dd:4d:6e:62:5b:55:5c:30:ec:76:c6:4e:38:15:
48:0f:26:53:b0:51:93:96:b1:9b:aa:ab:aa:06:5c:44:05:fc:
56:6b:e2:e6:87:e2:e0:7c:4e:c5:b1:4a:34:36:61:a9:75:4f:
55:3d:9e:40:d7:25:05:f9:1f:92:76:18:24:61:0d:ef:94:fb:
4e:4d:b8:44:91:c9:94:8c:a5:95:50:47:a1:62:41:48:62:8c:
f7:58:18:65:65:ed:81:b8:75:1d:7b:b0:b3:a0:36:68:a9:fd:
56:12:fb:f7:cb:e0:bc:1e:8d:80:8b:cb:c5:50:82:33:7d:eb:
d8:f6:c9:62:e6:80:b6:7b:70:12:c9:e6:d3:fb:f0:86:5c:6a:
70:eb:39:7c:39:32:8f:7a:14:f6:d3:71:76:10:ff:72:51:cc:
3a:96:f5:af:7a:69:89:a8:31:33:90:25:63:ad:52:11:e6:2e:
54:94:55:41:2c:c3:ed:ce:06:c2:26:94:c6:50:e7:22:51:82:
a4:50:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:16 2025 by rpki-client