Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/DUYlFbh6FULGzgdthf_PMDp6hOU.roa
File: DUYlFbh6FULGzgdthf_PMDp6hOU.roa (raw, json)
Hash identifier: JR7UbEi2bM6dLHHY3xrq1gui3NHbn1GkWRWkFGTRYw0=
Subject key identifier: 0D:46:25:15:B8:7A:15:42:C6:CE:07:6D:85:FF:CF:30:3A:7A:84:E5
Certificate issuer: /CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Certificate serial: 0194258F121BF48FFA006966D2E2DCF50807
Authority key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/DUYlFbh6FULGzgdthf_PMDp6hOU.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211783
IP address blocks: 185.197.136.0/22 maxlen: 22
185.197.136.0/24 maxlen: 24
185.197.137.0/24 maxlen: 24
185.197.138.0/24 maxlen: 24
185.197.139.0/24 maxlen: 24
2a0a:7a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:12:1b:f4:8f:fa:00:69:66:d2:e2:dc:f5:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d462515b87a1542c6ce076d85ffcf303a7a84e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3a:35:94:50:37:13:27:8e:ed:4b:ef:19:d2:
c7:e6:28:50:79:11:2e:08:d2:3e:25:6e:82:ab:47:
67:ae:7e:e5:11:66:f9:1b:b8:3a:42:54:47:c2:55:
62:7c:c3:92:c4:25:a6:21:a7:8b:56:80:6f:71:47:
1d:35:0b:bf:f9:9b:62:de:b8:de:89:19:33:58:88:
8d:09:42:f5:b2:36:49:0c:64:8b:d1:e7:5e:1b:e0:
1d:4c:48:0d:9a:f3:5c:16:a3:6b:47:33:4c:15:c2:
cd:9a:8a:c1:11:10:9a:9f:4c:5c:80:b2:aa:f8:5f:
18:71:f8:b4:63:f5:e1:f7:a3:cf:b6:5c:2d:d9:ea:
e1:9c:43:6c:ad:35:ca:2a:4d:27:f7:08:15:a5:7b:
3c:f4:9c:52:fd:22:65:1d:7f:1e:53:29:51:90:f3:
93:2b:56:4a:8b:2b:35:09:b0:c0:53:c3:d3:4c:4a:
a2:2c:ed:48:30:2d:db:a8:4f:c4:8e:72:ab:bd:1a:
4e:b8:df:64:94:48:d2:4a:ea:f3:c3:e5:9d:aa:b7:
27:e1:4f:ca:42:d0:03:be:28:7d:8c:83:a5:04:9c:
c9:89:7f:92:65:6f:a1:f2:aa:22:49:7c:b8:cc:1d:
c0:c3:04:c4:19:46:27:5f:82:b8:a9:e8:05:8d:9b:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:25:15:B8:7A:15:42:C6:CE:07:6D:85:FF:CF:30:3A:7A:84:E5
X509v3 Authority Key Identifier:
keyid:3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/DUYlFbh6FULGzgdthf_PMDp6hOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.136.0/22
IPv6:
2a0a:7a40::/29
Signature Algorithm: sha256WithRSAEncryption
54:11:09:d9:49:0a:b2:a4:bb:5f:fd:7f:77:18:eb:ce:08:c9:
f1:9c:93:ad:f7:a9:66:7e:8b:0b:2f:7c:b6:9e:09:df:e0:1e:
b9:80:c6:89:a7:2b:40:5c:67:1c:f2:51:56:41:b8:2c:dc:62:
5b:62:b5:0b:74:7e:d0:0a:fa:7a:80:7d:56:a9:cf:f3:a9:f4:
bd:2d:b5:a1:95:5c:1e:69:bc:d9:11:c1:2b:df:90:16:b3:44:
9c:e5:8c:81:eb:9a:b6:45:29:e9:76:34:f4:be:cc:1e:97:07:
a8:07:3b:7d:c9:06:b7:10:72:49:fc:10:93:b5:30:61:e1:4b:
b8:fc:8b:83:e1:83:07:d5:f6:6a:db:91:50:59:77:dd:64:f0:
6e:02:c8:0d:45:93:67:2c:28:37:1c:b3:c4:2e:9e:52:32:24:
b9:6b:ad:c4:48:53:9d:8e:1f:ae:fa:15:a1:04:76:25:e8:10:
27:bd:43:2a:b3:e0:3c:01:79:07:4d:08:f0:2b:a2:ad:b2:30:
54:04:a7:d7:7b:da:6e:86:38:dc:cd:68:48:b4:4f:b5:7b:7e:
f9:cd:fe:a9:90:be:c5:b1:50:7b:20:6e:4c:3f:c5:d9:36:af:
6a:3d:3f:bb:04:e5:68:e4:2b:16:0a:fd:5f:49:5e:3d:bc:89:
00:5f:78:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:33 2025 by rpki-client