Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa
File: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (raw, json)
Hash identifier: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=
Subject key identifier: F6:03:DD:9E:5B:BC:A7:3A:D4:5B:72:62:D2:CC:54:1D:9C:38:65:0E
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 019428264D2E4A389688521384305516ED60
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa
Signing time: Thu 02 Jan 2025 17:53:06 +0000
ROA not before: Thu 02 Jan 2025 17:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208887
IP address blocks: 185.242.192.0/22 maxlen: 22
185.242.192.0/23 maxlen: 23
185.242.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:4d:2e:4a:38:96:88:52:13:84:30:55:16:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Jan 2 17:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f603dd9e5bbca73ad45b7262d2cc541d9c38650e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:80:ce:e6:73:96:a5:b8:30:2d:33:a3:83:
23:ad:03:32:ca:cf:54:99:5d:d0:cb:43:cf:a1:93:
be:7f:b1:48:e0:91:80:f6:af:45:95:da:bc:59:38:
0a:31:82:54:18:eb:ce:c1:60:2f:95:68:4f:a7:e9:
f3:1b:d8:95:5e:67:b8:fe:21:6a:9c:b5:ec:38:8f:
98:31:e2:31:9e:4f:95:ef:e2:4a:ba:35:4f:c0:5e:
88:d5:89:fb:17:36:44:3f:d1:f1:38:16:a3:29:67:
51:56:46:c5:f2:67:15:73:36:18:21:74:21:3f:e2:
d6:0a:17:79:10:84:c2:c6:b8:ed:a0:66:0e:c8:5b:
0e:b8:ab:90:ff:0d:ad:5a:1b:db:86:93:47:ea:1d:
66:b1:13:1d:48:45:37:99:d1:3e:5a:5e:0c:c7:33:
c6:90:8c:07:06:d1:a8:f9:16:1b:12:a5:a6:4a:c7:
c0:77:0f:27:32:2f:6d:ec:ca:f4:1a:62:9e:83:72:
e0:46:ba:91:18:23:cf:87:da:44:5f:61:93:35:4e:
a8:6a:98:02:76:d4:84:65:bc:6e:7a:dc:96:bb:c3:
49:9f:d2:1a:16:da:a7:99:9b:39:9f:1d:33:84:5e:
f7:75:f4:c5:12:44:53:af:14:1d:0c:be:8a:0e:5a:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:DD:9E:5B:BC:A7:3A:D4:5B:72:62:D2:CC:54:1D:9C:38:65:0E
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.192.0/22
Signature Algorithm: sha256WithRSAEncryption
46:da:63:e8:e2:99:12:d5:b9:d4:a6:36:3c:98:c0:1b:1b:32:
f1:46:f6:1b:fc:62:de:75:ec:c9:04:e3:df:d0:80:c4:a3:72:
f6:b6:5b:ad:bf:30:d7:6b:ed:a5:40:4c:a6:7e:01:a0:4f:1b:
e1:d6:2f:ae:dd:21:b5:ed:22:de:96:e7:f3:0b:b3:27:0d:65:
a5:d8:05:e6:f3:d9:ba:1e:a4:44:e0:62:a4:01:98:ad:f3:ad:
c0:09:be:8b:1d:b3:dc:90:ee:42:2e:ac:8f:09:95:bc:33:d3:
04:95:ea:2d:c0:34:fb:ec:45:49:f8:62:e7:00:d7:15:d4:06:
26:81:5e:5b:9a:c0:c6:40:55:82:1d:7d:a4:17:4a:38:55:30:
fc:9f:9b:d0:5d:fe:dc:bc:d0:62:c9:9b:c8:f6:14:e0:03:0f:
8b:28:73:4e:7d:06:13:71:6d:18:01:44:d9:1f:2a:d2:bc:7b:
6e:d3:64:58:3f:23:d8:91:d1:cf:b7:a4:75:64:0b:7e:14:b1:
03:91:b6:5a:9d:f5:0c:1a:c3:a1:01:4f:ac:1f:46:59:76:3e:
8a:e5:46:3e:11:ca:52:bd:c1:48:60:66:88:60:72:cd:0c:05:
a0:ae:cc:7a:a6:9d:66:1c:ed:a9:64:8f:79:d7:e2:9a:a0:b1:
6f:80:1f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:05 2025 by rpki-client