Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa
File: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (raw, json)
Hash identifier: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=
Subject key identifier: 3F:50:1D:C5:4C:94:8D:59:E9:BC:1D:AA:24:61:C3:1C:E4:86:82:A1
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 019422FC0CE3249A6485C7364C460D110C7F
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61417
IP address blocks: 185.90.124.0/22 maxlen: 22
2a03:87a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0c:e3:24:9a:64:85:c7:36:4c:46:0d:11:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f501dc54c948d59e9bc1daa2461c31ce48682a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:52:f6:ce:a9:95:b5:5c:c3:19:48:41:6c:
ba:cb:8d:39:94:57:85:89:79:fb:25:be:1c:a9:1a:
c7:b9:4a:55:cf:d8:0d:a4:a8:e2:9e:70:6c:d9:14:
57:8e:72:ed:7c:7b:be:4a:16:2c:72:c9:df:24:c3:
e1:5e:12:21:98:bb:30:2c:eb:0e:bb:aa:aa:e8:19:
c7:1b:5d:a5:b3:14:5d:11:34:75:49:3d:8e:be:56:
c8:44:44:79:7b:ca:07:a7:fc:47:76:d2:42:10:c1:
60:56:99:e4:d4:51:2b:26:2b:20:67:c2:32:14:b8:
95:e8:48:88:84:a6:1c:bd:13:f7:4a:64:8b:f7:0d:
01:6b:fc:c4:d8:ca:b0:cb:ab:7e:ac:41:13:40:66:
8b:c4:ba:cc:c9:a1:34:f8:22:c3:b8:52:4a:ae:d3:
cf:0c:5d:ea:b4:8d:aa:13:64:dc:f3:5c:71:bf:3d:
c5:bf:ef:a4:a6:b9:bd:bb:47:50:58:31:cc:45:80:
c1:f2:ec:42:c2:f9:fb:a6:67:c5:27:45:eb:b3:3d:
3e:f6:63:88:e7:4a:82:43:50:2d:b3:af:67:33:19:
dc:8f:20:7f:ee:b5:f8:b7:d8:46:c9:29:e8:49:3c:
24:b3:58:d4:de:32:5d:59:ea:7c:29:13:19:4a:51:
48:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:1D:C5:4C:94:8D:59:E9:BC:1D:AA:24:61:C3:1C:E4:86:82:A1
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.124.0/22
IPv6:
2a03:87a0::/32
Signature Algorithm: sha256WithRSAEncryption
30:3d:1f:e0:dc:bd:20:69:ca:7c:44:2b:45:51:07:8c:24:54:
8d:8c:87:e9:9f:2d:16:16:dc:11:08:1a:e0:dc:7e:20:d4:a4:
29:27:74:f2:ca:3c:2b:6c:7c:89:41:fe:4e:f9:01:52:27:3c:
f8:ed:f6:66:04:57:85:b6:e7:3d:f2:a3:66:b4:e0:bb:e8:4d:
b3:5e:55:ac:18:e9:83:88:cf:54:5e:54:23:f6:31:44:56:95:
25:b1:ce:6e:b2:7b:69:2a:46:21:16:56:ac:98:d0:0a:40:11:
99:d0:64:d8:56:cc:24:ca:be:0a:2e:d0:cf:ad:89:e2:78:f3:
20:3b:e9:7b:17:f5:9b:7b:17:74:f3:b2:1f:5d:8b:70:9c:f8:
a5:e1:8b:63:06:45:30:74:04:44:28:9e:91:00:25:51:4e:7b:
80:09:a9:3f:41:fe:65:2d:47:ff:98:b2:ad:1f:69:df:71:a8:
c9:a9:7b:a8:51:87:43:a0:c7:1c:d0:bf:7e:ab:3a:c9:df:12:
1e:11:3f:af:cd:e7:48:bd:1e:ff:86:aa:e7:21:e2:c6:4d:74:
b9:5d:ad:9f:ff:c7:d1:8b:a2:7b:4f:38:b1:ea:8a:10:26:65:
b8:cd:10:67:95:27:1f:77:86:05:46:d7:15:e9:35:3c:3a:85:
02:b6:33:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:21:03 2025 by rpki-client