Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/RnPjQu1TRB6OusL4aMQpC4JKqmI.roa
File: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (raw, json)
Hash identifier: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=
Subject key identifier: 46:73:E3:42:ED:53:44:1E:8E:BA:C2:F8:68:C4:29:0B:82:4A:AA:62
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 01942444BA2CB59522DD2EFF140379CC57E8
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/RnPjQu1TRB6OusL4aMQpC4JKqmI.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 185.127.180.0/24 maxlen: 24
185.127.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ba:2c:b5:95:22:dd:2e:ff:14:03:79:cc:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4673e342ed53441e8ebac2f868c4290b824aaa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:a9:b2:3d:0d:2e:13:51:2f:21:7b:03:be:
0c:15:43:73:d2:45:89:f5:df:dc:10:a2:62:d3:0c:
1a:81:11:6d:78:9d:c5:dd:ee:32:c1:cc:e7:11:f3:
e6:69:1a:b6:bb:d5:60:87:e9:e6:67:79:fd:cb:99:
72:cb:5f:94:b0:d7:7d:8c:ed:da:26:10:e9:83:a9:
f5:39:9f:67:3a:2c:1d:ee:5b:41:95:5d:fb:20:e3:
0d:b5:32:2f:7f:39:1d:39:65:0e:08:d2:37:dc:d3:
e0:6a:65:a0:ac:e9:1d:d3:2e:b9:bf:ee:63:ad:9c:
69:cd:6a:39:0a:64:0d:9f:73:1e:9c:ac:04:1a:b4:
23:ae:c5:15:3b:b4:ba:ba:1d:02:a2:f6:a9:14:c6:
5f:23:41:69:13:da:35:7a:9a:03:c9:29:88:78:ac:
30:b8:93:b1:09:71:2e:6d:1a:86:cb:2e:3b:0a:84:
8c:39:5a:01:f0:bd:89:ea:87:54:32:87:62:b6:17:
aa:71:6a:df:09:ba:45:a0:d8:ff:01:29:20:c0:8d:
d3:f9:3e:79:01:be:c5:82:05:05:a3:cb:96:7e:a8:
4d:6d:44:59:56:be:d1:e1:6b:6f:77:32:51:08:11:
c7:cd:fa:86:0c:03:97:9d:1d:97:21:84:67:f9:3b:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:73:E3:42:ED:53:44:1E:8E:BA:C2:F8:68:C4:29:0B:82:4A:AA:62
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/RnPjQu1TRB6OusL4aMQpC4JKqmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.180.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:89:46:b9:b2:40:49:fa:49:d0:4c:99:fc:71:bf:3b:9e:97:
81:9b:96:41:05:7b:19:ca:61:13:02:0a:35:da:84:d8:6d:16:
f3:6f:bc:4a:3b:96:5b:6f:dc:af:01:6b:37:0a:0f:28:73:02:
b4:03:92:2d:86:16:d3:97:21:2a:8f:23:d6:00:6f:6b:29:4f:
e7:d8:1b:58:fc:0b:c5:89:98:39:80:9f:1e:b6:77:f9:92:e6:
69:86:68:c3:bb:9a:16:d0:3d:85:1d:e8:a7:68:2e:fb:34:53:
da:1d:05:a0:7b:c0:c7:e2:86:29:40:73:70:dc:49:5a:0c:57:
29:e7:bc:55:88:4e:91:8e:7d:84:7f:53:68:e0:43:8c:9a:1b:
26:3f:f4:3f:8c:1e:0c:6c:4f:72:d7:a3:a3:a6:25:15:1b:25:
63:c6:c7:1f:99:82:97:3e:de:5a:27:cb:db:5b:ee:cd:34:10:
19:1f:a0:d5:4c:d1:30:4c:a6:ae:d1:8b:ac:f9:88:ab:9a:84:
39:29:d5:0b:34:e4:aa:f2:9a:ad:f8:c6:5c:09:87:fe:0d:d7:
76:41:55:e7:45:43:84:c6:a9:ba:c2:91:d7:f4:bb:54:b0:73:
28:d2:ba:a1:8d:3d:d1:3a:64:2c:0f:33:a5:eb:ca:37:32:fb:
5f:44:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:22:16 2025 by rpki-client