Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa
File: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (raw, json)
Hash identifier: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=
Subject key identifier: 2A:B8:E6:57:A7:40:F6:3B:B9:BD:17:FF:16:90:C9:79:57:DF:D5:98
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 0194236925806CC5C0AA515CFAEA1329301B
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa
Signing time: Wed 01 Jan 2025 19:48:00 +0000
ROA not before: Wed 01 Jan 2025 19:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215249
IP address blocks: 185.108.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:25:80:6c:c5:c0:aa:51:5c:fa:ea:13:29:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Jan 1 19:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ab8e657a740f63bb9bd17ff1690c97957dfd598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:ce:66:52:f9:95:1d:be:63:bc:5c:45:fc:
5c:e9:5b:31:cd:49:1c:7e:6f:24:d8:55:9a:a5:4a:
f6:20:48:d9:45:d1:38:d9:ce:fb:49:00:3c:1a:5f:
da:e8:8b:fb:ba:e6:26:07:06:5d:38:d2:53:4c:9f:
77:9f:c1:74:6b:a7:a5:7f:45:af:92:0d:06:2c:92:
2e:bf:95:53:e7:74:f1:c0:bd:8e:53:02:97:ff:90:
b5:8a:cd:60:94:a7:d4:f9:3e:a0:25:ab:4b:86:1c:
d1:ed:25:74:42:75:3a:49:67:c8:cf:01:77:c4:2d:
ba:e8:c9:64:3e:a4:dc:f9:ac:15:3c:46:6f:3d:c7:
ad:0e:3c:b2:ce:31:67:15:c9:16:6f:ba:21:2b:a2:
ae:59:17:e5:c1:94:8d:02:b3:a9:e3:0d:75:99:39:
a2:8e:e2:d2:b0:3a:cd:01:af:a1:81:b3:4d:3d:8a:
28:b8:cb:03:0a:bc:52:47:2b:49:f2:85:fe:94:dd:
6e:69:fa:2e:93:75:28:57:61:84:90:c6:c8:53:e1:
a9:99:b5:ad:b8:d5:df:0c:b5:3a:48:f3:7a:78:0e:
80:b7:8f:3d:bc:e1:3a:ca:5f:72:ff:09:c6:b4:b9:
fb:95:54:91:61:de:70:c6:9d:12:0a:a2:65:44:4d:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B8:E6:57:A7:40:F6:3B:B9:BD:17:FF:16:90:C9:79:57:DF:D5:98
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:28:48:37:37:83:d9:36:76:be:4b:80:d5:fc:e9:23:96:a1:
c8:b3:22:64:e5:95:e0:86:76:6f:2d:c8:fe:d8:c2:92:f8:52:
2e:d1:5e:1a:29:fd:6e:35:73:89:ef:0e:2c:88:3d:f8:0e:26:
5e:db:ec:ad:49:61:74:ad:bc:66:49:0a:ee:b2:f9:fd:eb:f7:
d7:ca:94:bd:8f:2c:21:46:3f:d5:96:61:99:97:a1:3b:d5:b4:
77:dd:7c:47:7e:47:a8:c1:94:65:15:62:f4:b5:2f:79:96:9e:
eb:31:e8:16:e5:d1:27:e1:5f:a7:d7:90:bb:05:92:11:72:b3:
9c:3a:1b:e1:34:ec:2b:50:e5:e0:95:a0:e2:c3:f7:b8:30:93:
5e:32:0b:32:b6:83:3b:7d:e0:4e:20:2b:e4:70:64:d9:ba:92:
02:ff:6f:d6:81:3a:47:67:ad:1f:e4:5b:8c:eb:b2:95:03:bf:
63:ad:c4:31:19:ca:37:02:9a:f3:03:a6:30:d8:44:75:a2:83:
04:ed:66:10:e9:38:a0:50:73:74:8c:67:e5:a1:d9:bc:5b:d5:
59:61:19:fe:d6:53:da:e1:0f:ad:bb:54:e8:88:57:a1:51:7b:
e5:56:3a:8b:9a:d9:d6:b9:01:ea:97:f6:19:62:bd:6b:4a:7e:
62:03:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:44 2025 by rpki-client