Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/pV07ftXW1Wln0tDiied_VI4i2rk.roa
File: pV07ftXW1Wln0tDiied_VI4i2rk.roa (raw, json)
Hash identifier: wqeU+FINExvsn79jDOgUE2HAofbRbv1RU1d3T94TItc=
Subject key identifier: A5:5D:3B:7E:D5:D6:D5:69:67:D2:D0:E2:89:E7:7F:54:8E:22:DA:B9
Certificate issuer: /CN=150183623fc16dc74cb775462c36d31016a40ac1
Certificate serial: 019427476E53E63EB7B718F142FC6C866577
Authority key identifier: 15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/pV07ftXW1Wln0tDiied_VI4i2rk.roa
Signing time: Thu 02 Jan 2025 13:49:39 +0000
ROA not before: Thu 02 Jan 2025 13:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49832
IP address blocks: 185.16.24.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:6e:53:e6:3e:b7:b7:18:f1:42:fc:6c:86:65:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150183623fc16dc74cb775462c36d31016a40ac1
Validity
Not Before: Jan 2 13:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a55d3b7ed5d6d56967d2d0e289e77f548e22dab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:00:3c:b6:a5:f8:bc:28:c0:8c:cc:1f:42:
3d:96:ff:62:58:df:49:5a:69:e8:91:07:53:88:e3:
80:6f:d3:1b:fd:8e:9c:63:15:45:1d:15:39:df:dd:
b9:28:69:b4:e3:ea:06:9e:1e:5b:bc:72:cb:ae:7f:
4c:ca:2d:f4:06:1d:fb:d6:f0:27:e4:9b:31:a0:58:
c6:48:21:21:2e:a5:62:f4:93:1d:02:12:ea:3a:eb:
e4:8c:5a:99:17:28:88:99:7e:62:5b:e7:af:af:b1:
7a:dc:79:e1:a6:e7:bb:44:b7:70:db:53:4f:28:e7:
79:2a:ec:2e:06:d2:f7:a8:c5:25:db:4d:98:1f:ec:
e7:c3:f6:f9:3f:f8:f9:d5:40:f2:b1:56:69:ef:a2:
75:fe:89:a5:f7:f2:5b:12:ed:2a:53:d4:a1:70:7e:
ba:aa:dd:29:c6:18:b5:4c:0a:ae:98:44:8f:dd:ec:
82:ad:f4:47:d6:a3:06:28:c6:58:99:89:66:de:80:
d1:77:dd:5f:1c:29:e0:5d:be:7b:74:b6:1a:f7:54:
b6:38:b9:f8:18:41:14:c8:1a:16:42:cc:21:8b:0d:
94:9e:e2:4b:1c:05:b3:ab:80:bb:e7:bc:89:4f:cb:
2d:65:1b:3b:19:61:34:b2:e0:98:42:92:b6:6c:9b:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:3B:7E:D5:D6:D5:69:67:D2:D0:E2:89:E7:7F:54:8E:22:DA:B9
X509v3 Authority Key Identifier:
keyid:15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/pV07ftXW1Wln0tDiied_VI4i2rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.24.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2e:a4:59:b7:5b:b6:df:89:71:8c:c2:85:d7:8f:8e:24:fb:
6e:b7:0f:5c:fe:8e:8f:04:2c:2b:2b:ab:bb:a1:89:22:8a:e2:
f6:b5:20:e2:e8:91:a3:a6:8b:34:ac:47:ee:ff:84:de:43:71:
f3:a2:3c:e4:b0:3b:b7:11:ed:cb:9f:00:b8:81:6d:d2:ca:04:
f4:e2:8e:e7:c6:84:d9:0c:96:58:90:de:82:8a:e1:ea:84:61:
94:a9:79:9b:83:f9:75:84:32:89:a0:64:74:5c:58:48:5b:ed:
b8:3a:49:93:3c:84:35:cb:9b:7e:a1:ed:cc:3b:b0:49:48:34:
37:7b:bd:66:de:df:26:36:4e:a8:b2:8a:57:af:81:37:18:a6:
3b:48:60:10:c8:34:44:90:0a:7d:fc:6d:e9:28:ed:57:0a:2e:
1e:9d:0e:9e:07:05:70:d3:2b:80:9f:4d:06:07:d3:cb:31:75:
57:d3:ff:9b:73:bc:05:11:c0:a7:2d:c8:cf:ce:13:2d:83:76:
8e:52:0b:20:43:f7:5b:a0:ee:ef:80:e6:3b:fd:79:cb:2a:65:
4e:b6:6a:9d:76:e4:6c:2a:ab:63:34:cd:4c:4f:e3:99:6e:5e:
6f:ad:b7:b9:57:86:9b:7d:56:dc:24:fb:2c:c0:b7:f5:8f:c7:
df:f8:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:10:19 2025 by rpki-client