Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa
File: sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa (raw, json)
Hash identifier: Xn9RqjO0Bl5wwfZuCHIFFFBi1M7CLKKfAFqVPviV4cI=
Subject key identifier: B2:4D:35:CB:1F:07:83:F8:6B:DA:F2:38:00:40:7B:60:8D:21:24:67
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01942445400D374ABCC9FCC5C3206432CEBD
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.161.149.0/24 maxlen: 24
185.238.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:40:0d:37:4a:bc:c9:fc:c5:c3:20:64:32:ce:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b24d35cb1f0783f86bdaf23800407b608d212467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:06:4c:09:62:73:7a:c7:c3:8d:45:b9:46:
16:92:45:36:70:da:c6:e7:1e:49:55:97:58:69:c7:
d5:cc:61:94:cc:db:39:c7:ea:9d:33:40:75:01:9a:
59:af:5d:66:c1:16:17:65:3c:bb:c5:0c:f6:63:08:
4e:11:f4:5d:ce:ae:04:79:45:04:e2:ce:f9:dc:0b:
7e:16:57:e3:68:d2:d1:40:2e:f2:b5:24:36:d3:74:
02:55:24:08:8a:c2:49:27:27:7c:bf:12:6a:05:86:
62:ed:6d:f2:e0:53:2f:5e:b0:21:e8:b2:d1:2b:20:
36:2c:50:09:d6:5c:42:a4:68:e1:2f:ea:39:4a:c1:
5f:61:59:8b:c1:78:e0:7f:c6:f5:f0:29:30:91:51:
2c:4d:a2:11:93:21:bc:8c:ad:96:46:2e:86:76:7e:
a5:35:97:1f:6b:98:bc:71:ef:4f:d6:a0:8e:2f:92:
cf:82:84:b1:c3:88:a1:bb:bd:aa:4e:da:3b:f9:02:
bc:5b:ce:54:9d:dc:15:f6:9d:71:ee:07:45:ae:3e:
a1:18:bd:0a:28:b2:7d:bc:a9:2a:b9:de:7a:e3:65:
e6:7b:f4:8b:8c:9e:df:2d:09:0d:16:c6:97:3d:8f:
40:66:28:18:74:58:30:a0:65:c3:18:e7:58:45:a8:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4D:35:CB:1F:07:83:F8:6B:DA:F2:38:00:40:7B:60:8D:21:24:67
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/sk01yx8Hg_hr2vI4AEB7YI0hJGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.149.0/24
185.238.178.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2e:90:54:76:d2:bb:4a:43:7a:9d:dc:b8:97:81:a8:74:71:
91:3e:67:99:cf:3b:5a:16:d3:ba:b4:1c:8f:2b:d8:ba:93:27:
96:ab:7d:98:1b:19:e0:f7:77:4a:ce:c7:e2:c9:95:d9:d5:7f:
87:ef:53:1a:ec:45:8e:8f:cf:30:94:d7:15:bb:cf:88:ed:b9:
24:69:c6:80:ff:1f:d1:58:22:87:cb:ac:be:5a:dc:81:e3:56:
43:0e:62:ac:6e:4d:76:c9:87:d6:ca:81:e2:2d:87:17:8f:cc:
c2:e1:12:e2:4b:fb:e3:63:67:7e:de:15:64:d1:4c:80:bf:b3:
b6:d6:4a:88:1f:de:87:4a:35:21:fe:d3:e5:43:6a:42:d9:f1:
0d:54:6b:37:5f:a5:2f:29:dd:e8:b3:e4:a6:74:7f:05:8c:0b:
fa:99:a2:8a:3a:66:74:2a:cb:82:ef:da:09:69:ff:ec:37:4a:
03:62:48:13:c7:ff:a2:b0:af:8e:f6:b4:d3:f2:ce:d1:b2:e7:
dc:e0:b5:dd:0f:d4:a3:1f:a8:35:50:30:d4:48:86:0b:73:a8:
61:84:d1:38:f2:bf:c9:37:e0:84:4c:cb:b2:4b:3c:db:28:65:
cd:ef:1a:2d:84:d2:98:82:4a:00:10:f7:b2:a4:5b:71:c4:84:
53:2c:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:14 2025 by rpki-client