Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/il1qN-6b575Qrhubx9ECJYw-ExA.roa
File: il1qN-6b575Qrhubx9ECJYw-ExA.roa (raw, json)
Hash identifier: l3cKFcZsIxHBwQmjzQTRktanLJGMwjOlGIjh3dsWi3s=
Subject key identifier: 8A:5D:6A:37:EE:9B:E7:BE:50:AE:1B:9B:C7:D1:02:25:8C:3E:13:10
Certificate issuer: /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial: 0194221F8D53FE5E71F2101C18812B685483
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/il1qN-6b575Qrhubx9ECJYw-ExA.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49192
IP address blocks: 185.86.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8d:53:fe:5e:71:f2:10:1c:18:81:2b:68:54:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a5d6a37ee9be7be50ae1b9bc7d102258c3e1310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bc:42:86:ef:e6:68:3e:3a:06:76:1e:79:3e:
e5:7e:c4:f9:95:f5:0e:59:c8:a8:d9:5b:ad:91:cb:
86:d0:61:a2:4d:f9:ec:fc:4e:04:56:82:ea:36:4b:
c5:d6:96:19:49:fb:7d:61:54:5f:26:8b:54:11:d8:
38:61:5c:f8:23:be:5e:e4:48:6e:f2:83:e4:f0:47:
2b:17:8f:ce:08:4d:a7:13:57:83:78:0f:49:9a:7e:
0d:64:a6:df:cf:72:13:ec:2f:2d:39:fc:10:11:ec:
ec:01:1b:03:a9:04:39:1c:9f:66:67:05:75:f1:87:
f3:db:15:50:b2:d2:fe:30:bd:2c:29:99:b6:c4:ca:
e0:e7:ea:87:ea:1c:6d:46:d4:ae:5f:b2:9c:79:6e:
93:1a:93:4a:82:a4:fb:66:d0:66:a7:df:02:c0:e9:
4e:ca:ef:c2:d8:86:23:de:b7:41:99:51:d2:21:22:
e2:bc:9d:40:87:db:2c:e2:1a:80:cd:e2:f2:ac:87:
c7:86:95:65:b6:b0:f2:e2:d8:5d:0e:5a:0a:b3:50:
a6:65:7c:67:4c:ac:c5:e3:b1:a9:e3:b1:3f:70:e2:
c1:9d:c7:df:8f:f9:61:fb:37:d6:5e:c7:65:40:7b:
e9:95:95:5e:d0:39:c3:2d:cc:a8:62:fb:3d:89:bd:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:6A:37:EE:9B:E7:BE:50:AE:1B:9B:C7:D1:02:25:8C:3E:13:10
X509v3 Authority Key Identifier:
keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/il1qN-6b575Qrhubx9ECJYw-ExA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.224.0/24
Signature Algorithm: sha256WithRSAEncryption
71:86:5b:df:8d:70:d8:60:61:86:35:a4:f1:73:ce:fa:e7:8b:
db:b7:5b:3c:cc:6b:2d:ae:0a:5d:72:f9:f4:d1:2e:32:b6:3f:
50:85:f5:86:5f:e5:42:04:2e:49:4c:39:9b:e6:98:e2:56:e2:
1b:f8:75:3c:f4:a6:68:6c:e7:ce:f8:2e:02:2f:64:fb:56:34:
12:77:5d:c1:69:1e:9d:33:3a:07:95:69:18:6e:ca:cc:7e:71:
12:e4:44:47:78:3e:87:ad:e0:bc:62:a9:3d:57:a9:a8:5d:60:
11:6e:c3:54:c1:f9:52:8a:e9:7e:27:32:0d:73:86:60:b5:fb:
30:0b:41:ed:9d:56:59:29:08:f3:b6:ea:d0:a3:69:33:61:c6:
6a:80:49:34:f3:b3:07:b7:c2:b5:c4:05:f4:8b:88:bb:44:f6:
8f:89:31:76:07:5a:03:2a:b1:85:73:98:39:05:f9:2b:45:bf:
3a:f6:3f:af:a3:a6:b6:4c:2b:88:40:17:bd:cd:83:9d:48:de:
45:1c:b3:ac:5b:ed:25:b6:0e:bf:e9:b4:cf:22:63:33:b8:17:
af:5c:7f:d4:d3:02:c8:91:0f:bc:39:c9:4a:c7:cd:b5:3f:b2:
4f:b2:b4:5a:ef:7c:79:d3:bc:a6:79:27:56:66:6d:3f:2b:24:
5f:6e:3c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:59 2025 by rpki-client