Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ADw5ULNp5csIlPVZQfXB8yIQYtU.roa
File: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (raw, json)
Hash identifier: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=
Subject key identifier: 00:3C:39:50:B3:69:E5:CB:08:94:F5:59:41:F5:C1:F3:22:10:62:D5
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F6FB5F3B6DE46FA0E237B59D27414
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ADw5ULNp5csIlPVZQfXB8yIQYtU.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208949
IP address blocks: 185.114.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6f:b5:f3:b6:de:46:fa:0e:23:7b:59:d2:74:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=003c3950b369e5cb0894f55941f5c1f3221062d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:43:11:fe:62:36:09:be:3f:0b:65:88:5e:
af:57:36:5c:5a:b4:14:0a:ac:3e:7a:e2:59:3b:0d:
5e:7c:cd:98:d4:3c:5d:a4:d1:71:01:1a:d0:0a:11:
c4:bf:7c:1b:a7:c0:cd:06:b5:5c:0b:5e:61:9e:ac:
86:78:48:8b:99:2b:66:ef:9a:81:87:ac:10:ba:38:
72:59:ea:d7:48:08:ee:0a:01:20:cc:55:92:07:3e:
03:05:52:47:fc:22:d6:8a:f3:29:88:a0:c2:aa:5b:
96:7e:81:4e:9b:a1:af:53:76:88:8d:04:99:45:64:
3c:c5:b4:1b:b7:b8:a7:76:ff:b2:0b:99:23:aa:28:
b6:62:e1:2e:97:09:e3:f8:2d:b4:b4:74:50:b2:d0:
fb:ec:a8:fe:9b:a5:d6:ab:f0:de:42:8f:51:a7:5a:
fc:11:16:60:b8:79:1b:8c:01:e4:81:aa:cb:5d:74:
1e:d4:1a:b2:0e:7b:dd:75:02:ab:9e:e4:1d:3c:05:
b2:45:7d:65:c2:90:e6:b7:0c:58:fc:9e:76:68:f7:
eb:62:47:7f:81:8b:ae:00:62:8a:6e:b6:8f:4f:87:
4f:24:ac:07:c1:7d:f5:bf:b0:42:65:c2:4f:a9:1c:
ba:b1:76:31:4c:9a:d8:5f:ff:ee:6a:34:c5:65:ba:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3C:39:50:B3:69:E5:CB:08:94:F5:59:41:F5:C1:F3:22:10:62:D5
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/ADw5ULNp5csIlPVZQfXB8yIQYtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.146.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:e3:43:bb:a3:3e:b2:a8:d3:4b:50:c8:41:13:ce:a5:83:63:
c6:d3:16:38:f9:cb:29:99:60:85:33:60:31:59:89:51:fb:bd:
84:76:bd:94:d0:50:24:5d:f7:00:58:fb:4f:d2:97:24:4b:28:
63:8c:5a:fc:ea:5d:e2:1f:a0:70:c6:1d:ac:07:e2:7f:05:e4:
c1:6a:25:e9:a0:99:6c:96:65:09:3c:81:98:19:17:23:ff:9d:
84:7b:ee:2c:7e:aa:50:c5:10:32:07:72:dc:12:3e:5d:1d:9b:
d2:d2:bb:33:c4:0c:6f:bb:80:9a:ff:e2:43:ba:9f:e4:48:18:
9f:8c:7f:a2:32:43:e5:f5:0d:1e:46:9f:ba:84:a0:79:92:4a:
45:2c:6c:3f:77:5d:68:20:83:93:85:18:ed:ee:be:60:5a:43:
2c:12:c6:a7:88:31:5a:bc:f2:12:cc:ea:2a:13:2d:7b:be:d6:
22:ae:dc:5c:24:83:92:88:20:55:69:1c:50:1a:cf:60:56:53:
36:e0:06:b8:b9:31:04:ac:34:e0:28:48:ac:d4:5c:ff:56:0b:
30:2f:08:b3:15:e2:37:0c:39:0c:11:87:3c:18:61:fb:81:54:
e7:a2:b6:86:bf:72:0f:59:55:48:6e:fe:a6:5c:4a:cc:d8:99:
b8:96:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:55:07 2025 by rpki-client