Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UD8rXGwigLZAtmYOzO62sd9h2kg.roa
File: UD8rXGwigLZAtmYOzO62sd9h2kg.roa (raw, json)
Hash identifier: KZxJGjGlfcIYBm9zHXU3q1ZNISVHSOgjfFRtjNt9Rqc=
Subject key identifier: 50:3F:2B:5C:6C:22:80:B6:40:B6:66:0E:CC:EE:B6:B1:DF:61:DA:48
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA93BB23A5D9FAD751D24AE2C6F18E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UD8rXGwigLZAtmYOzO62sd9h2kg.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48219
IP address blocks: 37.230.143.0/24 maxlen: 24
141.101.246.0/24 maxlen: 24
185.2.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:93:bb:23:a5:d9:fa:d7:51:d2:4a:e2:c6:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=503f2b5c6c2280b640b6660ecceeb6b1df61da48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:78:16:7f:1a:3c:33:11:8e:41:eb:10:00:
4d:de:26:61:4c:54:f1:dc:dd:2b:09:6d:51:74:3b:
0b:e3:67:f6:3b:a9:59:2f:8c:a1:3a:80:c5:2c:cb:
14:15:07:5d:be:d3:f7:59:d5:1c:cb:d7:62:f9:48:
b1:21:3a:88:08:b2:ba:d9:7c:33:e8:45:28:93:60:
20:25:90:92:f8:ec:3c:fe:4c:9f:a1:cd:be:c8:82:
2b:40:99:40:df:52:39:04:70:b6:32:b0:7e:78:a7:
c4:73:d8:3b:e9:61:14:e8:a1:c7:e5:fa:e4:f5:31:
7b:72:f7:b1:79:99:a2:ec:86:ce:6f:05:fd:8e:05:
26:1f:59:f8:2e:17:a7:42:e7:9a:c9:d5:1a:43:2d:
5e:14:b4:1b:ba:9c:83:12:81:44:84:9b:83:ad:01:
0c:ae:6e:7a:4a:4d:c4:ac:12:7d:c2:8c:ac:da:92:
fb:4d:a3:9f:e1:98:55:29:47:be:0c:3b:16:25:6f:
05:6c:79:c9:89:f8:26:0c:78:ba:00:3d:9d:34:2e:
41:a1:5c:0c:59:4d:a7:95:4f:43:57:91:3a:32:61:
e3:a1:19:ce:39:44:9f:94:0d:38:6b:ef:a9:ff:d0:
36:45:be:80:03:98:7a:24:83:12:14:62:27:58:db:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:2B:5C:6C:22:80:B6:40:B6:66:0E:CC:EE:B6:B1:DF:61:DA:48
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UD8rXGwigLZAtmYOzO62sd9h2kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.143.0/24
141.101.246.0/24
185.2.35.0/24
Signature Algorithm: sha256WithRSAEncryption
23:fe:07:bd:7e:9b:e6:81:a9:97:d5:b2:5d:2e:b1:09:d8:79:
79:a2:1d:de:8f:f9:13:aa:ea:57:81:01:4b:9a:4d:5c:76:eb:
6a:81:0f:29:f4:ca:70:8b:6a:37:d1:84:47:81:ee:0a:23:29:
7b:57:dc:c3:1e:b1:fa:1b:be:28:2e:7b:76:21:c4:1f:ff:e7:
f5:d6:e6:3a:5d:5b:21:f6:12:23:d2:73:f2:42:4b:b3:36:66:
ec:26:79:26:24:d4:18:32:83:10:11:50:86:40:b1:03:24:0c:
63:80:fa:e4:2b:3c:f2:fd:86:dc:5e:88:75:2f:cc:eb:77:28:
11:47:d6:53:2c:53:b1:5c:10:26:2a:10:fc:12:92:63:6f:f9:
72:b3:5c:69:f7:4e:c4:64:1c:bc:50:67:f8:50:1b:c7:ca:64:
8b:8d:55:10:47:77:6c:13:cc:a1:75:6b:25:04:e2:95:3a:81:
05:ce:5c:53:8f:55:2a:00:ef:3e:c7:16:bb:71:aa:7e:4b:00:
0e:71:23:7e:79:40:98:f2:4e:2c:8a:9c:44:e1:4a:d7:d5:b7:
2c:07:5c:05:02:4c:64:15:b4:51:b7:e7:f9:41:99:91:4f:66:
dd:39:55:7b:d4:2a:2b:2f:a8:6f:f5:93:d4:56:20:97:f7:46:
6f:43:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:02:53 2025 by rpki-client