Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/AW8f1Sghrh8luWoSov2j0EZGy_0.roa
File: AW8f1Sghrh8luWoSov2j0EZGy_0.roa (raw, json)
Hash identifier: U2vLNq7NQxJcwwJPbea0BifLKX9AZzxjKL7mEvlEow4=
Subject key identifier: 01:6F:1F:D5:28:21:AE:1F:25:B9:6A:12:A2:FD:A3:D0:46:46:CB:FD
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 01942143E5946C713660D4A606D2774E9C67
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/AW8f1Sghrh8luWoSov2j0EZGy_0.roa
Signing time: Wed 01 Jan 2025 09:48:05 +0000
ROA not before: Wed 01 Jan 2025 09:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50532
IP address blocks: 85.234.102.0/23 maxlen: 24
85.234.114.0/23 maxlen: 24
2a0a:6f40:2::/47 maxlen: 48
2a0a:6f40:4::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e5:94:6c:71:36:60:d4:a6:06:d2:77:4e:9c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=016f1fd52821ae1f25b96a12a2fda3d04646cbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:cc:1c:d5:45:13:ca:02:ce:bf:02:99:46:
ba:04:32:b0:5e:c3:8d:ca:69:f4:e7:ec:31:64:c1:
34:51:f1:a1:c3:b9:f4:cf:9a:cd:37:11:d8:61:80:
89:49:d5:b3:34:05:01:9d:ae:d0:66:6c:88:5c:2d:
3d:a0:19:bd:27:09:f4:43:8a:6f:c6:80:57:78:f1:
dd:0b:b0:3e:e5:b5:40:76:27:b1:9e:ce:60:c1:3f:
27:2d:36:96:5d:f0:24:18:21:57:46:54:51:b3:94:
b2:2f:c9:b0:5a:82:30:a5:af:54:bd:42:5b:d2:cc:
c2:28:44:1f:fb:7e:ed:73:51:4b:79:e7:f8:95:1b:
70:15:26:54:f3:fd:7c:52:6e:6c:e1:50:02:ca:96:
2b:7a:b9:ca:ea:ad:69:68:b9:97:d9:9c:1d:c1:df:
9e:a6:89:ee:3e:bc:02:3a:20:6e:59:8f:99:76:88:
4d:31:5b:45:c9:af:06:70:cd:6f:5e:ee:1e:c0:97:
c9:cb:76:7c:bb:f6:a6:32:c5:b5:41:67:97:16:b2:
11:b5:54:7a:ad:54:43:b7:59:5e:4c:ed:ec:f6:35:
93:c5:ad:e1:4e:01:50:b6:aa:af:6c:eb:77:2c:53:
a6:f0:df:3d:e8:17:21:21:b7:3f:16:f8:2d:72:9a:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6F:1F:D5:28:21:AE:1F:25:B9:6A:12:A2:FD:A3:D0:46:46:CB:FD
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/AW8f1Sghrh8luWoSov2j0EZGy_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.102.0/23
85.234.114.0/23
IPv6:
2a0a:6f40:2::-2a0a:6f40:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:04:29:16:8f:b6:a6:d6:05:7b:8d:27:70:b6:71:0c:d2:33:
2f:d8:24:2b:f3:ed:3f:f3:77:4b:ba:4d:bc:0f:af:d9:11:b2:
8b:90:9c:f2:24:c1:5a:25:4e:a6:86:25:5c:7d:c3:c6:f7:58:
d0:0a:c3:c8:1a:22:bc:cd:f1:b7:39:0f:fa:3e:14:fa:6e:aa:
b4:f4:c4:4d:25:21:d3:64:5b:12:c4:91:32:11:05:81:63:59:
d2:bd:4b:8f:1e:b1:13:d8:1a:b9:36:c3:34:eb:59:f1:7c:af:
45:1a:78:45:97:e8:d7:8c:97:fc:1d:dd:f2:2f:c9:11:a4:23:
79:70:6c:70:b1:1f:b5:f8:35:1c:8b:79:b9:27:c8:85:c9:94:
b9:62:e2:e5:c3:1b:93:a8:69:66:b1:48:ec:52:74:2b:5a:4e:
9d:64:a1:97:4f:e9:28:fd:19:e5:98:94:c6:ea:83:71:54:60:
6c:7c:38:d8:12:e8:e4:44:87:40:1d:bc:31:b7:5f:26:04:89:
40:9b:3d:5e:5a:94:0f:01:3e:9b:1e:95:e6:29:1f:e9:bf:a2:
b6:85:08:0a:18:09:7f:80:e3:d3:a2:04:fd:01:19:32:f4:87:
8e:57:35:b0:ce:f8:9f:e0:1c:6f:c0:20:3d:2c:bc:54:96:28:
92:c8:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:38 2025 by rpki-client