Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa
File: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (raw, json)
Hash identifier: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=
Subject key identifier: 2B:59:C4:32:6A:91:F9:BB:FF:1C:93:8C:54:E0:10:4E:56:4B:6C:35
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 01942143E9F4789D0CF3F4D3EF742122461D
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206261
IP address blocks: 185.190.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e9:f4:78:9d:0c:f3:f4:d3:ef:74:21:22:46:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b59c4326a91f9bbff1c938c54e0104e564b6c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:d7:17:dd:51:a1:49:04:60:39:b9:40:8c:
13:25:dd:a6:fc:7b:db:a5:06:84:cd:e9:d2:61:a0:
0f:2f:ff:c6:e0:64:06:3c:b1:a2:3f:a5:e2:d7:ca:
84:6b:f9:36:36:e9:da:2a:4a:8e:17:3d:60:d8:5a:
f6:df:58:98:42:c2:1c:46:d8:bc:df:2a:e1:7b:9a:
0b:92:e4:af:d5:c5:8f:83:cb:c4:75:c1:09:fe:d5:
25:1e:f9:94:60:05:ad:ae:7c:b3:57:eb:d1:2c:87:
61:07:b2:fd:d2:e4:08:61:56:d0:52:94:42:3b:73:
5d:ca:e9:b9:ef:6b:0b:76:4b:f6:ed:82:72:e4:4d:
1c:d0:ae:89:da:b3:50:66:1f:8c:b6:20:5f:0e:bf:
cb:31:74:1a:2c:81:5b:09:0f:78:e9:6b:70:f7:ba:
c8:b7:93:ac:2c:54:5c:61:71:70:02:5a:9b:0b:38:
22:59:c0:f2:2c:49:84:74:c9:71:0a:b7:8c:8b:9c:
65:2e:c8:41:77:15:a0:2a:0b:9c:92:64:94:33:84:
12:b3:f8:6d:02:a3:ba:b0:dd:6c:bb:0b:9b:a8:cc:
24:81:12:94:76:01:00:8a:cd:88:3b:92:2b:89:aa:
c8:26:16:eb:00:00:5a:d7:6a:9c:86:d2:ac:9d:89:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:C4:32:6A:91:F9:BB:FF:1C:93:8C:54:E0:10:4E:56:4B:6C:35
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.244.0/22
Signature Algorithm: sha256WithRSAEncryption
06:9f:b8:60:81:f4:a4:ba:4a:ef:6f:94:c7:50:c9:78:55:2a:
17:9e:ff:8b:60:7d:5b:b9:54:25:eb:56:02:5e:4e:36:1a:6b:
43:d5:cc:aa:a0:fd:31:33:14:d6:aa:70:df:f6:88:b1:9e:dd:
2f:cb:3f:78:62:d5:94:96:62:61:3f:f4:bc:e9:3a:de:cd:61:
88:d2:ed:3a:fc:99:1e:d9:1b:6e:c0:54:69:f3:96:90:f5:43:
31:7b:18:12:49:42:59:29:31:0f:90:cc:39:a0:46:b3:47:c0:
94:9f:11:ed:b6:d1:1f:38:6d:81:65:77:68:4e:7c:1d:f7:a9:
65:42:ec:24:db:cf:9a:3c:c9:6d:3d:74:42:df:3e:20:fc:e5:
c2:bf:6d:33:52:33:16:f9:ce:14:31:59:d5:11:e5:b1:9b:c3:
06:e8:e7:d8:c9:a7:0c:61:8e:75:b0:06:bc:0e:d7:91:4c:0c:
3f:ae:78:33:ca:50:da:e9:1e:31:d7:b4:97:86:b7:bd:73:85:
61:0d:e4:09:15:73:8f:df:13:f7:1f:36:d8:52:a9:5a:5b:5a:
20:7c:af:c4:73:af:f0:68:12:06:4f:d8:17:c3:75:58:63:9a:
05:aa:d2:81:07:3b:88:6c:e2:62:66:80:a2:cc:e9:97:5f:49:
b2:86:a1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:14 2025 by rpki-client