Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/N0s8xKfa_bF09tlRJvpRIiwnl5w.roa
File: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (raw, json)
Hash identifier: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=
Subject key identifier: 37:4B:3C:C4:A7:DA:FD:B1:74:F6:D9:51:26:FA:51:22:2C:27:97:9C
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 019426D9E75DF57FE2387CED925106D9C9C8
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/N0s8xKfa_bF09tlRJvpRIiwnl5w.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203637
IP address blocks: 185.127.188.0/24 maxlen: 24
185.127.189.0/24 maxlen: 24
185.127.190.0/24 maxlen: 24
185.127.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e7:5d:f5:7f:e2:38:7c:ed:92:51:06:d9:c9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374b3cc4a7dafdb174f6d95126fa51222c27979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:69:14:55:60:82:d5:19:8f:68:e3:91:19:
ec:a8:9d:cb:8f:5b:de:24:00:fe:00:61:a1:1b:2e:
bf:39:92:cf:37:cc:aa:20:2a:3a:60:9f:75:d1:7e:
f5:69:86:8d:72:ae:24:dc:f2:1a:b2:05:84:2b:1b:
76:1c:da:87:39:f6:70:4a:c1:8c:cd:ad:79:bf:66:
4d:4f:51:c6:d1:8e:3a:8b:88:0e:da:d4:52:63:d1:
9b:c8:ee:35:81:e8:28:2c:66:48:cf:a1:6a:4d:11:
da:32:03:bc:56:2c:d9:7d:54:2e:bf:e7:3d:6b:74:
e4:3d:a1:c0:a8:96:cb:f1:74:13:32:0e:45:b7:0f:
71:31:fb:69:c9:cc:ea:b0:d3:3b:0e:fb:db:c9:f2:
bf:cd:e4:5b:ca:16:33:2a:e3:e2:a7:03:00:ba:80:
89:e6:00:f5:17:74:07:32:23:e5:10:56:14:37:c4:
18:07:84:e8:13:e5:8d:29:cd:8b:3b:60:cd:07:5c:
28:8c:05:71:5c:76:c6:cb:f4:ed:e5:64:0a:d0:e6:
a2:39:cb:7f:bf:6b:b1:5f:9d:4b:15:f4:37:bb:0e:
0a:28:98:4d:65:50:10:5a:d9:6f:7c:3c:cf:c9:9c:
5a:31:11:a4:23:dd:0c:04:08:01:51:f1:5b:56:db:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:3C:C4:A7:DA:FD:B1:74:F6:D9:51:26:FA:51:22:2C:27:97:9C
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/N0s8xKfa_bF09tlRJvpRIiwnl5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.188.0/22
Signature Algorithm: sha256WithRSAEncryption
53:03:44:2b:2d:d2:97:79:5e:44:9a:ca:5b:4b:25:3d:0d:51:
eb:71:f4:de:73:81:92:e1:45:7f:56:8d:f6:9d:b3:a5:8a:b8:
d4:67:37:05:04:58:7c:f1:55:b4:1c:19:25:b4:49:4b:53:45:
c6:26:fb:af:d5:ff:43:19:01:4a:33:e5:2d:bb:ca:24:55:0c:
32:66:f1:d1:15:ae:ac:68:8f:c7:41:7d:e9:98:8d:a7:a3:28:
8b:44:6d:2f:21:fb:f0:aa:5b:09:f8:90:1f:29:e5:f7:78:f8:
e2:04:87:d0:b9:29:67:00:a2:92:e6:5a:98:0e:9f:89:d1:72:
b7:17:a4:44:a1:06:ff:f8:b2:ae:0b:33:b2:54:be:6f:3b:7a:
97:a8:99:6b:b5:bf:6e:9f:f5:33:21:54:3d:ec:98:fd:36:aa:
a6:14:44:a4:a1:20:3a:84:2d:b8:3d:81:67:7d:9b:31:dd:d3:
9c:85:ca:2a:34:ce:ba:04:89:69:25:ef:86:0d:b4:f4:22:60:
db:15:d6:8d:33:8a:5e:a8:17:b0:ed:ab:9b:e7:29:54:0d:d0:
c3:2e:95:b1:95:5e:4b:06:eb:c9:c7:c6:bc:63:00:31:ff:f1:
9d:b4:65:75:f8:a1:0b:1b:21:a5:01:1a:e8:69:81:f9:10:f1:
13:66:27:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:22 2025 by rpki-client