Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa
File: O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa (raw, json)
Hash identifier: UAJCEcCp2/+1CwINfz4/qAR0IkJC6tKzPu5ouB4y1xo=
Subject key identifier: 3B:74:B6:90:AB:C5:67:76:4A:7C:4A:92:C4:A1:14:D2:15:1C:30:43
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 0194266B440D10EC399014BFA036CB925267
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa
Signing time: Thu 02 Jan 2025 09:49:11 +0000
ROA not before: Thu 02 Jan 2025 09:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 185.122.180.0/22 maxlen: 24
185.122.183.0/24 maxlen: 24
2a03:9160:40::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:44:0d:10:ec:39:90:14:bf:a0:36:cb:92:52:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Jan 2 09:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b74b690abc567764a7c4a92c4a114d2151c3043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:94:e5:af:4e:29:29:ec:01:76:5f:7c:f7:
9b:f0:36:f9:3d:19:da:62:2a:e5:33:39:44:75:2c:
d0:fe:eb:c2:d9:b1:49:36:a8:4a:71:28:05:55:c2:
b7:6f:3b:f5:a4:2e:75:9a:42:9b:18:49:e5:a3:e7:
7d:cd:a5:4a:12:26:a7:87:dd:7b:c2:5a:21:7b:1a:
fd:97:c2:51:6c:8d:c5:bc:74:65:ca:de:ff:8d:bf:
ad:e9:47:7b:cd:28:cd:6e:64:6e:94:57:a7:c1:99:
58:c9:aa:87:62:d9:fb:85:1e:2e:5d:dc:40:fb:80:
ba:dc:51:cd:ee:84:5b:74:a8:01:b4:62:ef:6d:5f:
0f:fd:b3:7d:91:46:58:77:ae:4f:93:85:93:fc:ab:
09:bf:8f:67:9c:19:fe:c2:24:bf:54:38:ca:79:de:
18:68:f6:ac:3d:ec:09:1f:86:55:1b:5c:e4:23:a3:
41:03:4a:c3:ee:00:8e:3a:89:79:71:71:02:27:9d:
ac:56:ba:77:91:71:ec:0a:c4:5e:42:ca:dd:b4:74:
04:e5:4d:5f:79:5e:d5:5d:7b:6b:33:ca:50:ed:bc:
c9:49:73:f5:11:62:b8:df:82:d5:43:41:dd:a4:76:
57:fa:e2:0a:b0:be:ef:ba:7a:d6:b8:35:00:bc:89:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:74:B6:90:AB:C5:67:76:4A:7C:4A:92:C4:A1:14:D2:15:1C:30:43
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.180.0/22
IPv6:
2a03:9160:40::/42
Signature Algorithm: sha256WithRSAEncryption
5b:82:91:44:de:c4:13:64:9b:99:96:7e:da:46:21:0a:42:40:
79:2c:4c:3e:c1:0a:f7:41:e2:7f:1f:18:61:1a:af:b0:04:76:
9f:96:e6:ce:71:2e:ac:a9:d6:e4:01:29:d8:27:f5:12:f2:a4:
09:c5:c5:05:b4:d9:b1:e6:31:e7:3c:81:b9:18:36:f5:55:5c:
a6:85:e4:7c:77:ae:0c:62:c3:85:94:61:94:73:d0:2c:c5:7a:
1b:cc:f3:f0:cf:f2:92:a2:f6:ff:25:b5:08:a5:21:8d:47:d8:
50:d0:8e:e6:df:9a:ba:43:2f:c1:95:7d:dd:d4:af:79:ab:35:
42:63:7a:22:6f:c0:4a:86:c9:a0:9e:1b:55:76:46:3b:b9:52:
60:b5:ca:1e:36:ca:69:9b:15:14:3f:e0:91:70:66:4a:f7:7c:
a6:e3:b4:5a:8a:64:6b:c3:0d:99:ca:47:2f:60:90:03:1f:3c:
c2:b9:23:ec:cb:8e:f7:e8:eb:9e:78:9d:b4:2b:01:ed:ce:7f:
33:37:a6:bf:38:5e:b5:b6:85:23:bf:d9:8e:e0:21:2b:59:26:
ab:bf:be:09:ec:42:9b:35:15:4e:91:ce:fa:dc:93:79:32:9a:
5b:67:82:20:38:3c:e4:f9:b7:47:b2:63:f3:d9:d8:98:85:ba:
54:92:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:29:46 2025 by rpki-client