Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/c1UFEngK3GGY1urY5KGBx69byP4.roa
File: c1UFEngK3GGY1urY5KGBx69byP4.roa (raw, json)
Hash identifier: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=
Subject key identifier: 73:55:05:12:78:0A:DC:61:98:D6:EA:D8:E4:A1:81:C7:AF:5B:C8:FE
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019428271FC9A1328587E2C300F26F60B12E
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/c1UFEngK3GGY1urY5KGBx69byP4.roa
Signing time: Thu 02 Jan 2025 17:54:00 +0000
ROA not before: Thu 02 Jan 2025 17:54:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202780
IP address blocks: 185.101.124.0/24 maxlen: 24
185.101.125.0/24 maxlen: 24
185.101.126.0/24 maxlen: 24
185.101.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:1f:c9:a1:32:85:87:e2:c3:00:f2:6f:60:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jan 2 17:54:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73550512780adc6198d6ead8e4a181c7af5bc8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e7:b2:b0:d0:28:c0:33:03:89:f7:5a:da:ad:
b2:a5:d9:2b:3e:13:7f:0e:96:85:61:b0:4e:9a:25:
dd:31:b4:c7:72:bd:86:a0:fc:fa:a7:8e:35:75:ca:
9a:ba:91:a2:2f:ba:d9:8f:74:fe:6e:42:72:57:4e:
f3:f2:90:64:c0:12:64:93:59:11:70:2b:30:45:4c:
51:ef:25:bf:36:bb:c4:e8:8e:d4:ac:52:42:c8:c7:
44:92:01:aa:dd:3c:4b:6d:a1:68:88:7c:57:d6:ff:
84:b8:98:06:43:73:ac:6b:81:59:9e:89:a6:70:d1:
90:1c:cf:fa:20:51:85:95:0a:c1:94:be:3d:a4:53:
ae:de:09:4c:8b:02:46:af:9f:50:22:3f:c0:1e:a1:
ab:b6:55:de:6a:c1:c1:d1:8a:a8:6a:c2:1b:bd:a0:
50:89:b4:bd:09:90:c5:e1:dc:6b:ff:cf:04:f4:69:
02:b6:e2:99:bc:94:8d:f7:8f:c1:59:09:4d:a7:b6:
ba:e0:db:9d:9a:09:00:4f:9a:2e:2a:b3:98:d6:a7:
cd:8d:11:eb:04:f3:b3:7a:9a:8c:05:b4:aa:39:63:
36:89:25:ea:75:c9:19:89:36:44:df:b0:02:ca:9d:
f7:dd:0f:fd:93:27:a9:eb:52:57:b2:5d:f5:bf:23:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:05:12:78:0A:DC:61:98:D6:EA:D8:E4:A1:81:C7:AF:5B:C8:FE
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/c1UFEngK3GGY1urY5KGBx69byP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.124.0/22
Signature Algorithm: sha256WithRSAEncryption
81:ee:92:a1:27:33:30:b2:ba:d4:fe:f6:c7:7a:0e:77:82:52:
dc:f7:18:db:31:f8:0d:16:f5:44:09:32:63:f6:39:f2:31:7a:
ee:99:a5:de:1d:d1:e7:84:32:1a:81:76:bc:48:fa:c6:d3:7d:
df:8e:d3:c7:bc:a2:41:e8:0d:d4:f9:c7:25:0a:2b:34:ac:bd:
f3:90:22:0b:44:03:b1:46:a5:a0:6d:96:67:f2:bd:4c:3a:7a:
5d:be:7b:2f:14:69:3a:5d:b1:6b:76:f2:1d:cd:c8:1e:1e:a4:
d9:c0:19:68:c3:d2:5e:17:b3:1b:29:99:e5:12:17:4f:b7:8f:
ed:b0:7e:5a:27:95:d8:cf:31:a4:8c:57:2f:5c:0f:ab:24:b1:
63:79:a7:84:b3:38:e5:51:14:df:42:59:82:01:1a:f9:2a:a1:
f4:21:71:54:13:ef:f4:23:81:f3:d9:0a:fa:ce:84:48:e4:61:
60:b3:83:10:80:c6:a4:47:a3:19:b9:44:70:1a:4a:bd:e3:0d:
1a:62:3c:70:56:9d:13:93:c9:09:ba:9b:34:6f:99:7a:13:79:
1c:03:45:77:38:16:ce:5f:ae:d6:35:d7:d2:9b:75:cd:91:5b:
63:9b:05:da:b0:38:e2:e4:1f:db:c8:6b:6b:21:2c:4c:a8:d4:
33:e0:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:17:29 2025 by rpki-client