Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/ckdLePhoueFIYZx4kGDlV51XN1k.roa
File: ckdLePhoueFIYZx4kGDlV51XN1k.roa (raw, json)
Hash identifier: aOA0NbOYFDXcRN0IYoUzlHYQw/Z3WdJX57vq3cILcdo=
Subject key identifier: 72:47:4B:78:F8:68:B9:E1:48:61:9C:78:90:60:E5:57:9D:57:37:59
Certificate issuer: /CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Certificate serial: 01941FFA10A78A44004D26574CEBA758A193
Authority key identifier: 52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/ckdLePhoueFIYZx4kGDlV51XN1k.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212598
IP address blocks: 185.102.87.0/24 maxlen: 24
2a12:8540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:10:a7:8a:44:00:4d:26:57:4c:eb:a7:58:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72474b78f868b9e148619c789060e5579d573759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d1:f1:7b:2e:68:90:24:36:56:5b:25:28:25:
2c:5d:2a:8e:20:cc:48:0a:ec:d6:c5:23:cf:f9:a9:
4d:ca:9a:41:30:ba:c8:2e:02:29:b2:65:ff:57:5d:
bc:ab:d9:49:80:2a:35:72:97:9e:fc:eb:9e:54:86:
92:47:ea:c2:93:0b:cb:4b:fe:70:be:25:a5:54:76:
c8:0d:e7:71:91:6f:8d:22:8c:b6:7f:ae:39:61:26:
fb:d5:44:fb:79:fd:99:94:d2:b7:9d:5a:71:76:13:
50:47:58:6b:1f:94:f0:f1:3b:19:ca:90:da:b5:01:
bc:da:ab:2f:6a:8c:a9:85:78:eb:39:86:1b:ef:99:
55:6a:1a:f0:66:a1:fc:d1:bf:00:62:42:64:6f:07:
13:e5:ff:97:10:3f:04:13:4a:e3:73:2f:a0:3d:87:
f9:ff:05:45:0b:42:21:8d:2a:6f:2a:40:06:ed:4d:
b4:46:99:40:14:cc:e0:d4:5a:b0:1e:70:23:c2:a8:
a7:c7:3b:79:28:eb:56:fc:f8:2c:d8:28:5f:88:b3:
4d:be:62:35:e3:3f:ab:90:2a:f2:17:17:94:8e:69:
3a:a2:6e:b6:03:38:03:8b:c9:c5:6b:b0:83:4a:f1:
fe:8d:4b:e2:5e:99:e0:a3:b0:d5:95:51:dc:e8:28:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:4B:78:F8:68:B9:E1:48:61:9C:78:90:60:E5:57:9D:57:37:59
X509v3 Authority Key Identifier:
keyid:52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/ckdLePhoueFIYZx4kGDlV51XN1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.87.0/24
IPv6:
2a12:8540::/29
Signature Algorithm: sha256WithRSAEncryption
31:07:e6:af:f4:3c:1a:07:83:3a:9b:07:cf:18:34:b1:e0:04:
13:88:e1:fc:2f:00:95:6f:fe:10:eb:9a:63:f9:23:90:59:de:
23:ef:81:bf:21:9e:48:ee:0f:94:2c:2b:95:3d:b4:4b:41:52:
07:01:9f:18:25:b6:1b:c5:5f:85:d7:b7:05:27:f3:50:49:4e:
b4:24:c7:2c:39:97:92:eb:bc:92:14:37:9d:fb:21:e0:37:34:
e8:53:38:50:21:9e:2a:ce:89:83:f4:bf:1b:c0:41:f0:91:a8:
bb:09:14:0f:de:97:43:13:3e:27:75:db:9b:66:e7:34:82:82:
94:5a:da:16:08:cc:96:98:98:f5:80:d2:20:64:42:98:6c:f5:
26:94:61:6f:46:3c:bd:85:63:b5:8d:94:9a:73:54:dd:c4:b6:
05:76:a9:9c:9b:4a:97:1d:88:bf:17:2a:4f:c0:d7:0e:c3:44:
7f:b5:3e:64:3f:96:dc:cf:0c:a5:7e:63:4a:e3:1b:7e:40:b9:
55:b3:89:a0:f7:5a:78:05:aa:e0:b5:20:df:f3:05:ea:d6:5d:
50:b7:4a:c7:9a:c1:45:67:8e:33:6d:55:80:4f:5e:67:fa:e7:
21:ff:bb:6f:26:0d:3a:8d:7c:5c:aa:d4:40:a5:78:c1:21:1b:
a5:0c:1e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:18 2025 by rpki-client