Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1MBkh8E7gzicQ9BrXtZMUYj6Qoc.roa
File: 1MBkh8E7gzicQ9BrXtZMUYj6Qoc.roa (raw, json)
Hash identifier: MsbglB9JYY4tX+d3jyDgbU/Ka+ffnaqJPqhDj46NtEg=
Subject key identifier: D4:C0:64:87:C1:3B:83:38:9C:43:D0:6B:5E:D6:4C:51:88:FA:42:87
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0195CA1811A55E4D1B0216D9980E154F9DF2
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1MBkh8E7gzicQ9BrXtZMUYj6Qoc.roa
Signing time: Mon 24 Mar 2025 21:38:49 +0000
ROA not before: Mon 24 Mar 2025 21:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 185.124.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ca:18:11:a5:5e:4d:1b:02:16:d9:98:0e:15:4f:9d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Mar 24 21:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c06487c13b83389c43d06b5ed64c5188fa4287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:80:f1:dd:ed:87:d3:5c:e5:23:1f:83:f6:
a2:83:e0:49:73:40:95:3d:83:dc:c2:b4:e4:f7:eb:
5b:02:bd:03:e8:3d:d4:b5:cc:dd:15:a9:41:42:4c:
59:28:12:dc:f2:f2:c0:fe:43:f5:c7:06:ca:82:e1:
ae:10:06:d2:ee:4a:3e:ce:a7:09:ed:0c:f5:0b:6f:
16:b9:72:36:d7:4a:a5:9d:3b:77:ab:94:65:b4:7d:
04:b1:b4:f9:90:55:98:67:b3:94:73:1b:06:6e:1d:
c3:bd:6b:3c:69:44:01:66:57:56:06:39:c8:ca:df:
d8:7b:20:1f:93:b3:aa:26:6d:5b:62:31:11:e3:4a:
6e:31:59:b1:15:04:ad:58:44:08:27:a4:51:d4:95:
53:6f:be:e3:8d:44:84:ec:7c:2b:f4:71:bd:a3:60:
b1:5a:ca:7c:89:64:cd:c4:f8:23:9f:69:76:76:84:
8b:bc:15:aa:96:04:66:93:52:22:ed:63:06:6d:d9:
b2:65:b5:38:a9:34:34:3f:90:05:a1:61:1f:a1:de:
0a:01:90:e9:a0:3e:ef:35:97:74:65:a4:c0:18:8e:
e6:d3:b9:24:49:c6:01:14:b0:45:b9:fc:6c:ef:2a:
b0:32:a8:f2:b6:f9:15:02:a2:fb:03:e0:ac:22:ac:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:64:87:C1:3B:83:38:9C:43:D0:6B:5E:D6:4C:51:88:FA:42:87
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1MBkh8E7gzicQ9BrXtZMUYj6Qoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.174.0/24
Signature Algorithm: sha256WithRSAEncryption
96:80:86:b8:5c:c7:99:1c:58:5d:c9:a3:88:8d:db:12:80:60:
5e:22:d1:70:cd:8c:05:53:f2:6c:f1:55:e5:c4:79:d5:7b:fe:
b5:23:fc:83:e3:fb:c2:c8:db:41:06:cf:90:26:26:70:2a:16:
a7:6a:95:3c:31:5e:a1:72:f9:3e:af:76:15:79:05:89:d3:a7:
5d:07:27:6c:5d:5d:d8:be:9f:e5:58:15:eb:51:6e:4a:05:1f:
16:16:c8:ec:90:73:19:20:95:47:3c:13:b9:e4:56:e4:2f:18:
de:a2:d5:0c:2b:7b:5c:4f:b2:c0:21:70:d4:f2:dc:c3:e0:77:
60:d1:f8:30:11:a3:ef:08:59:7e:d9:4c:51:34:1c:8b:60:38:
cb:75:61:e1:03:0e:4f:72:35:6c:c9:17:35:56:02:5a:7a:cb:
44:28:47:d9:6a:52:dc:cc:64:db:0e:c0:aa:70:49:95:5b:c8:
a8:20:df:f0:19:49:aa:0d:a2:88:fe:ed:40:c8:15:5b:d4:ac:
4f:0b:0c:32:38:02:b6:15:f7:59:a3:35:c2:e1:72:34:d5:05:
0a:c1:d4:aa:ca:a5:cb:60:f5:c5:03:59:11:d0:9e:8d:9c:31:
c4:0e:7c:f2:f6:fb:66:40:0e:e5:42:ac:9b:60:9b:d7:6d:93:
d3:4a:3b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:26:28 2025 by rpki-client