Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/S0SO0HyBkdo3a_iLFGbpFh-3688.roa
File: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (raw, json)
Hash identifier: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=
Subject key identifier: 4B:44:8E:D0:7C:81:91:DA:37:6B:F8:8B:14:66:E9:16:1F:B7:EB:CF
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 01941FFA7E24B92BC67080863EC0A0E1B019
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/S0SO0HyBkdo3a_iLFGbpFh-3688.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205790
IP address blocks: 185.183.126.0/24 maxlen: 24
185.183.127.0/24 maxlen: 24
2a0a:1ec0::/32 maxlen: 32
2a0a:1ec1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7e:24:b9:2b:c6:70:80:86:3e:c0:a0:e1:b0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b448ed07c8191da376bf88b1466e9161fb7ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:90:2f:cf:fa:a1:80:de:c8:de:24:5b:1f:
a1:6e:97:b7:cb:58:6d:9d:28:21:57:c3:1c:68:c6:
22:5e:88:22:23:86:0a:24:d7:dc:02:a0:f8:96:61:
20:e8:d5:0c:c1:aa:b9:fe:93:77:f7:be:e6:7a:e8:
eb:e1:dd:b1:1a:37:6f:92:40:6c:f7:8c:f4:ef:26:
87:50:cb:ce:db:3a:be:ad:e3:7c:3d:02:eb:eb:fc:
db:f5:86:53:51:13:44:4a:f1:8d:c2:94:d5:27:ed:
75:38:eb:57:69:95:79:78:43:ad:00:45:1f:37:d5:
c2:fb:c4:14:ed:f2:f3:df:b4:b2:c4:29:17:71:fe:
e5:2e:31:ae:6c:a8:ba:b4:34:d0:b2:dc:35:58:16:
bb:9d:fb:f0:3b:df:b7:34:4d:11:84:8e:6e:20:fa:
e1:13:ad:8d:45:37:40:16:e4:43:e0:a4:64:cb:ff:
b8:25:b6:c9:37:55:ec:0e:2c:78:0d:12:6e:15:c7:
97:37:21:bc:54:3e:b3:49:98:b4:40:3e:df:02:46:
8f:85:2e:14:6d:bf:66:a6:c8:38:ca:c6:5d:e6:39:
22:e1:7f:c6:3a:18:7a:08:33:83:58:ca:db:04:f6:
4f:f4:d1:a7:f7:7d:ca:3d:a1:20:41:a1:de:c8:1d:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:8E:D0:7C:81:91:DA:37:6B:F8:8B:14:66:E9:16:1F:B7:EB:CF
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/S0SO0HyBkdo3a_iLFGbpFh-3688.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.126.0/23
IPv6:
2a0a:1ec0::-2a0a:1ec1:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:0c:a0:41:0a:be:c9:7c:7f:62:48:19:8c:84:c5:47:20:59:
05:54:4e:37:b9:eb:29:15:ea:9f:5e:79:8c:8d:c4:61:f9:49:
8d:35:c2:df:f3:8d:b4:df:50:59:20:bc:7f:13:2e:62:2f:27:
b9:aa:e1:05:32:21:53:7c:e1:74:df:d3:84:af:b7:1e:92:b4:
68:dd:0e:96:4e:1f:f5:90:32:fa:c1:84:61:ef:9f:6b:bb:e3:
05:48:b9:d3:c0:97:fe:d1:2f:0f:2e:19:0f:96:02:60:b5:c6:
fe:a3:c7:a3:d0:92:2a:21:97:d3:63:70:8b:2c:0d:9c:b2:63:
20:d1:09:8c:8f:43:27:d0:4d:c7:a6:77:51:27:13:c2:43:fa:
b4:30:f8:20:eb:b9:29:05:cc:01:d1:80:f0:76:71:e4:88:d6:
d3:ed:e6:be:45:c2:46:6e:f5:17:99:c0:a0:dc:46:ef:20:09:
7f:c9:dc:33:20:8b:72:99:d5:77:09:de:68:9a:56:84:6e:04:
9c:1f:e9:d8:e1:9a:f0:04:21:74:2c:c5:54:8d:07:87:c0:05:
06:59:78:52:7b:f2:bb:67:c4:35:98:38:17:84:fd:b8:be:07:
be:6b:14:b2:45:09:40:f0:db:1d:00:92:2b:b5:69:b1:ad:10:
63:76:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:54:34 2025 by rpki-client