Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/7dRcXbElWutmb-vx1yNlkmHljSE.roa
File: 7dRcXbElWutmb-vx1yNlkmHljSE.roa (raw, json)
Hash identifier: WZ+TCSmEO4aTN64/UdH9rIveS1dVo6wGMMxf2jnWiPU=
Subject key identifier: ED:D4:5C:5D:B1:25:5A:EB:66:6F:EB:F1:D7:23:65:92:61:E5:8D:21
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 019423D76E51936F30563BF73F797903813F
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/7dRcXbElWutmb-vx1yNlkmHljSE.roa
Signing time: Wed 01 Jan 2025 21:48:28 +0000
ROA not before: Wed 01 Jan 2025 21:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28708
IP address blocks: 185.171.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6e:51:93:6f:30:56:3b:f7:3f:79:79:03:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Jan 1 21:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd45c5db1255aeb666febf1d723659261e58d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:27:8f:66:5f:19:a4:58:22:e2:c5:e8:83:
ac:82:3d:f5:c1:b8:70:a3:5d:2c:c3:21:74:df:88:
80:e8:df:83:78:5a:d3:7e:2e:ff:da:b5:9f:19:7a:
ad:ed:22:57:3b:ca:ee:14:ee:8a:cb:96:c8:08:fd:
d2:3e:1e:b9:c3:e0:ab:15:f2:46:43:12:7e:fe:7d:
4e:77:97:6f:16:e9:44:04:58:54:fd:2d:41:2e:f0:
99:91:f7:6b:c8:3e:94:a8:5a:93:ed:47:66:a2:df:
5d:aa:bc:1f:e7:85:17:ee:d5:45:03:d7:6a:1b:9b:
13:71:d0:91:6a:04:72:d6:58:36:26:ee:d0:39:07:
72:34:19:36:5b:11:b0:a8:49:9a:a4:ba:5c:da:83:
eb:d3:ab:7c:12:58:e2:b7:07:5f:10:00:ed:ff:57:
4a:f0:4d:ad:0c:f9:84:ad:34:99:48:0b:39:f2:73:
69:15:67:67:93:08:4e:47:3f:c2:75:c2:ed:e0:86:
72:4c:c5:d0:f3:80:0a:b7:89:0b:39:aa:37:ef:33:
5e:47:34:ee:d5:7b:ca:45:d1:6d:ff:97:a7:f8:1e:
9e:45:e5:ff:fc:12:a1:a2:3e:9b:bf:a4:dd:cb:52:
3f:b3:c0:c0:e7:e4:90:13:19:d9:75:95:9a:1a:17:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:5C:5D:B1:25:5A:EB:66:6F:EB:F1:D7:23:65:92:61:E5:8D:21
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/7dRcXbElWutmb-vx1yNlkmHljSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2b:29:e0:a3:6d:b5:a1:96:a2:c5:e2:41:4c:9b:83:8f:2c:
89:65:92:f0:1c:aa:9b:9b:87:a7:d0:ee:28:0a:a9:df:89:57:
3e:a5:85:2f:96:f4:ae:e9:41:a7:00:97:a6:de:ba:61:32:2a:
48:67:3d:29:e7:54:7e:28:7c:6c:0b:e5:b3:06:fd:43:1e:35:
0f:9f:11:c8:5d:02:95:21:43:8a:e9:04:84:ae:fd:0f:16:c2:
cd:69:ab:ae:18:12:8a:73:58:28:66:3e:1b:fa:ae:f2:f0:eb:
9b:31:97:bc:c7:eb:cb:c3:19:61:a5:44:62:82:cf:4b:74:d8:
41:d0:35:57:1b:79:9d:e3:41:42:03:4d:c0:3f:58:13:cf:2b:
6e:72:8d:a8:11:bf:27:53:3a:a0:3c:96:05:20:ff:68:5d:36:
75:b1:bc:00:a3:d6:5e:6d:98:d8:b9:cf:04:c5:77:70:6a:b7:
e2:4c:e5:d8:a6:09:a5:e1:e0:de:ba:24:79:c5:24:2e:94:0a:
a3:ce:d2:54:aa:98:ee:08:94:fb:bf:22:44:2c:0c:d1:c2:f4:
8b:a7:25:2f:33:29:57:47:87:0d:06:7f:46:e2:94:d1:56:8e:
88:3e:27:e4:a5:50:21:a8:64:a9:2a:46:02:1a:7e:68:09:3d:
b9:66:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:07:11 2025 by rpki-client