Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/1C8ZLPGb7cs83tfkfpBebyBiX7w.roa
File: 1C8ZLPGb7cs83tfkfpBebyBiX7w.roa (raw, json)
Hash identifier: tZDyBN3FPva2cn/hbdxMAaSyUjVLmEX+ROsYp3y9P/E=
Subject key identifier: D4:2F:19:2C:F1:9B:ED:CB:3C:DE:D7:E4:7E:90:5E:6F:20:62:5F:BC
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 019426D9B4D187057AC932190DDF489C80A3
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/1C8ZLPGb7cs83tfkfpBebyBiX7w.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204062
IP address blocks: 91.103.148.0/24 maxlen: 24
91.103.149.0/24 maxlen: 24
91.103.150.0/24 maxlen: 24
185.115.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b4:d1:87:05:7a:c9:32:19:0d:df:48:9c:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42f192cf19bedcb3cded7e47e905e6f20625fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:5b:13:05:67:bb:a5:c5:6f:5c:27:a8:93:
9e:22:cb:fc:fa:f2:f4:0b:95:8c:20:33:9d:0c:14:
25:56:51:1d:77:af:23:3b:66:3e:5b:61:8e:67:1c:
d0:14:f1:66:c8:c1:62:47:f3:81:2b:1e:3a:a8:fb:
8b:84:12:a1:26:d8:57:14:f7:00:2f:3a:71:a6:18:
0e:33:8d:81:05:6c:6f:54:81:0c:66:ce:de:df:35:
fe:26:be:d4:67:f2:b0:38:cc:1d:42:cc:5f:ab:e7:
f9:33:68:5c:4c:70:34:8d:44:40:c4:1c:db:92:0a:
c5:d1:54:55:86:02:c9:40:13:dd:11:85:ea:c6:fa:
49:09:df:12:0e:e1:7d:f8:9b:83:59:c0:de:7a:3c:
80:51:42:17:57:e6:3c:f6:0d:b5:a6:ba:4d:11:aa:
9b:3f:15:d8:5b:48:1f:96:e5:cd:8d:6f:d6:a8:08:
db:7b:d8:50:1c:3b:42:2c:37:03:06:dc:d4:bc:16:
e1:ed:7e:4c:ee:e3:c7:21:fb:70:0d:db:60:11:91:
1a:a5:ea:aa:58:49:8c:43:d9:19:c6:85:a0:db:3c:
b2:e2:d4:ab:86:74:54:a9:b3:b7:88:14:24:bd:c5:
bc:bb:06:f2:a5:72:f3:d3:ef:ac:17:c9:5c:a6:8c:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:19:2C:F1:9B:ED:CB:3C:DE:D7:E4:7E:90:5E:6F:20:62:5F:BC
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/1C8ZLPGb7cs83tfkfpBebyBiX7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.148.0-91.103.150.255
185.115.232.0/22
Signature Algorithm: sha256WithRSAEncryption
59:f2:ff:7c:a1:48:3d:99:dd:9b:a5:ab:2a:06:31:ba:cb:97:
82:83:e5:38:e4:d0:1e:6c:c0:80:b4:18:67:b3:d7:97:10:0e:
5f:1b:4d:cc:3e:da:0c:a3:df:57:5e:1f:ef:6a:c1:7c:b5:5f:
32:29:ba:f9:4c:bf:4b:ad:db:d9:45:43:52:d8:0f:f3:b4:de:
4b:0d:08:61:0b:5d:f2:a8:82:4c:cd:34:a8:0f:c6:47:54:4d:
41:b9:44:2c:45:75:e9:e8:bb:b7:29:6c:37:39:e7:3e:cc:59:
70:bf:a7:d3:04:00:24:cb:d4:04:85:9b:30:7c:fd:f8:82:6d:
e5:cc:39:3e:b4:10:5c:40:61:a7:d1:52:97:18:49:b8:87:ba:
2d:85:06:1e:df:3d:c8:d1:b9:ed:65:c1:9e:d1:bf:ce:9c:df:
a4:68:6c:37:95:86:33:5f:ae:9a:59:e3:f8:43:82:a5:e3:2c:
70:2a:3e:57:52:e3:3a:f6:af:11:a8:62:4d:20:c4:e7:cb:05:
31:f9:c4:0a:99:a5:7b:0d:41:47:04:30:53:f5:e2:60:b8:dc:
56:17:46:01:6c:96:ca:26:75:aa:8b:ce:c6:53:14:52:a1:e6:
52:a5:ec:95:14:64:d8:7c:29:17:a0:7e:cc:78:2e:97:03:f9:
da:94:34:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:07 2025 by rpki-client