Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa
File: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (raw, json)
Hash identifier: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=
Subject key identifier: CE:25:88:B5:9C:B1:8B:7A:60:73:8C:61:0A:FF:00:63:FC:9E:F2:A4
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 019424B3F9B6D317BA8062ED88A92DBA7F5B
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 185.248.56.0/24 maxlen: 24
185.248.57.0/24 maxlen: 24
185.248.58.0/24 maxlen: 24
2a0d:2bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f9:b6:d3:17:ba:80:62:ed:88:a9:2d:ba:7f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce2588b59cb18b7a60738c610aff0063fc9ef2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:6b:b6:92:31:ca:4a:19:48:66:a4:9d:b9:
88:d0:58:a0:d8:80:f0:87:0d:f1:c9:75:a0:57:9d:
75:78:39:19:08:d6:95:68:9e:fe:4a:13:b8:e4:1c:
fc:8f:5e:db:6a:d5:19:8a:f5:cb:7e:7b:4a:1b:21:
e3:cb:05:39:59:87:15:f2:ce:3c:81:3a:b8:aa:be:
03:dd:1c:b6:7b:1a:40:33:03:14:68:6f:8d:af:ec:
99:ef:44:63:f7:7f:92:33:87:84:ea:82:23:67:07:
28:0d:bc:1f:21:e7:4c:7e:47:23:6b:f9:95:2b:4c:
07:6a:57:3b:dc:1e:1d:86:bf:1d:e4:ce:96:a7:ef:
46:26:db:37:22:92:03:49:ca:f3:f2:55:bf:68:b5:
aa:10:d3:b4:5f:d9:32:f1:19:73:a7:8a:e1:bb:8b:
a8:55:08:59:23:90:75:cc:2f:1b:c1:49:0c:01:22:
48:9d:3e:85:83:71:bb:37:4a:5b:63:05:5b:96:1a:
7b:37:ba:cc:4c:00:bd:ed:ad:a5:9d:fb:a9:ee:0a:
f7:28:de:d3:43:89:50:18:da:22:14:f0:f0:19:95:
45:2b:ad:97:bb:ef:ec:5f:2b:0a:00:42:72:81:ec:
b0:ff:dc:44:47:7d:b2:ff:67:f2:7f:e3:17:f2:22:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:25:88:B5:9C:B1:8B:7A:60:73:8C:61:0A:FF:00:63:FC:9E:F2:A4
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.56.0-185.248.58.255
IPv6:
2a0d:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
7d:90:eb:b9:35:e9:bd:7c:75:da:2a:dc:5c:75:61:62:53:40:
e4:4d:b1:a4:b7:0c:42:65:99:bf:41:6f:d2:c3:71:97:65:5f:
19:86:c2:f3:00:4b:e3:bd:58:78:d5:b6:27:25:1b:6a:53:7b:
ff:17:41:ce:95:7e:29:a7:76:8a:a8:9a:9d:79:06:b2:d1:e3:
34:e9:81:f7:e0:e3:69:d1:76:cd:90:45:e8:dc:a3:f5:03:4c:
65:c3:bc:f6:a9:07:5a:14:d6:8e:73:8b:7c:16:18:02:d6:ad:
e9:95:eb:88:1c:03:54:61:e6:52:10:17:3b:9e:0c:dc:5f:87:
fa:33:8e:87:31:dc:83:ff:9d:be:99:44:46:93:08:92:c3:92:
70:c2:c2:bd:9d:19:dc:6a:94:ca:9d:34:9d:96:e5:2a:e4:11:
fc:fc:4c:b1:7e:b0:db:36:ca:04:91:34:d2:74:52:93:06:af:
e9:84:60:77:0e:60:fa:ab:08:8f:27:7b:e3:95:09:d1:fd:01:
e9:85:c1:3d:c8:74:c8:12:77:08:4b:d8:91:66:6a:9c:d6:e4:
66:89:a5:bf:c3:1f:d5:68:9b:b7:b9:95:86:36:32:8a:cd:08:
91:db:86:78:85:c1:61:13:05:3e:53:5f:9a:e0:0e:7c:b6:ec:
29:8e:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:09 2025 by rpki-client