Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Ab1tskS4Q67Z2YctzJLxqj53W9g.roa
File: Ab1tskS4Q67Z2YctzJLxqj53W9g.roa (raw, json)
Hash identifier: AZCXpUJa1dgUBTX+Q3S9ZNI6U7aZKWGmwFCH40STagc=
Subject key identifier: 01:BD:6D:B2:44:B8:43:AE:D9:D9:87:2D:CC:92:F1:AA:3E:77:5B:D8
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0194258F20CE01BCD44E76C1A76C707172D5
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Ab1tskS4Q67Z2YctzJLxqj53W9g.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206178
IP address blocks: 185.194.102.0/23 maxlen: 23
2a0a:49c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:20:ce:01:bc:d4:4e:76:c1:a7:6c:70:71:72:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01bd6db244b843aed9d9872dcc92f1aa3e775bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:f9:b6:88:76:44:d0:2c:77:f2:7e:60:99:
10:5f:1e:66:e5:56:1b:b5:19:8c:05:d3:d7:f6:88:
a8:01:af:8a:7f:05:de:76:dd:60:91:1b:48:85:ca:
8b:9a:97:bc:d1:c3:13:40:63:a5:d3:b5:18:53:fb:
c8:80:f3:0f:74:0c:c4:ef:7f:55:7c:9b:eb:e9:0e:
2a:ee:5a:c0:80:02:7a:28:85:6c:0f:14:f6:3a:fb:
13:7a:20:7c:22:3c:97:67:19:e5:19:a4:0f:e8:be:
b0:d3:51:e6:c7:bc:d3:50:9c:5c:e9:ca:bc:5d:c8:
dc:3e:2c:51:fa:c8:41:f8:a4:c3:1c:52:61:9c:14:
8c:6c:f4:34:7b:b6:4f:15:94:b0:0e:7a:eb:69:3f:
24:91:06:f3:c6:50:89:b3:dd:25:b0:44:a2:49:0f:
95:af:df:f9:69:4e:f4:76:63:e3:36:d2:00:c5:76:
b3:86:f0:d9:2d:75:ac:75:54:97:33:02:d3:77:db:
b2:24:d2:cd:f4:d2:c7:f8:b7:1f:f6:60:7d:11:7e:
5d:ad:cb:3d:4e:75:12:de:b1:eb:88:2c:e1:69:a1:
db:bd:91:7b:9b:0d:bc:02:22:10:60:4e:60:2e:c5:
18:ab:7b:a2:a1:57:d7:5d:ad:5b:bc:6f:75:59:3a:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:6D:B2:44:B8:43:AE:D9:D9:87:2D:CC:92:F1:AA:3E:77:5B:D8
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Ab1tskS4Q67Z2YctzJLxqj53W9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.102.0/23
IPv6:
2a0a:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:57:ff:2c:34:e5:a0:16:a5:5a:b0:d9:c9:fe:05:88:6e:c0:
d9:49:70:95:0e:d5:2d:fa:7c:b6:ef:b5:e6:a1:bd:0f:d5:6c:
dc:68:1f:42:bd:6f:a8:40:d7:21:60:4e:79:8e:37:5d:98:7f:
84:ff:39:72:bb:c2:e7:77:47:b6:58:30:8e:17:de:6c:92:82:
30:b4:82:3b:a8:f1:ea:e0:d9:ff:cc:b8:f4:b5:9a:0e:33:b7:
3c:a3:23:a6:9e:03:fd:bd:62:b0:a7:08:12:e0:b2:0e:8d:7c:
6e:2c:38:36:85:49:22:df:ae:ee:a4:6a:38:64:6f:0b:71:90:
6d:84:63:fd:d8:3e:ed:72:f3:01:0e:d9:88:b7:86:3b:1b:e2:
40:36:99:3a:e3:44:93:7c:25:c3:62:ce:d4:03:c0:c4:0a:c2:
41:65:b2:7e:e2:00:02:60:dd:82:a4:7a:9a:2c:4d:d2:d8:ba:
e6:c6:1f:1c:91:36:1b:03:77:5a:f6:f6:54:a7:c8:d2:66:59:
49:59:52:71:82:43:8d:0b:6b:29:0c:f4:1e:05:7e:22:63:ac:
79:52:38:90:9b:8f:22:8e:d6:eb:25:f8:55:11:e6:55:b7:e3:
b9:c5:b3:ed:8e:dc:ac:68:ea:b5:cb:aa:59:32:88:ea:5b:da:
b7:48:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:00:33 2025 by rpki-client