Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa
File: dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa (raw, json)
Hash identifier: A47IWxTys6UPyaxxT7KgUDJag9HKcyHJ4nrmIQJOjaY=
Subject key identifier: 74:9E:99:EA:E1:C1:89:A4:9C:B2:01:70:04:D6:30:41:88:13:9A:49
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 01941FFA5DFC506F7E29EDDC044B9DF4596C
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204592
IP address blocks: 185.230.112.0/22 maxlen: 24
2a0c:7300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5d:fc:50:6f:7e:29:ed:dc:04:4b:9d:f4:59:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=749e99eae1c189a49cb2017004d6304188139a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:92:a2:1b:20:97:a4:49:56:57:1b:02:c9:
f2:32:de:32:65:5a:f3:28:4e:c2:b8:d7:4c:b4:bb:
36:49:d8:8c:b7:0a:85:a3:7f:56:ab:77:50:5d:0a:
9f:97:48:40:35:ca:83:16:a2:bf:60:e7:1d:02:e6:
72:de:64:42:fe:07:4c:03:79:dc:9c:b2:29:78:ef:
14:35:6a:1d:67:b7:ec:ff:4f:e1:9a:cc:65:a4:2d:
49:8c:30:3e:69:6f:69:89:c6:01:92:c3:da:69:85:
f2:1c:6f:8a:5f:07:59:d3:d3:ec:29:b6:2f:a3:f6:
77:6a:3c:4d:86:74:a1:4d:65:0f:55:b8:a6:ab:01:
43:1d:30:40:1a:c5:01:40:a2:a8:1a:d9:bd:df:39:
a3:ab:9c:a5:c2:e8:c9:72:c5:bb:3f:95:54:a8:81:
e2:7d:fb:f3:5a:fd:45:26:80:96:38:c0:26:c7:34:
a8:dd:27:dc:58:55:95:9f:7e:ac:7b:33:90:0a:90:
65:11:20:c8:35:75:ac:f6:ad:9d:32:3e:f1:da:35:
6e:e0:72:b8:f5:5e:6c:33:f2:49:15:bc:c6:e0:50:
44:4b:77:2a:6d:80:ef:0e:55:fe:ed:d3:2b:35:af:
e9:e3:ac:41:3f:ab:73:56:de:26:4a:37:97:34:1d:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:99:EA:E1:C1:89:A4:9C:B2:01:70:04:D6:30:41:88:13:9A:49
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.112.0/22
IPv6:
2a0c:7300::/32
Signature Algorithm: sha256WithRSAEncryption
44:d4:bc:12:0e:a2:99:c9:d4:cc:da:eb:2d:f0:03:be:0e:4b:
d1:4e:bd:47:3e:dc:eb:22:3f:24:bd:98:09:e3:d0:0a:df:77:
e7:f6:0c:b0:e8:44:3f:0a:e1:a0:ec:b1:ab:4e:0e:d9:a2:48:
cb:56:6b:fe:eb:97:8f:fc:26:34:ef:80:68:01:a3:34:e4:29:
fa:fe:0b:65:c4:25:0f:0a:98:66:a3:93:46:26:46:fd:60:6e:
76:e8:32:0c:6e:f1:96:63:9c:c3:d1:34:40:bf:7a:51:98:94:
d6:9d:41:7a:43:3f:bc:69:93:ba:1d:65:90:5c:9a:66:7f:06:
9d:ac:22:f4:c3:e1:8f:63:b3:95:4b:f8:9b:66:6e:7e:b2:85:
cf:1b:7b:de:eb:a1:37:13:fd:04:f6:b3:b9:32:5a:bd:3e:a5:
79:72:63:6d:6f:db:62:60:0c:bb:97:89:7e:fb:9a:56:0d:fe:
9a:37:b6:65:68:52:f3:1b:c6:33:0f:c7:03:52:62:f7:c9:f3:
da:9c:ad:e3:6c:8e:de:bc:8a:33:52:e3:98:f0:cc:3b:a4:85:
f7:fc:d0:21:38:64:7e:4b:84:b1:2f:38:32:8e:36:d6:49:5c:
8a:e9:31:c8:ec:1a:42:b5:de:69:04:7e:3d:34:3f:7d:71:15:
28:80:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:26 2025 by rpki-client