Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa
File: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (raw, json)
Hash identifier: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=
Subject key identifier: 09:CC:5A:C4:3E:04:A0:A8:67:15:B0:AF:9F:B7:C6:C7:83:C7:5A:55
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC685691BC9D2AE8C5CFEB4F7ECEF
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47929
IP address blocks: 185.216.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:85:69:1b:c9:d2:ae:8c:5c:fe:b4:f7:ec:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09cc5ac43e04a0a86715b0af9fb7c6c783c75a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:67:27:b7:15:ad:1c:d4:e8:92:2c:63:44:
5d:2a:a0:bb:a6:f7:1e:fb:f4:2c:89:aa:e8:44:f0:
7d:a0:49:d8:3c:2f:8f:dd:3b:6b:15:d9:4a:76:54:
46:10:59:b4:28:c3:2f:69:c4:91:a3:95:25:aa:a8:
8c:3f:02:a5:00:5b:b7:1b:03:87:3b:87:db:cf:d7:
83:b4:4a:53:f0:9a:d6:fb:da:e4:90:b3:a6:1d:ba:
df:93:6f:62:ab:7e:49:8d:51:0f:77:a8:ae:17:c0:
07:34:44:69:a7:eb:a0:eb:aa:be:cb:dc:0c:31:53:
13:41:de:1c:7d:8b:20:a2:da:7f:8b:66:6e:ae:9b:
69:52:7a:0d:ca:7d:a8:ce:c4:84:02:5a:ff:13:32:
94:2b:f6:28:59:51:08:ef:24:af:2f:2f:48:60:e1:
e9:e5:84:7f:d0:49:25:0a:7c:f5:39:00:f2:a9:af:
1d:06:39:e7:d0:6b:79:22:61:cd:e9:d4:0b:2f:16:
8b:49:f6:73:8c:28:86:ca:9c:cc:19:ce:10:11:55:
96:24:49:1e:56:14:df:dc:4f:42:f0:8c:45:7c:e8:
7d:ca:5c:6f:b5:8e:65:f2:48:9c:43:29:80:4e:94:
00:43:cb:97:cd:f0:2f:fe:a9:f7:3d:bf:49:fb:45:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:5A:C4:3E:04:A0:A8:67:15:B0:AF:9F:B7:C6:C7:83:C7:5A:55
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.208.0/24
Signature Algorithm: sha256WithRSAEncryption
07:74:1e:bb:f9:99:9e:84:96:37:7d:57:c6:4d:c0:b6:5d:8c:
c8:c0:f7:b5:45:e9:84:b4:cb:d5:ae:ef:7e:ed:7f:e6:6a:97:
79:dc:29:fa:35:66:fa:84:64:33:4f:ad:68:f2:03:c2:42:25:
20:c8:54:d1:25:97:5b:e7:1a:75:38:91:ad:9c:42:18:fe:44:
8d:f4:da:eb:3a:f2:7c:0f:4e:eb:b5:2a:36:2e:a3:90:3a:a0:
4c:5a:04:75:f9:aa:7f:36:24:55:ab:b9:9d:19:ca:85:aa:9e:
c1:c5:f5:e5:9a:24:86:a4:cd:7b:82:4d:c1:9c:0a:cd:6a:d4:
4e:53:6a:b2:66:f9:1d:26:88:96:8c:e6:d7:b6:c1:c0:f6:af:
ba:c3:e0:a8:59:8b:ee:73:e2:22:a8:a6:59:17:e7:b6:12:d4:
94:a7:7a:a6:f2:dc:d2:97:93:6b:95:19:b2:3f:dd:59:5a:9a:
54:43:c1:14:6f:6c:43:f5:29:bf:4a:f0:a1:e4:be:6b:f7:c1:
5e:1c:b8:4b:b8:80:8d:ac:08:eb:de:07:7a:e4:da:23:96:6f:
2d:b1:f4:36:52:bb:15:6b:72:5a:eb:66:4a:b5:fb:92:72:c3:
7b:5a:dd:95:2a:58:90:23:0a:04:75:16:c3:35:d7:2d:be:eb:
34:66:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:02:10 2025 by rpki-client