Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-vR0jF7g8QsInNXTOzrtpgpj4zQ.roa
File: 1-vR0jF7g8QsInNXTOzrtpgpj4zQ.roa (raw, json)
Hash identifier: FYLRmsabhaJMoLfTlT714fRnGdoNC7GLwinCPVcAnqA=
Subject key identifier: FA:F4:74:8C:5E:E0:F1:0B:08:9C:D5:D3:3B:3A:ED:A6:0A:63:E3:34
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3A2EF6B497F649FCE0A10607B011E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-vR0jF7g8QsInNXTOzrtpgpj4zQ.roa
Signing time: Thu 02 Jan 2025 15:47:51 +0000
ROA not before: Thu 02 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.51.192.0/24 maxlen: 24
2a01:b2e0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:a2:ef:6b:49:7f:64:9f:ce:0a:10:60:7b:01:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faf4748c5ee0f10b089cd5d33b3aeda60a63e334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:19:e9:e7:42:5f:63:ce:ec:86:0c:28:ed:
f0:49:75:09:98:33:86:90:de:30:95:8d:83:72:0d:
88:08:02:a0:e3:9d:c6:13:3a:2f:5b:61:a2:3f:66:
11:93:f5:de:aa:07:8f:4d:2a:35:55:c4:b2:39:23:
4a:7b:75:bd:06:55:7a:e2:c6:d3:e2:ba:32:ac:38:
bd:93:0e:1a:f1:0f:53:b4:d2:07:71:ee:bd:12:5a:
fc:73:b3:2c:95:04:60:77:7e:7b:21:05:c8:18:5f:
cd:ea:a3:fe:c7:84:82:89:05:48:00:09:f3:38:35:
c9:28:b1:0f:9e:04:36:be:6a:dd:ee:97:7e:a5:1b:
51:63:25:07:ca:20:a8:f4:ca:53:90:29:b8:ea:77:
f0:7a:19:0d:45:39:4b:0b:fc:a6:f6:8e:5a:0b:99:
d2:7c:3f:dd:57:01:ec:11:fc:b9:cb:d3:7c:83:bb:
7e:49:e4:79:52:fc:86:8f:94:ef:4f:87:dc:df:5b:
99:07:1c:cc:30:9e:1b:91:78:7d:d0:9a:f3:70:6d:
c2:e4:6b:8c:25:63:34:90:d3:3b:d4:ee:d9:98:05:
e9:1a:e9:61:59:3f:90:97:cc:27:f4:88:06:03:84:
da:e3:ce:1d:4a:4f:8b:50:a4:01:d8:9d:cc:f4:0d:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F4:74:8C:5E:E0:F1:0B:08:9C:D5:D3:3B:3A:ED:A6:0A:63:E3:34
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-vR0jF7g8QsInNXTOzrtpgpj4zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.192.0/24
IPv6:
2a01:b2e0::/29
Signature Algorithm: sha256WithRSAEncryption
64:c1:12:0d:8b:42:e3:c0:79:05:f6:79:ec:41:38:cc:39:75:
01:a4:c0:e9:1d:b1:e4:01:46:93:2e:69:7f:c2:c4:7d:d8:c1:
39:e0:1f:0a:f3:10:f1:0e:c7:a6:8a:fa:4a:0a:22:3e:39:c1:
2f:6d:25:37:f3:da:5d:94:b0:96:de:84:c7:9d:68:06:d9:86:
f1:0f:0c:85:d2:5c:21:77:ba:1a:14:e1:bb:42:7e:9d:0c:d1:
87:aa:fc:72:38:7e:35:dd:f2:aa:f8:ed:ec:85:34:9a:dd:3b:
6c:2f:59:02:05:dc:7e:8a:12:80:e7:7d:90:44:93:be:b8:00:
d0:38:e7:91:73:a2:b0:0d:4e:18:63:77:ba:82:1c:06:87:f3:
24:6d:12:82:f8:a9:e5:ae:e7:e9:28:33:ea:a3:c0:31:91:fc:
b2:52:42:2e:3e:79:71:55:27:47:b4:40:5f:07:ad:7d:28:6d:
02:26:38:d4:01:27:a1:24:3a:1e:c0:5a:0d:a6:70:44:47:57:
93:a5:24:f4:e3:30:37:a9:7a:0f:f2:95:9b:b9:fa:2b:88:d5:
09:7c:84:be:05:90:7c:e0:7c:76:49:05:e2:00:c4:98:a0:c2:
d6:99:be:99:14:1c:98:f4:47:89:c8:ff:14:03:2f:3b:ef:7a:
42:ca:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:59:37 2025 by rpki-client