Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/B5665HYy6kSNy90OpMzSYkfYZ78.roa
File: B5665HYy6kSNy90OpMzSYkfYZ78.roa (raw, json)
Hash identifier: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=
Subject key identifier: 07:9E:BA:E4:76:32:EA:44:8D:CB:DD:0E:A4:CC:D2:62:47:D8:67:BF
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 0194258E8E386943FD6D7E8757B2C160F6B9
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/B5665HYy6kSNy90OpMzSYkfYZ78.roa
Signing time: Thu 02 Jan 2025 05:48:07 +0000
ROA not before: Thu 02 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204589
IP address blocks: 185.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:8e:38:69:43:fd:6d:7e:87:57:b2:c1:60:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jan 2 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=079ebae47632ea448dcbdd0ea4ccd26247d867bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:a7:32:66:35:e1:a2:de:2c:79:f5:98:6a:
d9:10:9d:e7:8a:a1:77:7c:2f:1a:24:a5:d1:77:95:
56:ab:0f:74:8f:b0:42:03:55:f3:a7:2b:c8:60:ee:
d0:b0:3a:82:e0:a4:00:85:11:28:65:66:06:0e:16:
2b:d2:cc:91:17:50:e9:d4:d3:58:45:09:ec:f2:4a:
38:9a:fb:86:a3:b4:52:03:54:11:93:b1:de:21:a3:
30:66:40:5c:d8:86:e0:90:84:03:ff:1f:75:85:f8:
a6:c6:4b:f4:95:d6:2c:67:ec:0f:e1:8f:aa:1c:f3:
a0:70:ba:56:cd:fa:3d:18:3b:3d:b7:e0:22:7e:bb:
c1:e4:3f:92:49:08:ab:6f:36:07:c7:5e:c0:95:60:
a4:64:7f:b4:2b:90:06:08:98:04:b4:1d:43:95:b7:
14:26:5a:29:70:67:cf:dd:5d:08:cb:e8:13:18:ff:
7e:db:81:a0:8f:c6:32:40:91:25:ad:8e:1d:88:6b:
36:d7:f5:ff:fc:4b:2e:33:ce:46:87:46:f7:98:ce:
10:f7:50:cc:17:9d:3f:01:b3:13:53:e6:7c:42:2c:
c6:e1:35:08:4c:c1:94:a8:cd:2b:52:78:6b:39:09:
cb:05:e3:9f:b8:c6:07:8f:7b:e2:7b:06:e2:63:d5:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9E:BA:E4:76:32:EA:44:8D:CB:DD:0E:A4:CC:D2:62:47:D8:67:BF
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/B5665HYy6kSNy90OpMzSYkfYZ78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a8:33:a5:e5:17:89:bf:ea:a5:13:fd:18:e5:44:df:08:26:
28:2a:b0:fd:20:d5:07:a2:39:f6:55:f6:d8:24:f5:b6:d3:86:
96:4f:99:f6:19:13:22:b6:33:c5:ce:b4:02:b6:08:ff:7e:38:
6b:84:84:86:5a:ad:6a:b9:d0:fc:71:2b:24:b4:e2:a7:8d:c2:
6a:da:58:04:14:d0:d5:8b:6a:18:fa:f3:f3:7e:19:00:ce:63:
7a:4b:61:49:b6:75:90:41:58:b4:9f:5c:13:7c:c3:6a:dd:54:
65:c5:56:37:d4:2b:60:bf:76:a7:04:d3:96:19:07:01:84:55:
68:b6:f4:b1:7f:8e:bd:bc:cf:cb:10:4f:f2:38:4e:b7:da:ca:
e8:a1:b9:f4:70:2b:18:12:fd:db:df:26:b9:49:46:3c:96:72:
9b:a9:64:1a:6f:86:bb:04:36:11:18:ad:88:42:f4:4f:b0:e5:
54:74:38:cc:75:2b:75:d2:56:19:e1:4e:da:a5:b0:23:16:42:
ec:51:d4:0a:90:c6:c2:e6:7c:c9:4c:03:f5:2b:99:eb:bd:89:
25:14:33:aa:71:2e:60:66:ef:3f:bc:72:2d:d6:bb:d7:09:bb:
a4:bb:3f:9d:ab:a3:b3:c8:23:4d:31:33:59:32:a9:7c:2f:82:
5a:af:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 06:11:04 2025 by rpki-client