Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa
File: Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa (raw, json)
Hash identifier: zKH1LTs9+Z8Dai2nZia/AYU5dJurOcYDxOkVkYs9o3M=
Subject key identifier: 0A:5F:AC:FE:4C:D8:94:0A:8C:8F:DC:5F:65:18:F3:CE:CC:A3:A0:E2
Certificate issuer: /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial: 01942444B899979392FCDDAD3A18F96C419C
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200183
IP address blocks: 185.28.76.0/24 maxlen: 24
185.28.77.0/24 maxlen: 24
185.28.78.0/24 maxlen: 24
185.28.79.0/24 maxlen: 24
2a02:ce80::/48 maxlen: 48
2a02:ce80:1::/48 maxlen: 48
2a02:ce80:2::/48 maxlen: 48
2a02:ce80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b8:99:97:93:92:fc:dd:ad:3a:18:f9:6c:41:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a5facfe4cd8940a8c8fdc5f6518f3cecca3a0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:27:00:24:ac:f6:03:d5:b0:31:af:88:96:d4:
7a:89:a9:64:f9:cb:48:f5:3d:13:a2:c0:ee:00:b5:
af:ba:dc:08:a9:8c:52:8c:98:b1:d4:92:d2:22:f9:
13:0c:74:f1:aa:fd:42:cf:7e:53:25:f0:aa:d9:3e:
45:d4:08:0b:45:e5:12:68:dc:78:9e:c9:a5:b5:c3:
1d:db:1c:f8:da:71:f1:74:43:59:6b:7a:72:76:37:
79:0a:03:78:27:d3:ec:25:1e:7e:8c:90:97:e4:ed:
3d:f8:ad:a6:e4:0b:79:b3:aa:7c:a6:ab:b8:96:d7:
73:38:5b:bd:4a:0a:55:d6:da:06:68:4d:41:d5:09:
69:2e:c5:3e:ec:a0:02:9b:8d:98:b0:9f:4f:8e:d5:
58:46:61:2a:6a:f4:29:96:25:d6:53:42:ee:2c:1d:
58:2f:e2:af:27:94:ac:95:1b:0a:26:d6:e6:4d:db:
8d:3e:42:ae:a1:d5:4d:67:eb:9c:78:4c:20:97:ca:
40:86:75:bd:ec:95:f4:70:4d:ec:54:36:2c:d7:93:
8e:3d:e4:ab:a0:ab:61:19:0f:35:81:68:33:84:ab:
af:c8:90:55:a9:eb:d9:82:a0:31:17:39:4b:bb:1a:
32:ee:72:d3:55:50:26:1f:e1:39:af:e4:37:19:a9:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5F:AC:FE:4C:D8:94:0A:8C:8F:DC:5F:65:18:F3:CE:CC:A3:A0:E2
X509v3 Authority Key Identifier:
keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.76.0/22
IPv6:
2a02:ce80::/46
Signature Algorithm: sha256WithRSAEncryption
a8:ab:be:d6:e1:3c:e8:3e:bf:c1:c5:c9:c5:52:a0:13:c5:ea:
29:44:39:25:87:1c:4d:9b:f8:48:90:5c:84:e0:73:82:3a:d4:
6e:14:ae:09:ad:a8:eb:f7:a8:b3:72:7d:0c:6e:a7:e4:6a:e8:
22:79:e1:88:28:88:d5:4c:b3:2c:9c:cd:54:60:d0:b9:91:ef:
73:0f:3e:14:8a:67:10:fe:97:d0:1e:fb:f5:7f:18:1c:86:0d:
22:6e:e4:6d:0c:89:01:9c:9d:9c:f4:dd:40:a4:29:a4:eb:62:
31:b3:0e:d4:7a:32:c5:66:62:22:26:29:d8:86:f3:82:e5:64:
53:72:b7:08:cc:62:ce:41:40:b0:16:7f:e4:7c:a4:52:af:27:
f2:81:d3:32:88:aa:b9:7e:28:b8:13:ef:b1:a1:c0:fa:9b:96:
66:98:b9:4a:a7:46:48:14:bc:af:63:c8:06:b0:de:c1:3a:88:
a6:aa:77:25:db:9e:88:27:78:ac:c5:a3:fa:1a:da:5c:b4:c1:
06:cf:08:b0:1d:43:e9:f0:4c:8f:0f:ca:8e:ae:d8:58:dc:eb:
a9:fb:5c:02:b5:d0:5b:3e:f1:cd:69:1b:49:1c:1b:32:2e:39:
24:f3:39:a9:02:c7:96:d1:74:c1:20:bb:f0:e9:bc:3b:90:b7:
8f:af:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:50:01 2025 by rpki-client