Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/aMobsnKksVIngBq9PAQh6f0uc_s.roa
File: aMobsnKksVIngBq9PAQh6f0uc_s.roa (raw, json)
Hash identifier: MgPm9vdG5quTaP1hsCUOaYxEpwoMN/PPpfC7QE2zzrE=
Subject key identifier: 68:CA:1B:B2:72:A4:B1:52:27:80:1A:BD:3C:04:21:E9:FD:2E:73:FB
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019424B36869C7ABC99CA669B9951DBEA5C1
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/aMobsnKksVIngBq9PAQh6f0uc_s.roa
Signing time: Thu 02 Jan 2025 01:48:44 +0000
ROA not before: Thu 02 Jan 2025 01:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203977
IP address blocks: 185.146.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:68:69:c7:ab:c9:9c:a6:69:b9:95:1d:be:a5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68ca1bb272a4b15227801abd3c0421e9fd2e73fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:d0:28:b2:d6:fd:25:27:1f:f9:de:ac:44:
60:8d:1d:5e:69:56:cd:44:f7:43:1a:88:f2:69:e2:
f8:28:83:8b:8f:0a:c3:3b:85:7b:7d:f5:33:0d:f3:
2d:bd:a9:15:23:62:ea:04:17:23:30:9b:fc:86:4a:
b0:9e:9e:5f:19:ff:88:50:32:ec:52:e0:c1:53:63:
5e:a1:bb:69:b7:7e:cd:18:3e:13:bf:25:76:cd:16:
49:85:70:ca:13:92:ed:f1:6b:c1:70:76:1b:4f:fa:
b5:4a:49:9b:92:a1:47:b5:80:ee:a0:6c:8e:41:45:
2d:08:49:f3:0b:00:14:c0:bd:44:13:e1:c9:25:17:
cf:f5:18:c3:13:ed:86:3f:b2:f3:ba:f8:4f:fc:f2:
3c:87:13:11:2c:10:74:5a:92:e4:3a:34:72:85:13:
de:6e:78:1f:ba:95:ab:3e:81:ef:39:cd:05:0c:f5:
d3:85:09:c4:c0:d6:ea:23:75:0f:5c:0d:84:9a:49:
fc:01:74:87:0e:3b:01:5d:3f:b3:3f:55:22:68:b0:
35:06:b6:89:e5:1a:75:0c:92:b1:f4:4d:96:33:b6:
0c:5a:00:dc:67:99:14:19:54:12:dc:21:45:df:e7:
fa:aa:f5:e3:b5:b8:6a:79:07:cb:25:8d:88:06:ab:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CA:1B:B2:72:A4:B1:52:27:80:1A:BD:3C:04:21:E9:FD:2E:73:FB
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/aMobsnKksVIngBq9PAQh6f0uc_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.226.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fa:ba:8f:6c:3c:8c:4c:92:9a:ec:be:73:ba:a8:9d:e9:1e:
ae:c3:43:75:cf:36:98:18:2e:13:e5:c2:b5:31:19:3a:70:0c:
d9:c5:d3:f2:9b:e3:c3:f6:a5:5e:27:de:1b:89:e1:b9:e7:df:
fd:d6:42:7c:21:9d:69:d2:80:c8:a4:b8:56:40:35:9e:38:02:
e8:e4:dc:4c:e3:88:ab:ed:33:e7:29:c4:9e:b5:96:d5:0e:05:
82:3f:fe:63:c1:1a:7d:1c:49:67:8e:c8:21:8d:20:54:1a:3e:
1e:70:a0:f5:18:26:66:f1:9a:1e:9a:9a:cb:c9:c6:09:8b:09:
c2:5a:37:0d:e4:31:39:b0:fa:e1:3f:e1:a7:c7:b7:d2:05:36:
16:49:48:47:03:3b:37:16:4f:27:5c:fc:cb:f5:46:22:fc:cd:
a6:d0:57:4c:67:21:75:f0:e1:00:78:c6:71:23:2e:dd:79:91:
cd:e5:cd:97:a4:1f:dd:c2:20:26:b1:af:4a:62:35:32:12:60:
e3:b0:c4:7a:b2:51:7a:23:29:94:79:8d:d8:94:dc:5f:0f:96:
f5:c9:a5:d9:81:52:78:77:0b:81:9c:0a:39:72:46:16:21:d5:
e6:67:34:e2:e9:49:40:47:b3:de:4e:49:d3:7b:c6:a0:e3:8e:
ae:e2:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:38:10 2025 by rpki-client