Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa
File: ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa (raw, json)
Hash identifier: mo2V1hYGi7uA3mmFMMTCShk3qAC1sKE08+9dYnb3F5w=
Subject key identifier: AF:2E:50:04:CD:84:BB:84:15:6B:72:1B:BD:52:27:35:C4:71:F9:AA
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D665EE68E57A5885F73F20CDF35D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 185.58.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d6:65:ee:68:e5:7a:58:85:f7:3f:20:cd:f3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af2e5004cd84bb84156b721bbd522735c471f9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:80:60:f5:f6:4f:25:81:a5:60:51:4e:ec:
e0:b1:22:5e:87:cd:0f:d1:88:d5:e1:94:c7:02:f8:
cc:8a:d5:fc:7a:bb:af:a9:7a:d1:52:91:98:64:ba:
6a:29:31:da:a7:1b:e5:81:70:06:05:19:1a:de:29:
2a:df:46:6c:32:d4:0d:d2:4d:58:4b:d3:0e:44:e3:
8d:63:90:0d:e4:57:d3:28:67:e9:5e:3f:e0:3a:21:
cc:cf:b8:e9:d5:a6:ea:1d:96:aa:1e:4e:16:0c:32:
a8:75:82:2d:ed:ba:d1:eb:32:b1:24:24:43:9b:46:
43:d7:55:c7:62:3f:09:c2:90:5f:24:75:bf:cd:9b:
2f:e0:1b:98:6e:e4:a2:36:4a:11:24:4b:37:66:30:
05:6b:57:61:e3:39:8e:d9:c0:31:a1:28:81:b9:8c:
a3:d6:bf:de:1b:3a:97:2f:a9:48:65:c0:86:19:c8:
26:24:f4:8a:e0:9c:b4:bf:c5:9c:b0:a3:81:66:44:
69:d5:bc:6c:6b:a4:81:f2:00:10:91:ec:bb:16:df:
fc:18:b1:45:fe:c2:3e:9b:7b:a5:7b:9e:7e:1f:18:
9c:3f:89:28:3b:1c:b2:92:df:96:5c:95:de:8c:fa:
f5:ae:11:8f:97:26:08:5d:11:63:91:db:ea:17:03:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:50:04:CD:84:BB:84:15:6B:72:1B:BD:52:27:35:C4:71:F9:AA
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ry5QBM2Eu4QVa3IbvVInNcRx-ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.23.0/24
Signature Algorithm: sha256WithRSAEncryption
32:7e:41:9b:dc:9d:7b:49:52:21:01:46:a0:16:f7:0f:c0:c4:
5a:d5:0c:1b:a9:e6:34:42:4f:d5:5f:8d:32:12:6e:6b:42:fe:
ad:e6:53:47:e3:c8:ec:4c:50:44:e0:99:b9:2d:62:12:2d:13:
a0:c9:80:51:f3:77:4a:39:77:ad:d6:8b:92:17:7c:22:22:0d:
50:69:c3:0c:80:d3:85:b6:59:3a:0c:33:59:36:c0:0c:27:bf:
5c:57:e9:7a:0b:73:a6:ea:b2:0c:c4:7b:e9:cf:dd:94:c2:ee:
30:27:3f:cf:f3:d7:74:71:2b:1a:1a:e8:de:d5:f1:fb:66:08:
09:14:07:23:fd:5a:9c:bc:64:dc:ad:34:6a:11:62:01:b7:ec:
95:41:7a:03:29:b0:8a:06:e7:71:5c:ab:7e:65:4f:04:d8:3a:
0d:fc:f5:d5:ee:3f:85:1a:c5:c1:f4:2d:ed:4e:5b:24:af:c3:
35:a8:a0:20:d3:d1:9b:10:3a:ab:c0:09:73:71:a7:03:c0:49:
37:fc:ac:2d:c0:86:c3:c5:02:55:46:38:fb:72:49:6f:bb:c0:
c3:5e:0d:98:d2:6d:4e:50:6e:75:0f:45:a7:13:a3:94:e1:e3:
63:2b:88:7b:2c:91:61:ee:2f:05:a2:ad:c5:08:8f:a6:49:29:
28:e7:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:22 2025 by rpki-client