Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/AuElns1VObrRDqT4NIwMY9EmyGk.roa
File: AuElns1VObrRDqT4NIwMY9EmyGk.roa (raw, json)
Hash identifier: 29nayPFK3cRbhQvKtMw0ZoiHbzL8FhraQfBFRLxRMzQ=
Subject key identifier: 02:E1:25:9E:CD:55:39:BA:D1:0E:A4:F8:34:8C:0C:63:D1:26:C8:69
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019428273F50A4439037B5C3F2068A61CB6C
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/AuElns1VObrRDqT4NIwMY9EmyGk.roa
Signing time: Thu 02 Jan 2025 17:54:08 +0000
ROA not before: Thu 02 Jan 2025 17:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50304
IP address blocks: 185.101.144.0/24 maxlen: 24
185.101.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:3f:50:a4:43:90:37:b5:c3:f2:06:8a:61:cb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e1259ecd5539bad10ea4f8348c0c63d126c869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:ae:f6:08:6d:1e:fd:c4:11:99:d2:7d:a2:
af:9a:49:9c:41:e2:19:51:1f:b3:13:87:e2:0e:1e:
2c:0e:23:90:29:e5:cd:19:b6:70:f7:08:bf:01:ed:
7d:b8:c7:08:2a:47:87:b6:72:f2:3a:45:98:34:0c:
4c:eb:d0:f6:ed:9d:60:50:1b:6e:76:e9:f6:ae:d2:
db:b3:32:61:2a:21:3d:b1:e5:c4:67:e6:45:2b:7f:
d5:f0:67:02:e2:d9:24:5d:a7:92:b0:ba:0f:ff:ef:
07:98:3e:b5:52:fd:fb:76:54:47:80:45:76:2a:b8:
5a:38:25:3b:57:29:31:f7:32:64:8f:2e:f7:41:67:
80:65:df:a7:b5:20:1a:b8:46:ae:3f:0f:c6:09:fa:
d5:52:80:eb:61:99:b8:0d:bc:df:54:e3:8e:d8:f8:
7d:26:73:ce:7c:5f:fd:88:f9:c5:36:de:69:41:30:
6d:e6:4a:3c:9c:3c:7f:e7:a9:09:5b:8d:4b:1b:f7:
ee:09:fb:2a:57:ea:79:ee:ff:b1:5c:7c:91:06:14:
37:69:a2:c1:30:03:4f:50:1e:80:ea:78:7d:ca:c0:
b8:1d:e1:f9:1f:fe:3b:30:a4:ec:b6:97:18:6b:41:
52:15:a6:d4:36:29:50:a5:03:95:5a:ab:cf:b0:bb:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:25:9E:CD:55:39:BA:D1:0E:A4:F8:34:8C:0C:63:D1:26:C8:69
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/AuElns1VObrRDqT4NIwMY9EmyGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.144.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:31:da:b3:81:5e:2e:3e:6c:4c:c0:f3:9c:75:4b:72:03:01:
21:79:74:27:d6:67:74:06:1c:3a:21:44:45:cd:e4:2a:53:24:
86:86:57:4d:7f:20:58:b1:29:6f:b5:88:eb:44:e8:dd:49:e8:
3e:91:c6:5f:cb:55:e8:17:b3:b8:76:ac:ca:a5:aa:ae:d4:5d:
52:b4:97:56:56:64:33:04:87:00:f1:16:bb:ea:67:6f:c0:49:
99:4e:5c:be:1c:b2:5b:56:48:a2:64:31:89:73:44:be:30:f9:
e8:fd:86:bb:f6:76:bb:a4:06:0f:14:20:8c:e7:45:9c:af:8d:
6a:6b:60:8e:e0:99:4e:7d:8b:fa:17:7e:22:af:69:34:fb:03:
14:10:54:f9:43:e6:30:40:7e:28:f3:aa:ba:5b:ec:a8:7d:9a:
1d:87:cd:7a:5b:4e:86:88:93:d3:73:4d:bf:51:7b:df:82:72:
e3:05:94:59:54:52:57:4a:31:1e:d1:da:0c:1c:a7:a9:56:fc:
74:d8:43:8e:ec:cf:63:75:a5:fb:ef:a7:0a:97:d1:d9:e5:5d:
e7:f4:5e:64:95:9a:9d:f5:d4:6e:f8:6d:bb:9b:ca:35:bd:8b:
d1:f0:82:d2:d4:ab:c0:2a:d7:25:35:77:5e:7b:cc:03:07:15:
17:0e:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:52 2025 by rpki-client