Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/27WBhhpGCu8KcUXHgHNDtyT7qA4.roa
File: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (raw, json)
Hash identifier: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=
Subject key identifier: DB:B5:81:86:1A:46:0A:EF:0A:71:45:C7:80:73:43:B7:24:FB:A8:0E
Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial: 019426D95F8988F76FD3C7565FDB153724F0
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/27WBhhpGCu8KcUXHgHNDtyT7qA4.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.170.188.0/24 maxlen: 24
185.170.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5f:89:88:f7:6f:d3:c7:56:5f:db:15:37:24:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbb581861a460aef0a7145c7807343b724fba80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:31:e1:8b:56:cb:a1:7e:bc:6a:23:c5:07:
fd:84:a6:0e:6b:5f:f2:4f:45:0e:47:9d:ec:6d:ab:
b9:cb:e2:e0:92:36:13:71:e4:01:f5:77:dd:93:4a:
f3:3b:68:b0:69:2d:19:ea:36:89:07:19:a8:06:d0:
24:ff:a2:1c:e7:f7:e0:cc:84:2b:f3:51:69:a0:e7:
51:e3:55:8b:d9:34:08:41:e1:2c:78:4a:6e:7c:e5:
3e:d8:d9:60:d5:1a:7d:98:ce:85:ee:43:be:83:17:
ae:54:1a:90:18:d4:3d:ab:ee:3d:86:3c:3e:06:1d:
1e:fc:68:5f:0a:ad:e3:aa:e4:97:31:78:d0:09:01:
2b:94:bc:56:20:4e:4e:7a:c4:9c:15:94:d0:9a:67:
53:eb:88:ed:08:94:00:4b:8d:22:fc:c6:53:95:5d:
ee:43:e1:78:9c:a0:fe:01:70:47:e3:1f:ef:33:c9:
ed:24:45:42:d8:e7:d8:51:a0:0f:ce:8f:5d:35:ca:
a3:10:51:9c:41:92:8c:b0:62:05:e5:07:fa:14:43:
53:6c:be:a7:e2:b7:1b:f3:83:23:48:51:aa:1f:9f:
2f:a0:33:fc:66:28:77:01:14:d9:35:6b:dc:7d:f9:
5b:2b:87:5d:93:d0:8b:d9:a6:3a:34:f8:11:5a:86:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B5:81:86:1A:46:0A:EF:0A:71:45:C7:80:73:43:B7:24:FB:A8:0E
X509v3 Authority Key Identifier:
keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/27WBhhpGCu8KcUXHgHNDtyT7qA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.188.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:2b:36:7f:81:09:6b:03:df:f1:ca:dc:f3:28:bf:f4:92:98:
c2:48:bf:ad:1a:95:e4:f5:df:e6:42:62:db:68:9a:a6:04:d8:
5c:37:01:f7:ff:bc:3c:64:d0:8c:e0:d2:7d:55:55:b3:dc:29:
f6:96:6c:93:9a:2b:a2:48:00:29:eb:3d:31:b3:d4:07:d8:36:
fb:01:c2:5c:71:a5:7c:38:0b:5a:03:40:88:eb:97:85:40:0d:
fe:49:fd:b0:5e:d9:bc:08:3d:82:ef:ec:b3:c9:46:84:86:9a:
29:5e:fb:21:c2:a5:02:0d:0d:87:13:86:ec:89:3a:8b:41:69:
17:49:73:03:be:1d:15:3c:b8:f8:b7:ec:76:79:55:79:a0:75:
c4:3d:74:39:d6:96:48:79:fa:70:70:07:ef:f9:8d:af:85:13:
14:ce:a7:0c:6d:62:92:fe:c2:cf:3c:8a:4e:64:1e:22:4c:c2:
2b:78:1b:1b:0d:14:07:2f:cb:7c:a8:67:b7:e1:d7:47:b0:5e:
1a:f1:20:cf:5c:99:ed:3a:94:7b:0d:d5:8b:61:89:68:cc:6b:
03:c3:a1:6d:1c:02:12:73:a6:74:ba:e8:6a:8c:8a:ac:78:13:
0e:d8:a8:5d:89:f1:3a:ea:6f:38:11:60:06:5e:46:f9:fb:56:
68:5e:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:18 2025 by rpki-client