Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/zUnV9ug3DC1aZ-iIErb5v566M9c.roa
File: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (raw, json)
Hash identifier: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=
Subject key identifier: CD:49:D5:F6:E8:37:0C:2D:5A:67:E8:88:12:B6:F9:BF:9E:BA:33:D7
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 01941FFA16F4F424276617FFCA34E5970DB3
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/zUnV9ug3DC1aZ-iIErb5v566M9c.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3215
IP address blocks: 185.217.244.0/24 maxlen: 24
185.217.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:16:f4:f4:24:27:66:17:ff:ca:34:e5:97:0d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd49d5f6e8370c2d5a67e88812b6f9bf9eba33d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:3d:76:c3:03:13:fb:39:49:39:58:54:65:
c1:60:1a:7a:e7:91:28:e0:53:ec:f2:93:ea:55:97:
b4:de:32:29:5a:89:ff:5e:5d:db:bf:6c:63:bd:15:
82:28:79:ec:c1:e6:9d:f9:ec:37:81:15:e0:38:df:
6b:24:47:08:c7:0e:4f:bd:86:a2:99:e2:cb:26:30:
05:62:5a:96:15:23:ad:d2:07:35:2e:a0:3c:cb:e6:
2f:42:8f:17:40:3a:91:fb:4f:03:b6:d2:bd:18:2e:
24:e7:a4:91:b4:a4:e4:75:e3:e7:4c:2b:a3:ba:13:
7a:be:77:0e:67:7c:c1:fd:23:1a:aa:58:62:99:b6:
ed:09:64:b8:d4:92:cb:87:20:01:bb:b7:f8:ea:4d:
f5:34:11:64:be:2a:a1:e1:49:f1:61:0c:4e:e1:b2:
e5:6b:51:e6:c7:f0:04:5e:8c:02:47:c2:44:f7:0d:
a1:92:4a:9f:12:a3:b2:ba:d4:00:1f:53:f6:4d:03:
86:6b:f4:c9:a0:3c:1c:dd:23:9e:9d:4a:e2:da:e8:
6f:e2:9a:9c:63:49:aa:ce:21:fb:f9:45:25:8c:79:
6f:68:9b:34:ae:45:d9:45:71:2a:8f:de:c8:c0:de:
15:5f:39:f2:b5:18:f5:00:5b:78:ca:2f:0c:25:13:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:D5:F6:E8:37:0C:2D:5A:67:E8:88:12:B6:F9:BF:9E:BA:33:D7
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/zUnV9ug3DC1aZ-iIErb5v566M9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.244.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:89:f8:64:2c:a7:2c:93:41:19:18:ff:59:31:66:4f:04:bd:
3e:90:60:74:c3:e1:9a:47:c4:f1:d4:2f:99:c3:59:d6:dc:56:
68:1c:94:84:dc:42:c4:83:8b:d6:57:fe:20:74:78:ce:1e:70:
45:9c:de:74:8f:52:b2:3e:ac:a2:98:44:72:67:99:8f:aa:4c:
50:07:b8:dc:16:9f:aa:3d:63:2d:cf:b7:af:b1:7c:ad:06:b6:
25:70:d3:b5:b4:c0:ea:e1:29:13:ab:76:bd:d4:03:5b:3f:74:
d7:4e:36:a5:7f:6d:a7:8c:06:1f:bf:8d:f9:5e:ce:31:a1:ca:
d4:7b:52:ee:f7:d6:cc:ac:11:7b:34:9b:50:91:eb:34:f9:fa:
ad:26:2d:56:56:6b:c6:a2:a3:c4:d2:59:de:cd:1f:8e:a7:1b:
40:4e:2a:40:fe:b1:e3:eb:2d:01:fa:cf:4c:ac:2d:82:9b:19:
9e:d4:09:8c:e2:12:b1:f7:02:bc:82:2a:33:4f:f9:7e:a6:d1:
35:f2:4c:be:cd:cd:50:53:32:29:ff:ed:04:67:1f:9c:36:62:
e7:cb:dd:59:fb:d8:9e:9e:82:5b:db:ba:7d:ad:67:a5:f6:fd:
2a:ca:ef:59:a5:06:64:a4:e4:09:82:b7:26:4e:d8:5e:15:ac:
b4:9d:74:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:21:29 2025 by rpki-client