Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/fKSs4hH9Txh8Zlj65oG1tsFnMhc.roa
File: fKSs4hH9Txh8Zlj65oG1tsFnMhc.roa (raw, json)
Hash identifier: spRUtws11ycMpOdqPxogpwVFrj1ssSP4E3wT9grjXjM=
Subject key identifier: 7C:A4:AC:E2:11:FD:4F:18:7C:66:58:FA:E6:81:B5:B6:C1:67:32:17
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 019421B256C99BB0E9D353B759C0A3DCE734
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/fKSs4hH9Txh8Zlj65oG1tsFnMhc.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201811
IP address blocks: 185.159.89.0/24 maxlen: 24
2a02:5e80:fffa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:56:c9:9b:b0:e9:d3:53:b7:59:c0:a3:dc:e7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ca4ace211fd4f187c6658fae681b5b6c1673217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:0b:dc:12:a2:6d:a6:9b:89:52:e0:4d:82:
24:a8:3a:44:a9:eb:7e:f3:2a:74:fc:03:42:11:40:
0c:11:f3:54:f2:fa:c9:ae:f3:71:61:09:af:ed:6a:
b2:54:5b:26:35:ed:79:c2:81:42:04:89:01:89:dc:
48:36:8d:08:e4:d2:cf:29:fc:39:51:b1:7d:c9:f2:
db:e2:a7:e5:6b:d6:bd:4c:09:e0:97:d9:c8:4d:49:
35:b7:8a:9d:76:d5:61:e4:ea:7c:1d:13:f6:84:76:
d4:cb:7c:f9:65:d4:5c:3d:be:18:13:8f:f2:95:60:
cd:41:3e:e5:f8:d5:ab:78:f6:ef:62:d5:77:fe:c4:
22:28:d6:45:a1:1c:e0:ab:47:2b:e3:0a:16:82:95:
d6:eb:8d:6e:c8:bb:f5:e8:09:07:fa:2e:19:95:a8:
23:c9:bc:6c:b7:87:08:fd:5b:e6:35:53:91:04:48:
2d:c0:e1:af:c9:c1:43:ef:05:31:4c:9c:0b:20:bb:
a7:9c:c5:2b:77:68:5e:ac:af:9d:c0:9e:fc:7d:71:
4e:b2:ad:f2:fb:25:02:82:b3:63:ef:0a:49:59:bb:
62:75:3c:c6:2e:e0:41:57:46:4c:91:b3:85:e5:96:
22:7b:b2:78:d2:67:c1:43:07:9f:6a:d7:39:bb:95:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A4:AC:E2:11:FD:4F:18:7C:66:58:FA:E6:81:B5:B6:C1:67:32:17
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/fKSs4hH9Txh8Zlj65oG1tsFnMhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.89.0/24
IPv6:
2a02:5e80:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
35:f2:f3:4f:8e:e1:cb:38:25:9d:49:91:44:cc:9e:04:0b:0b:
c4:61:e8:41:98:1e:2b:af:9e:bf:ad:4e:98:16:51:c9:af:ac:
fe:98:7b:dd:4f:2e:43:e2:ea:c8:1e:32:59:09:0d:ae:e5:9f:
3b:6d:47:08:25:37:fa:6e:da:98:c5:8c:45:99:94:95:83:8e:
71:0d:c0:da:ee:6e:e9:c6:21:3b:f9:44:1b:af:24:c0:82:21:
5f:b4:e3:53:ad:bb:8c:09:6f:46:07:37:93:10:89:e8:46:d8:
4d:39:c9:df:64:3f:fb:fb:5b:69:b8:36:39:87:c3:1c:a4:54:
ca:1f:ab:3a:b2:23:fc:65:75:e7:61:48:85:fd:47:28:fa:59:
45:3c:74:03:ab:fd:06:96:e1:12:d1:e3:b1:38:4f:5d:c6:73:
38:bb:66:18:b9:ee:65:80:4a:e0:f1:04:60:80:0c:67:7b:fc:
30:8c:10:5c:e1:1d:e4:10:98:84:ff:1b:96:88:ba:8c:2e:9a:
1c:39:0e:4b:ab:12:97:49:85:c0:1f:da:42:d9:e5:3f:c3:f8:
c4:9a:82:24:1a:73:76:57:19:f3:f0:6f:91:8b:97:72:44:4d:
56:5a:43:92:bb:a4:25:d0:55:3a:62:3b:45:83:74:dd:96:b9:
b8:f3:c4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:55 2025 by rpki-client