Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa
File: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (raw, json)
Hash identifier: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=
Subject key identifier: 0C:60:31:7F:1F:26:81:BD:CB:55:63:25:D8:4B:FC:6D:B3:C3:7B:C4
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019421B1C881AF33E373E0FECD069960467B
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34769
IP address blocks: 85.94.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c8:81:af:33:e3:73:e0:fe:cd:06:99:60:46:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c60317f1f2681bdcb556325d84bfc6db3c37bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:99:2a:d8:b0:c6:71:1d:24:95:19:23:ad:
fe:34:fa:c7:1b:e1:30:55:fb:9b:84:fb:20:fb:b3:
d5:f4:09:35:03:3e:5d:cf:91:3d:e7:cb:ef:f5:a5:
e9:36:cf:3d:81:6c:e9:1d:8a:3e:3c:e4:54:72:81:
20:eb:4d:30:30:1a:8f:02:e8:fd:51:67:83:a9:55:
a5:dc:e4:8a:e8:f9:b7:04:98:7c:56:a4:86:37:44:
fa:16:80:a1:de:10:9f:eb:5d:23:d6:08:9f:04:af:
cc:8a:8b:21:95:7a:5c:85:46:d5:c7:99:00:ef:5f:
45:74:e4:e2:a4:a2:29:33:b6:27:92:03:f2:ee:0e:
6d:6b:ac:68:c7:06:ef:d9:79:c4:52:bf:41:cf:46:
e8:db:68:3d:fe:b3:a0:e3:f2:df:8c:b7:a9:3d:5f:
78:14:af:ea:5e:d0:5e:9c:d9:af:b6:a9:40:1d:cd:
26:5d:bd:04:a1:d2:c8:50:9b:16:72:d6:64:0c:c1:
e4:b0:11:bd:27:33:6c:11:72:f8:76:fe:d0:89:ba:
7b:2f:78:20:f4:00:19:fe:00:c9:59:5e:bd:fa:3f:
81:91:0f:1d:b6:1d:0c:de:1b:c0:4c:5c:f2:94:34:
a8:42:7f:95:40:88:52:8f:b5:9c:b9:b7:3d:4e:6a:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:60:31:7F:1F:26:81:BD:CB:55:63:25:D8:4B:FC:6D:B3:C3:7B:C4
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.94.224.0/24
Signature Algorithm: sha256WithRSAEncryption
58:28:b9:4c:a1:93:bb:bc:4d:3d:fb:26:20:f7:04:bc:fb:70:
de:38:3f:1e:ef:07:8a:d0:2e:8f:84:39:c2:64:80:58:e3:94:
b6:80:af:48:65:56:ba:41:b1:96:63:b0:9d:09:dd:de:27:8e:
da:1c:50:7d:5c:bc:28:10:9c:4e:fd:3a:70:8e:63:25:6e:38:
66:dc:8d:5a:e3:99:18:47:8d:bf:40:c5:87:00:9e:dc:3b:f0:
2d:68:12:80:53:22:fd:c0:5d:ba:ef:9b:37:88:f1:85:8f:24:
59:1e:b6:42:7c:f4:26:40:83:72:37:71:d0:a9:76:c8:72:99:
68:ff:59:a6:88:ae:1d:c4:de:50:7c:ea:02:fd:f4:b4:fa:bc:
e9:e9:71:4d:5f:17:0f:ae:0b:ed:fa:4b:72:68:f4:dd:3b:8c:
8e:d1:09:9a:9b:6d:38:fd:06:d0:f6:43:98:e5:ed:9d:89:89:
b1:c9:ef:5d:69:66:ec:f0:0f:da:c6:f6:3a:84:c8:17:0b:1a:
a4:c4:0f:7d:5c:0a:f2:ae:0e:6c:cb:69:2e:ec:cd:77:27:b1:
dd:16:45:3d:bc:ed:84:13:37:d4:e9:4a:91:81:da:81:fe:e8:
bb:3f:e8:ab:4f:3d:f2:47:98:a5:f9:7f:90:7a:ff:75:c9:84:
86:aa:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:33:24 2025 by rpki-client