Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/0Q4TTPSEDP2vwJw57Q98mNyLvHY.roa
File: 0Q4TTPSEDP2vwJw57Q98mNyLvHY.roa (raw, json)
Hash identifier: g+tt3wTt25Gy9GiGDu9XZL7vdB+saK0K7FaXmAomO5Y=
Subject key identifier: D1:0E:13:4C:F4:84:0C:FD:AF:C0:9C:39:ED:0F:7C:98:DC:8B:BC:76
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 019424B3BCA0FE310DF485ED26DCB0CAA2E5
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/0Q4TTPSEDP2vwJw57Q98mNyLvHY.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138985
IP address blocks: 185.2.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bc:a0:fe:31:0d:f4:85:ed:26:dc:b0:ca:a2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d10e134cf4840cfdafc09c39ed0f7c98dc8bbc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:06:ca:4d:98:7e:ff:8d:c1:15:85:40:9d:
40:08:2d:f1:92:4b:af:3a:e4:b6:f0:0e:f6:93:c2:
7a:3f:4c:75:9d:37:23:18:0e:18:68:a4:aa:a4:ba:
69:e8:c1:23:3e:f9:22:b6:0e:32:6a:f5:f7:1c:5a:
b0:65:32:89:9c:67:94:78:02:b7:b0:2d:8f:6e:83:
64:46:9d:21:16:91:15:db:27:af:70:c9:10:11:cc:
82:af:88:1a:67:b0:8d:2f:a2:61:06:f2:8c:27:47:
d5:64:8b:7c:8b:de:ac:0e:17:e8:73:38:fe:0b:d9:
be:ad:b1:88:bf:29:d1:b4:dc:f5:2c:01:df:1d:3f:
a0:aa:97:1e:43:9c:8b:1c:a3:50:9b:03:ce:a2:71:
3f:fb:7d:fc:ea:6b:77:d2:84:3d:51:19:15:9d:6a:
7e:9c:d5:bf:33:f4:ac:dd:dd:c5:85:25:3a:7e:11:
5e:65:ba:bb:1d:6c:dd:49:1f:70:e2:ff:19:b2:20:
16:c0:3e:d5:ee:03:22:a5:75:61:b2:7d:32:60:cb:
f8:e4:a3:a5:ed:61:91:73:f6:9a:1b:8d:3e:00:92:
a0:ea:ac:78:10:6f:1e:eb:a4:87:15:39:35:25:f0:
15:e5:07:fe:1c:63:71:4f:cb:6c:8f:f6:81:ea:19:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0E:13:4C:F4:84:0C:FD:AF:C0:9C:39:ED:0F:7C:98:DC:8B:BC:76
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/0Q4TTPSEDP2vwJw57Q98mNyLvHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:db:a7:8c:fa:b4:85:0f:7a:f7:1f:3c:14:c5:e3:b6:98:2a:
0a:87:7f:58:dd:8a:b9:b2:7d:06:0c:d9:39:83:57:95:74:6b:
65:de:38:91:15:55:ad:f5:a5:d1:dd:91:c8:65:4c:da:a9:a3:
0c:5f:e7:10:b0:71:c1:71:32:aa:97:00:c3:71:e3:24:69:72:
1b:d6:4e:9c:34:29:8b:6a:86:c6:0d:db:3f:ea:e4:e6:d8:47:
ae:47:e7:b6:dd:7b:1b:ff:15:20:93:d7:74:68:1c:52:d5:b6:
91:cb:30:a2:26:59:74:8e:27:81:41:02:ea:ab:93:91:96:1d:
88:1c:a1:44:46:82:34:45:f1:8f:f1:8f:87:5a:23:eb:a9:44:
d7:97:d3:22:a0:49:3c:89:e2:97:ad:fe:79:e5:16:f7:c6:4d:
35:98:76:eb:2b:33:c0:3a:f6:9c:ef:3e:ea:39:b4:f1:41:54:
25:9e:34:64:50:c0:cc:a2:c0:80:ee:56:c3:e8:34:f0:8d:e7:
7c:d6:10:0a:05:67:f9:e0:51:2e:b1:3b:80:c5:39:79:b7:87:
1b:11:a0:a7:91:91:8e:b1:71:47:01:7e:ed:4a:7f:86:a4:ee:
98:a9:bc:96:c2:6a:40:2d:d6:09:ee:1b:45:c2:11:20:98:c1:
a1:5a:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:56:08 2025 by rpki-client