Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa
File: DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa (raw, json)
Hash identifier: jPCQqOInn6qb0ZqW36PJZt+zluVilNLrZjQ6O21hgVE=
Subject key identifier: 0E:B4:26:06:8D:05:26:5A:C9:A1:53:73:E9:CB:E3:1C:65:C8:3D:BC
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019423699EE568523FFCE7D8F2A32C212572
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 185.192.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9e:e5:68:52:3f:fc:e7:d8:f2:a3:2c:21:25:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eb426068d05265ac9a15373e9cbe31c65c83dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:89:2a:9c:f7:41:8e:b2:5a:b5:d0:cf:a6:
ef:14:80:0f:b8:c4:06:66:b4:ac:00:53:83:0c:48:
2a:0f:af:f3:d3:d2:89:75:6d:31:4d:c3:26:61:df:
c2:fd:1f:e3:3b:02:f3:e2:7a:3f:a2:e9:65:f8:9b:
d8:f5:3b:cc:96:69:7e:d2:6d:a8:f8:be:46:9c:26:
68:45:9d:9b:07:bd:f8:39:a5:f6:92:f6:b7:3c:03:
83:21:23:5d:80:67:fb:ca:dc:0e:54:1d:f3:12:5f:
6c:34:16:f4:74:89:d8:f4:b5:ce:0b:fe:97:5c:84:
3c:0a:e4:b7:db:a1:73:3c:21:ea:a5:53:38:b8:23:
b8:86:1e:91:d2:86:f8:61:30:78:d6:33:06:97:b6:
cf:a5:bc:15:a4:2b:dc:e5:49:8d:cd:50:69:3e:c0:
42:a5:35:b3:6f:e4:83:3f:60:f2:58:6e:8d:14:c1:
f2:40:e8:51:80:65:c5:18:6f:da:69:b2:8d:25:f2:
24:73:9b:e0:9c:1f:0e:a4:38:e7:33:5e:58:f0:bc:
10:eb:72:58:b0:45:b9:01:05:02:9d:3d:2a:40:a8:
75:7b:3d:0f:45:71:0a:c2:be:8f:1a:01:92:7a:4f:
e8:41:da:9f:d6:0c:dc:68:68:ff:88:b5:c1:38:8f:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:26:06:8D:05:26:5A:C9:A1:53:73:E9:CB:E3:1C:65:C8:3D:BC
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/DrQmBo0FJlrJoVNz6cvjHGXIPbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.124.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f3:a6:dd:b0:64:dc:92:ae:87:23:ec:3b:a5:9a:16:75:ac:
7a:53:79:1d:97:0f:45:f7:1d:0c:a6:1a:b2:63:63:35:7e:f3:
d1:2a:0a:c6:f5:f5:4e:78:ba:14:b7:e9:4b:95:95:cf:d9:e3:
5c:b9:9e:18:7e:5c:5c:2a:ff:88:39:fc:f6:60:b3:54:57:1b:
76:b8:86:92:7b:fa:86:97:ac:fa:14:d1:ca:7d:5b:db:64:91:
bf:0a:59:dd:c8:8f:d3:a8:9d:2b:83:a2:ac:36:9b:4b:80:5a:
b0:a4:26:4e:e5:9e:ae:cb:71:1d:bc:cf:48:22:4d:83:cf:4b:
43:06:9c:83:59:5b:48:1b:e9:72:29:fe:21:e1:6a:b1:d8:39:
03:35:4d:f0:1b:46:e8:62:f9:bf:9f:6a:cc:67:74:6f:65:57:
bf:2f:dd:1d:d6:a4:af:a9:33:46:fe:e7:ce:4a:ca:56:bd:9d:
a6:cb:a2:7f:1a:ed:43:ca:7f:39:f9:25:26:b1:67:cb:b2:5a:
ac:1a:b2:e3:eb:75:fa:8a:72:dd:f1:c1:b6:c9:02:86:b2:38:
d8:dc:5d:7f:a9:1c:4c:1a:63:0a:81:60:48:87:68:83:66:e7:
2c:d0:47:19:3b:6b:e5:cc:ff:8a:da:d6:22:95:a0:fc:2b:36:
5f:7a:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:20 2025 by rpki-client