Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/bS8D5tTeBAXDkMQSy-j-MAcdPro.roa
File: bS8D5tTeBAXDkMQSy-j-MAcdPro.roa (raw, json)
Hash identifier: R+yA1y5Nb8S44doc/dttKyd8pVatx4WMIyAI41rpB+c=
Subject key identifier: 6D:2F:03:E6:D4:DE:04:05:C3:90:C4:12:CB:E8:FE:30:07:1D:3E:BA
Certificate issuer: /CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Certificate serial: 019421B178344FC434C52219298D8BCE8FD7
Authority key identifier: 39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/bS8D5tTeBAXDkMQSy-j-MAcdPro.roa
Signing time: Wed 01 Jan 2025 11:47:46 +0000
ROA not before: Wed 01 Jan 2025 11:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206101
IP address blocks: 185.196.112.0/24 maxlen: 24
185.196.113.0/24 maxlen: 24
185.196.114.0/24 maxlen: 24
185.196.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:78:34:4f:c4:34:c5:22:19:29:8d:8b:ce:8f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976e6ab084c9eeede86e2af6bde7215274b95a7
Validity
Not Before: Jan 1 11:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d2f03e6d4de0405c390c412cbe8fe30071d3eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:5d:88:da:cb:23:62:40:ff:7b:ac:97:3b:
a8:42:c7:20:6f:ea:49:7e:73:e1:de:de:56:20:73:
8d:9e:7f:f1:4d:23:50:de:3d:be:1d:2e:13:89:66:
fb:5e:94:2c:dc:1e:2d:8e:8d:59:dc:6d:bb:fa:35:
9a:96:df:25:1a:3a:67:b6:5e:d3:7f:73:93:23:cf:
53:94:cd:29:df:aa:f4:17:b8:f0:58:83:04:7d:be:
75:71:1c:6c:34:85:84:a5:55:e6:53:c0:eb:50:93:
d5:8a:2d:71:3e:7a:69:55:29:79:de:04:00:6d:a1:
31:f5:33:c0:a1:40:1d:ed:0f:30:52:9d:94:03:64:
df:6e:84:da:0b:09:64:3b:73:22:8f:d0:33:21:54:
cd:1d:f2:62:1d:8f:52:ea:83:25:71:55:bd:20:29:
61:26:88:55:5e:ba:b3:88:cf:10:8e:b3:f3:3e:17:
cf:9b:a2:26:e2:68:e2:e6:13:2e:4c:13:73:8b:db:
2c:01:41:8a:25:9f:93:79:48:46:71:24:19:13:e5:
15:fc:de:58:44:ad:2b:4a:44:0a:14:ee:ac:77:c3:
ea:76:13:f0:ee:e5:a1:76:f1:bf:9b:bd:0b:d5:fd:
f9:d5:2a:df:23:13:bf:ec:50:78:c3:fd:8f:7d:f8:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:03:E6:D4:DE:04:05:C3:90:C4:12:CB:E8:FE:30:07:1D:3E:BA
X509v3 Authority Key Identifier:
keyid:39:76:E6:AB:08:4C:9E:EE:DE:86:E2:AF:6B:DE:72:15:27:4B:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXbmqwhMnu7ehuKva95yFSdLlac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/bS8D5tTeBAXDkMQSy-j-MAcdPro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7029cc-d331-4606-889c-d66674cfa424/1/OXbmqwhMnu7ehuKva95yFSdLlac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.112.0/22
Signature Algorithm: sha256WithRSAEncryption
13:3a:5d:6f:d4:4a:77:8e:b3:d7:89:ff:a5:a8:ce:de:42:89:
e2:37:db:5d:a5:b2:67:81:6b:97:ef:09:e7:07:b4:aa:27:5f:
d2:61:64:85:4e:59:2f:1f:ff:06:14:f6:de:2e:4d:11:17:b1:
77:45:c9:a8:c5:28:09:e3:69:05:81:a9:7d:0f:b5:a7:90:0c:
4c:a5:17:a0:d7:59:4e:95:a1:ff:a7:92:8b:0d:42:1b:e9:b6:
4b:13:ff:21:84:8c:c8:e2:ab:40:be:1a:d2:51:e6:e5:d8:89:
95:70:ea:6f:8f:97:c5:83:3f:e5:c2:e8:fb:9c:b2:90:1f:16:
bb:d4:f7:a2:3f:a0:78:65:49:5b:3f:51:74:39:10:d3:0c:d7:
e2:d4:a4:6f:01:f3:c0:ee:2c:58:0d:8b:e4:39:29:79:1f:7d:
cb:13:fe:24:10:06:ae:a0:77:9d:15:c7:47:c3:3a:4e:95:06:
53:29:36:d8:31:fe:6b:57:db:e6:6f:47:a1:0a:36:89:b5:d4:
e7:73:4c:04:62:d3:a7:9e:bd:b0:ce:05:5b:80:98:62:d1:32:
fe:32:1d:a4:77:21:5c:9e:dc:be:f9:22:3f:81:71:37:47:62:
18:17:30:be:04:d1:4d:53:df:40:23:8b:ab:d9:29:17:58:03:
70:1c:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:00 2025 by rpki-client