Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/AsYD6hoeMD1Ii3ouRsCjixk0isY.roa
File: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (raw, json)
Hash identifier: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=
Subject key identifier: 02:C6:03:EA:1A:1E:30:3D:48:8B:7A:2E:46:C0:A3:8B:19:34:8A:C6
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 019421441CA1FB6A3276C7FE43A3382B5A4A
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/AsYD6hoeMD1Ii3ouRsCjixk0isY.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 185.112.244.0/24 maxlen: 24
185.112.245.0/24 maxlen: 24
185.112.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1c:a1:fb:6a:32:76:c7:fe:43:a3:38:2b:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02c603ea1a1e303d488b7a2e46c0a38b19348ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:f1:59:a9:85:08:fa:7b:05:10:1e:34:a8:
3a:59:4a:bd:9a:bc:6b:7d:b9:bc:58:65:55:44:ca:
93:92:2d:1c:09:87:ad:b8:8d:a4:f1:34:92:ea:e7:
c2:29:6f:9b:e3:15:04:f0:c8:59:fd:bb:8d:cc:96:
6b:43:c6:73:de:b0:70:f4:41:11:a9:55:71:1a:f0:
f1:1b:41:9e:8b:12:82:09:06:14:08:76:6a:4c:e0:
df:ef:2e:6b:64:ea:bf:02:c8:6e:a9:f8:75:dc:7a:
94:fd:00:96:a3:24:b7:82:e1:b4:f5:e1:85:ae:d3:
ed:68:93:54:54:20:bf:ec:11:cc:b3:fe:f0:f1:90:
23:ff:63:40:8c:b6:36:f6:87:80:9f:ff:0c:33:69:
0c:e5:d5:e1:ca:a6:39:7f:a8:a3:a9:d4:2f:1d:79:
4f:44:6e:dd:d9:58:53:2d:e6:69:34:19:f2:6e:d9:
e6:97:7e:79:ad:79:1b:bf:d2:24:1e:e9:9a:41:5c:
36:0a:85:b3:95:94:c8:9d:53:23:a8:15:c4:33:47:
34:13:67:a0:25:e1:ee:95:92:99:10:9c:75:f1:22:
07:a8:0b:e1:7d:5e:33:d9:99:7b:97:0a:e4:54:aa:
87:54:40:3e:e8:22:2c:c1:c0:c5:66:70:20:05:6c:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:03:EA:1A:1E:30:3D:48:8B:7A:2E:46:C0:A3:8B:19:34:8A:C6
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/AsYD6hoeMD1Ii3ouRsCjixk0isY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.244.0-185.112.246.255
Signature Algorithm: sha256WithRSAEncryption
65:ae:84:ab:1e:13:c1:70:dd:65:31:a2:3f:d2:e9:f3:55:1b:
4f:5e:7e:41:a3:54:78:2c:5f:cd:49:87:77:23:81:98:17:1b:
74:24:c2:37:36:06:84:0d:6b:07:ed:2f:86:e3:d4:bc:b4:02:
65:9c:1f:66:c0:64:36:ee:b7:ba:81:c1:c5:d7:7a:34:84:67:
d5:74:0e:d9:2e:c6:e0:2a:30:f3:ca:b4:46:f1:a0:9b:54:13:
d2:eb:5d:ab:50:3a:69:34:83:b7:c3:56:e6:29:91:1c:8a:19:
a9:88:11:b9:36:4e:ce:3e:c4:80:0e:b8:de:f9:af:55:36:a2:
19:dd:74:b8:42:01:15:bf:9d:93:f0:bb:e0:e7:54:9e:0c:7d:
66:5c:df:0c:ef:c8:b0:9a:f4:28:b1:c5:0a:1d:15:0f:72:40:
4b:a0:e8:b1:84:b6:f3:17:ab:98:af:c8:94:24:22:78:9a:0b:
77:71:5e:0a:35:8e:ab:8e:61:2b:f1:3e:fb:aa:05:95:77:07:
42:56:fd:bd:de:ec:40:a0:ab:f5:b4:14:44:3e:b7:16:95:ff:
24:16:e4:ba:e6:f5:0e:48:cd:26:76:33:cf:ee:81:47:d9:52:
bc:df:78:e1:a5:69:f6:0a:6d:9b:92:29:94:b6:f7:26:84:f9:
c1:5b:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:38 2025 by rpki-client