Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa
File: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (raw, json)
Hash identifier: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=
Subject key identifier: 2F:F2:F7:F1:D2:BD:82:7E:89:AA:93:4C:31:9C:4F:16:B5:01:7B:76
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01942445A33A754B2B3929216C6E12B43B49
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58119
IP address blocks: 185.220.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a3:3a:75:4b:2b:39:29:21:6c:6e:12:b4:3b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff2f7f1d2bd827e89aa934c319c4f16b5017b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:a8:3a:80:de:b3:85:54:fd:8c:6e:a3:26:
06:b5:2f:c2:be:85:8b:6f:f5:d4:51:55:a3:46:9d:
56:2b:a5:44:b9:3e:ab:14:c8:e5:04:45:57:d5:09:
76:cb:86:1a:51:59:f5:b3:25:27:d7:51:81:c3:91:
9a:7f:9c:2a:9f:15:a4:54:a7:5d:7d:34:e7:88:05:
cc:b4:ab:ee:4b:6d:70:6c:fd:bc:61:ef:c8:de:e6:
66:22:56:7a:1b:e3:0f:c4:03:44:1a:91:4d:67:ae:
d8:b7:8e:e5:01:77:38:77:4e:cd:a0:5a:b5:be:61:
27:58:87:05:94:b4:fe:bf:36:dd:cf:2f:c5:85:b2:
4e:8b:56:5e:6b:ad:1e:5d:63:68:e2:f3:ae:86:32:
86:92:1e:e1:85:33:d5:4e:d4:c5:a2:ce:e5:70:e9:
00:3a:a7:5f:10:5e:9d:f3:bb:80:5b:31:d1:9a:11:
ca:59:d8:f8:be:cf:e9:1f:14:c7:bc:05:42:9b:a6:
65:0f:69:9a:bc:f6:e6:fe:69:36:44:d2:31:ee:6c:
41:92:aa:08:3b:25:01:ec:eb:cb:fc:b0:1f:7f:bc:
21:5c:9a:7a:79:b6:fa:6d:d4:bb:56:d9:e1:c6:01:
2b:64:8e:32:ef:17:84:1a:53:b7:6c:fa:d2:84:a2:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:F7:F1:D2:BD:82:7E:89:AA:93:4C:31:9C:4F:16:B5:01:7B:76
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9f:ef:2f:e4:a0:dc:de:1b:05:3d:3a:84:7f:b4:7d:4a:10:
83:33:59:88:15:4c:de:f1:90:1a:0e:7d:a7:1b:8f:dd:44:44:
b2:20:12:f9:9c:4e:a7:e3:69:16:38:76:bf:ae:ab:c0:29:cf:
12:82:b3:ff:cf:ae:17:ab:60:b2:bb:23:06:4f:19:7e:3a:78:
1e:7b:b9:af:67:4e:94:ba:cc:90:83:ac:14:bf:df:d4:1c:f0:
a2:1b:9e:ef:80:23:e6:4d:93:07:79:94:b3:c0:ce:74:9e:1a:
f2:f3:af:e5:32:2c:bd:84:77:80:82:d7:bd:a6:c6:ee:cd:2f:
e1:9e:8c:c0:6e:f4:2b:0d:84:a7:c6:b9:1e:c6:ac:8d:8d:de:
cf:20:7f:5e:c3:7b:4e:71:b4:d3:15:a4:ef:19:af:a2:79:48:
16:d8:53:be:33:5e:bc:93:ea:6e:28:56:c9:b6:61:a3:32:c0:
2e:56:b9:89:c0:4b:d4:e4:e4:f9:4c:eb:ec:62:69:6f:6f:9b:
54:e1:e5:3f:00:58:77:77:99:aa:f9:11:3c:99:0c:c7:4e:7f:
fc:29:d8:22:8a:07:4b:0f:27:7e:c5:13:ed:16:bd:63:35:cb:
fd:24:19:75:95:81:50:61:d8:1a:a6:fa:73:08:65:45:42:27:
6b:2d:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:17 2025 by rpki-client