Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/4aaliOpCta1xxwdPdgm9XgmQVe4.roa
File: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (raw, json)
Hash identifier: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=
Subject key identifier: E1:A6:A5:88:EA:42:B5:AD:71:C7:07:4F:76:09:BD:5E:09:90:55:EE
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0194228DEA699BA17DBFF8889F8E476C7C93
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/4aaliOpCta1xxwdPdgm9XgmQVe4.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147003
IP address blocks: 185.113.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ea:69:9b:a1:7d:bf:f8:88:9f:8e:47:6c:7c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1a6a588ea42b5ad71c7074f7609bd5e099055ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:b8:dd:1b:57:85:28:4e:a0:f5:71:b5:45:
3b:4d:16:9d:5c:d5:17:84:e3:b9:88:75:4c:2b:4e:
dc:71:6b:a5:e5:32:cf:10:a0:44:99:b1:15:06:bf:
b9:5a:2d:64:a4:92:6d:5b:36:e4:3c:3b:93:fa:18:
1a:a1:f8:31:8f:ee:e1:99:c5:34:5e:98:7c:51:76:
42:ac:6b:01:ec:96:dd:b3:1e:ef:26:31:ad:f7:0d:
eb:35:95:eb:ca:99:7f:0f:e7:71:41:53:8f:f0:42:
60:13:41:11:a4:8c:5a:3f:43:af:91:f7:b9:7e:ea:
85:e8:ce:2f:37:41:71:e4:6d:2e:0f:72:fa:fc:47:
4a:e1:35:53:da:2f:46:ea:dd:a4:65:c7:bb:6b:8a:
18:ac:e6:94:8b:b4:04:79:50:f4:b3:10:33:30:5c:
a8:dd:80:3c:16:14:60:6a:ad:b6:f5:e1:d3:2a:1f:
58:c5:99:81:bf:71:38:7f:3c:57:91:5d:80:df:64:
48:70:31:3e:99:bb:f6:cc:02:a7:11:06:f3:10:7c:
27:87:20:28:3d:16:25:f9:5e:9f:74:ef:a6:3a:f3:
0e:5b:30:71:f5:77:20:c4:75:d9:a8:5c:9e:24:62:
85:44:6c:2f:9e:b8:ab:15:92:4a:da:70:58:98:62:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A6:A5:88:EA:42:B5:AD:71:C7:07:4F:76:09:BD:5E:09:90:55:EE
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/4aaliOpCta1xxwdPdgm9XgmQVe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
Signature Algorithm: sha256WithRSAEncryption
41:8d:f1:be:87:dc:f9:1a:09:29:35:f9:48:0a:74:24:9a:03:
39:e4:e3:69:72:f8:26:3e:07:79:ea:82:96:af:e7:aa:65:5b:
42:4f:03:24:bb:6f:50:f2:62:74:6d:32:04:da:8f:1b:36:12:
63:16:b3:c0:98:b0:ac:4b:d1:5d:15:af:16:94:08:a5:8b:12:
09:5d:a7:68:5b:80:b4:d1:aa:4e:97:e3:06:72:b2:0a:6c:ee:
83:74:56:57:2f:d9:1e:0c:b2:5b:09:17:b7:90:9b:0c:34:bc:
49:c5:18:08:a2:6c:c9:64:dc:c8:19:c0:6f:cc:50:17:04:05:
8e:3e:52:ea:03:43:df:00:d6:7c:db:4d:10:f5:2a:93:71:d5:
50:c3:ae:4b:36:4a:17:01:7d:0b:6c:b8:46:2d:e1:b4:2e:e7:
9b:2f:b5:7e:40:ca:03:b6:64:56:f0:39:83:da:2d:b2:50:49:
95:7d:35:a0:18:f8:20:a8:02:c8:a8:67:fe:eb:e6:6a:85:67:
8a:93:76:a1:39:e1:a8:34:03:05:3e:6b:45:c1:61:43:08:c5:
41:0a:43:bb:c3:1a:a1:4d:be:fe:3b:70:2f:2e:26:64:c0:b8:
16:2f:41:90:37:f4:d2:4b:8a:3b:61:49:9b:7a:8d:97:e1:82:
e7:89:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:32 2025 by rpki-client