Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/ThulFZ8R9xpzNZdDBqkxoRYsRek.roa
File: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (raw, json)
Hash identifier: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=
Subject key identifier: 4E:1B:A5:15:9F:11:F7:1A:73:35:97:43:06:A9:31:A1:16:2C:45:E9
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 01941FFA2CB865571447F1E7630AAE6359CA
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/ThulFZ8R9xpzNZdDBqkxoRYsRek.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201703
IP address blocks: 185.206.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2c:b8:65:57:14:47:f1:e7:63:0a:ae:63:59:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e1ba5159f11f71a7335974306a931a1162c45e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:60:93:9a:ed:95:f3:f8:ea:e9:93:04:35:
08:e2:87:d5:8b:ca:46:53:60:7d:81:2b:34:7d:3d:
66:1e:eb:e9:c2:29:7e:cc:8e:b0:45:2f:2b:b1:d2:
f8:a8:0d:a5:8a:fb:b2:0b:04:22:b3:57:6e:30:69:
e7:36:ee:4b:59:33:a1:5e:7c:6e:89:ba:83:c4:15:
c3:87:5e:44:44:98:4c:48:6d:c1:fc:ea:d3:1e:89:
76:fc:e3:3a:a3:8c:57:b3:ec:e7:da:06:cc:70:71:
2e:63:75:86:6c:1d:14:9b:5c:cf:61:a5:04:b6:1a:
1f:b0:b0:90:63:5c:ce:71:09:b9:57:c3:61:09:5a:
33:e8:62:39:c6:fd:cf:74:a8:f3:8d:c7:23:78:62:
45:72:1b:ac:23:39:41:3d:54:90:1e:b5:f5:62:e0:
af:7d:33:51:9e:5d:46:af:cc:38:c6:40:a1:d1:8d:
f1:7f:ce:bb:b6:bf:a7:8c:eb:bc:fc:30:2c:f0:f0:
c1:1e:96:bb:57:df:f3:05:c6:68:1e:2b:47:09:fa:
62:cb:be:b7:46:af:60:55:e2:ff:0e:e5:8b:8d:12:
f1:4e:6c:c3:44:ec:a7:eb:4c:27:d3:1d:56:20:17:
13:04:37:57:e4:06:7e:f1:79:d6:74:7a:c4:02:75:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1B:A5:15:9F:11:F7:1A:73:35:97:43:06:A9:31:A1:16:2C:45:E9
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/ThulFZ8R9xpzNZdDBqkxoRYsRek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f8:a2:a2:2d:66:84:1b:09:c7:66:01:52:e5:cc:a8:bb:7a:
3f:23:84:01:98:56:d7:86:f4:b7:88:ae:cc:a6:1f:52:f2:51:
c1:d2:9f:87:cf:0c:b6:24:fb:f2:55:21:ad:3f:e3:57:eb:a8:
24:01:a4:d9:70:88:64:c8:10:80:26:74:d2:fe:82:6e:d9:38:
46:af:6e:b6:b9:f4:02:89:a4:40:82:2a:69:4f:f3:98:0c:c2:
f7:31:94:e4:c0:5f:c3:e4:64:7d:5e:79:29:d0:37:8f:4f:42:
a4:94:86:d1:fe:7d:10:f8:4e:b0:75:85:96:3f:ac:fe:c9:f2:
ca:cf:d8:f2:ae:c6:07:73:5c:f3:7a:ce:a1:70:f7:bb:5c:b1:
20:76:a2:a8:b4:7d:a5:43:a4:db:11:b7:e2:46:b3:b6:62:aa:
0c:57:27:ae:b0:c6:dc:94:85:3c:6b:6c:a6:a1:4a:8b:97:ae:
47:2a:17:d5:39:20:98:15:bc:dc:f2:bf:50:61:ca:1e:a2:f3:
78:8f:ca:5c:65:18:31:01:6c:a4:94:e5:64:da:52:46:09:f8:
a4:22:6b:72:1b:54:25:53:3e:02:c3:8e:37:fe:d4:c1:2c:e8:
cd:98:19:4e:d4:0c:0c:9a:51:b2:a2:d0:af:3c:ed:f4:c4:8a:
d4:29:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:20:37 2025 by rpki-client