Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4lwNzatKmqF16jXE2RboliaaBOg.roa
File: 4lwNzatKmqF16jXE2RboliaaBOg.roa (raw, json)
Hash identifier: 7QT8EOv/ip/bGdJfZbACVN310rFSKwr+8vpjKZnGO28=
Subject key identifier: E2:5C:0D:CD:AB:4A:9A:A1:75:EA:35:C4:D9:16:E8:96:26:9A:04:E8
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01954339E7E2704DDE3ABB7F2EEF84FC5478
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4lwNzatKmqF16jXE2RboliaaBOg.roa
Signing time: Wed 26 Feb 2025 17:07:03 +0000
ROA not before: Wed 26 Feb 2025 17:07:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56915
IP address blocks: 185.192.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:39:e7:e2:70:4d:de:3a:bb:7f:2e:ef:84:fc:54:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 26 17:07:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25c0dcdab4a9aa175ea35c4d916e896269a04e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:cf:70:d4:f6:5b:05:75:6c:27:4b:0f:48:
93:fc:9d:6c:b1:5d:6a:46:33:24:cf:62:c5:8f:7c:
a0:c3:34:cc:53:25:2e:aa:46:76:88:0e:12:14:3a:
fe:2c:df:1d:3d:29:5b:4d:a5:ec:86:81:00:6f:ea:
d5:57:23:29:31:8e:1c:0c:c7:d1:61:d2:29:67:03:
10:79:f9:b9:4f:13:df:ff:c7:96:dd:5d:af:5f:f3:
d0:ff:c6:48:80:21:8c:6b:cb:45:a9:75:7f:c5:3f:
a0:3b:7b:93:24:fd:a7:ab:6b:25:ee:05:92:d4:40:
1b:6d:21:be:d7:af:d5:ee:fb:42:44:4c:7c:e8:f2:
94:04:6f:e6:af:32:59:4f:cb:5b:94:84:b1:29:db:
4e:44:7b:e1:02:eb:4a:0d:0f:b7:3c:af:45:5c:33:
83:45:b5:0d:fc:cc:fb:8b:5e:7c:2e:2c:73:4c:91:
2a:45:22:f0:e7:a5:b8:8c:d5:1a:f1:32:1f:23:0c:
5b:8a:12:03:c1:59:15:a9:a0:96:c6:69:f7:2c:14:
c8:67:af:88:0c:65:8e:ce:d8:41:5d:a7:c0:97:73:
02:89:74:af:22:3d:01:12:9e:92:5c:fb:ac:ae:1c:
97:d6:fd:a7:53:a6:97:a7:7f:8a:64:6f:9a:5e:22:
76:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:0D:CD:AB:4A:9A:A1:75:EA:35:C4:D9:16:E8:96:26:9A:04:E8
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4lwNzatKmqF16jXE2RboliaaBOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
82:86:c5:bb:e5:fd:4e:7d:25:0a:67:7c:03:bd:f1:29:d6:d7:
db:0e:74:39:39:a1:d0:5b:84:9e:61:37:ef:82:5d:50:ca:eb:
71:61:06:89:0d:b5:4e:fc:19:ff:5c:6d:f3:8c:f3:24:e1:e0:
d1:34:4c:9a:c6:44:95:6f:c1:a1:95:47:1b:53:70:30:e2:6f:
d1:ee:11:c1:bd:95:4a:ca:53:24:14:1c:1c:f2:d9:75:3c:99:
7f:f6:4a:98:3d:78:d5:42:fc:4a:54:92:0e:c8:31:ad:9f:88:
c7:60:8e:f5:e0:95:1a:1a:3e:9f:fe:7a:66:40:d7:41:9a:b4:
61:3e:fc:5a:7e:ec:5e:12:86:b0:4d:cd:1c:c1:23:f2:1a:02:
75:26:d0:0b:2b:a1:ce:94:9a:77:f7:89:d8:1e:55:43:91:f1:
7c:1b:f4:90:77:e0:9e:e1:63:20:af:11:a2:ff:1c:e4:78:af:
c1:a0:e7:94:0e:7c:f1:d9:e5:b6:d0:74:10:d6:c8:70:1d:8b:
76:d2:f2:84:0c:f1:1e:ac:42:65:d3:96:f0:e2:22:0d:17:7b:
3c:36:ff:eb:28:a6:a7:f5:f6:9d:2a:06:08:32:35:78:5f:37:
28:39:6b:c6:16:84:e6:57:0c:4c:f4:90:08:32:f8:f8:63:e6:
8f:48:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:29:41 2025 by rpki-client