Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/cFbXH5gO6qs06Nq1Ek6wrTAvxB0.roa
File: cFbXH5gO6qs06Nq1Ek6wrTAvxB0.roa (raw, json)
Hash identifier: c0tlMuDM/vPMybXrB0sIatVwyL/aO7RZmUvD1wZIObw=
Subject key identifier: 70:56:D7:1F:98:0E:EA:AB:34:E8:DA:B5:12:4E:B0:AD:30:2F:C4:1D
Certificate issuer: /CN=22e28e550314138f9d83a28b2d666e9b8744b510
Certificate serial: 019426D9A8A1CB1F03C132D4FE3A32D7C142
Authority key identifier: 22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/cFbXH5gO6qs06Nq1Ek6wrTAvxB0.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60884
IP address blocks: 185.24.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a8:a1:cb:1f:03:c1:32:d4:fe:3a:32:d7:c1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e28e550314138f9d83a28b2d666e9b8744b510
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7056d71f980eeaab34e8dab5124eb0ad302fc41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:ec:d6:2c:36:63:69:e7:a4:14:d2:43:21:
a0:07:85:ee:a2:9e:e0:67:be:30:6b:c5:2b:14:1b:
d2:35:26:59:b6:1f:90:72:7a:93:2d:d9:9c:71:66:
76:25:9a:9d:c2:d3:6d:29:44:bc:43:47:a8:ed:27:
76:a1:ab:7a:56:20:70:0e:c9:7b:47:cd:c1:57:00:
86:60:ea:03:b8:59:90:c5:9e:19:b4:64:74:30:37:
0b:d6:f0:b4:81:da:12:26:de:df:41:60:7b:60:a9:
f7:13:a0:e7:0b:7f:eb:5f:a8:27:4a:4c:89:fe:7b:
91:aa:ef:d5:3a:45:38:77:bd:92:4a:75:bc:1b:3f:
ae:e3:3b:09:f6:64:d0:b9:60:7c:83:be:b4:53:db:
2d:a8:d6:5a:e9:bb:ea:fa:ad:f5:07:50:7a:43:67:
7f:d0:04:90:3a:f5:c8:ae:cd:6c:60:17:f5:31:2e:
53:8f:12:3f:c6:92:63:9a:76:a9:ac:02:2e:66:b8:
3f:cd:a7:2d:03:92:d9:3c:a0:38:27:e8:12:8b:c4:
4a:86:c4:75:87:3a:2f:22:cf:cb:5c:e9:1d:1b:ed:
77:e5:aa:95:4e:59:43:07:f7:5e:14:33:f8:cf:0d:
32:83:cb:cf:94:74:c4:c7:75:f0:d5:69:f5:4d:29:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:56:D7:1F:98:0E:EA:AB:34:E8:DA:B5:12:4E:B0:AD:30:2F:C4:1D
X509v3 Authority Key Identifier:
keyid:22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/cFbXH5gO6qs06Nq1Ek6wrTAvxB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:9c:81:ce:f3:5e:75:a1:72:3b:77:4c:9b:81:b5:09:e6:bf:
5a:97:ef:88:48:fc:fb:dc:0c:37:36:54:11:13:9c:8c:f0:ea:
ef:35:fc:6b:61:7f:d0:ab:23:47:7a:af:ee:f5:5b:80:75:23:
2e:4a:34:0a:a7:17:ee:cd:68:8b:f9:ef:8b:80:76:43:a1:d8:
f2:18:62:2b:1d:20:74:77:b9:17:1b:05:2a:39:64:3c:a4:5d:
1d:10:07:4a:1a:82:bd:ea:44:ce:44:50:e3:36:8f:4a:ba:db:
21:5a:36:c7:ca:a6:45:7c:cd:75:d4:6d:9a:45:6c:5f:78:15:
74:c7:75:88:ed:9b:26:31:a7:d6:a3:05:3e:17:94:73:e8:26:
44:e4:50:d2:51:ff:19:01:bf:2b:ee:3c:41:ef:8b:cc:c1:88:
7b:40:6d:28:0d:74:4a:5f:b9:b7:b7:78:3d:c9:b8:a8:c3:cb:
a3:19:4a:7c:95:29:7e:e5:0e:28:6a:c8:8f:69:fa:cf:c6:47:
ab:de:ea:1c:d4:a6:f5:1b:81:ed:47:66:4b:ca:f1:03:bc:93:
e0:7c:4a:a3:9d:ab:78:ca:60:92:be:d9:13:5a:61:2a:ed:64:
09:76:0f:5a:1c:7f:cb:81:93:c3:dc:fa:80:0d:7a:dd:dc:8b:
dd:c9:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:58 2025 by rpki-client