Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/biGYeNx8PlSGKHRmVucthKOSlnY.roa
File: biGYeNx8PlSGKHRmVucthKOSlnY.roa (raw, json)
Hash identifier: YxlSQax5Hky2oIIKAGXfmWIsjyjpaMRbBxvVdrI+BSI=
Subject key identifier: 6E:21:98:78:DC:7C:3E:54:86:28:74:66:56:E7:2D:84:A3:92:96:76
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 0194266C087DCAAF3457FAD1031315A30253
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/biGYeNx8PlSGKHRmVucthKOSlnY.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43134
IP address blocks: 185.239.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:08:7d:ca:af:34:57:fa:d1:03:13:15:a3:02:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e219878dc7c3e548628746656e72d84a3929676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:fa:f6:77:cd:8e:8a:08:3e:9f:73:bc:52:
1e:b0:8e:ff:3f:2e:02:a4:c2:c0:b9:97:62:bb:55:
c7:ca:51:00:c6:d9:b0:bf:70:0a:b8:f0:38:85:9b:
78:ab:b2:0f:e2:21:03:0e:85:ed:77:ae:4b:48:25:
07:5d:f4:1b:64:f5:c9:ce:9f:30:fd:bc:79:f8:eb:
75:6d:d2:de:e7:87:d0:e5:c3:4c:c7:af:48:64:0b:
3c:c6:71:49:90:8f:0f:f9:6f:3f:6e:1a:7c:75:3d:
7a:56:37:7a:16:f8:69:a6:17:9e:0e:f3:df:02:41:
9a:da:44:48:f9:45:31:9d:08:af:0b:21:f0:7c:50:
bf:5e:b4:4c:f0:47:4b:fa:b4:d8:b4:50:c7:f9:83:
80:86:85:1d:8f:95:11:a1:ba:14:51:89:79:4b:5b:
f4:59:fc:95:5d:6f:44:7f:57:4b:2e:46:ed:1d:b6:
9f:70:72:17:d8:e4:0b:a6:af:ec:40:52:01:40:54:
65:39:37:f5:23:b5:52:ab:d9:5e:37:7b:0b:cc:39:
90:d0:02:ed:6b:2d:ec:fd:16:e5:c7:7f:56:f2:2a:
90:21:ac:91:40:c2:2c:77:8a:f3:e0:df:09:4f:35:
dc:b1:bc:ae:1a:82:5d:89:ac:21:26:c9:d3:1a:a2:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:21:98:78:DC:7C:3E:54:86:28:74:66:56:E7:2D:84:A3:92:96:76
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/biGYeNx8PlSGKHRmVucthKOSlnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.125.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:cb:f6:60:04:7e:24:a7:97:9f:13:46:b4:c9:ba:8d:dd:31:
76:38:69:12:28:6e:4a:e6:a4:f1:2f:dd:22:7c:0e:44:a1:d7:
f9:b5:4c:ff:f3:23:de:63:c4:6e:b4:48:ba:1c:b5:b9:19:5e:
fb:44:4e:df:4e:16:5e:18:9b:ce:e0:07:df:98:12:71:c7:60:
e9:7f:2b:cc:e1:07:de:ea:c5:a8:8f:50:cc:53:a9:f3:28:86:
24:34:a4:49:27:ca:60:ee:56:d0:68:3f:7d:bc:e5:65:d4:83:
18:67:ac:db:24:7d:8f:78:69:9d:94:ef:47:38:b6:77:37:89:
16:c9:6f:60:9a:82:46:57:e1:1d:b2:3e:e5:89:e8:1e:74:a9:
78:e0:00:91:3a:92:19:b3:2e:bc:07:e3:fc:1e:06:a3:a7:ac:
4e:4a:60:96:88:10:28:38:f0:af:b2:18:15:74:ee:38:96:b5:
0f:cd:38:a6:cf:05:10:86:24:18:ff:9a:21:15:47:2a:27:75:
77:40:7a:15:30:a8:d1:4c:f8:53:62:44:14:6a:f9:d8:45:1f:
59:16:a2:6b:dc:91:07:2a:86:a5:a0:bf:5f:62:8b:f9:85:35:
3e:07:dd:ff:2b:f5:66:c0:4f:c3:9f:b8:67:d2:f8:cb:bc:46:
68:c7:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:58 2025 by rpki-client