Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/1wuoe06EqKtSedO7NGLRmPTmhGc.roa
File: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (raw, json)
Hash identifier: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=
Subject key identifier: D7:0B:A8:7B:4E:84:A8:AB:52:79:D3:BB:34:62:D1:98:F4:E6:84:67
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 0194228D898CEF9ABA4C6476D203D6CD0647
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/1wuoe06EqKtSedO7NGLRmPTmhGc.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34863
IP address blocks: 185.85.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:89:8c:ef:9a:ba:4c:64:76:d2:03:d6:cd:06:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d70ba87b4e84a8ab5279d3bb3462d198f4e68467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:93:f4:46:75:80:8a:db:c3:f5:6b:8a:f2:
e8:53:ca:82:d4:5c:d6:c2:e2:86:2a:9a:b8:34:71:
2b:79:72:f8:9d:a5:df:9f:7c:eb:12:70:95:77:1a:
db:1d:9f:a6:86:3e:e6:bb:8d:c1:57:e4:e8:db:af:
3b:3b:1c:8c:86:74:24:64:25:43:2e:3c:5f:90:ff:
e6:0d:0c:0b:60:22:74:99:fb:80:f1:19:d4:51:03:
3d:98:51:fe:4c:c3:35:31:45:1c:e6:1e:27:94:c6:
69:d4:db:47:8d:af:68:a6:2b:30:84:f3:38:5d:2e:
b3:1f:42:75:d2:f0:03:f6:07:4b:50:ed:8f:b0:b4:
27:c7:ef:b6:5e:84:cb:f0:13:43:e4:60:8e:dd:9b:
a1:0e:38:ce:1b:e1:04:75:21:9f:20:06:d6:14:a7:
8e:ec:68:a0:0a:3f:45:bd:d4:6f:3f:f0:01:b9:2b:
07:28:7e:ca:c6:3d:ae:85:70:41:de:86:e9:07:72:
3d:33:40:29:78:bc:18:b9:61:2e:4f:d6:78:41:9d:
f3:1f:5a:5b:ea:4c:20:b1:c7:fa:0e:15:0d:b7:1a:
db:ea:51:14:33:7e:8a:0f:54:7d:0b:8a:f5:9b:45:
c9:29:4d:2f:9a:97:3f:5f:91:90:a0:0d:eb:5a:fd:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:A8:7B:4E:84:A8:AB:52:79:D3:BB:34:62:D1:98:F4:E6:84:67
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/1wuoe06EqKtSedO7NGLRmPTmhGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:66:22:a9:e9:18:c0:32:74:ed:e1:5f:2d:d3:7d:f3:b5:f7:
58:b2:62:24:25:dc:60:b7:c5:6b:9c:62:fc:9a:a4:9d:3c:8e:
af:90:98:03:af:c3:09:ea:55:60:08:68:f4:03:23:5b:9e:06:
a3:49:3f:4f:07:bb:ab:8e:4a:38:92:db:5f:88:c9:ac:4e:14:
01:e6:fb:5b:a9:e9:71:71:00:20:13:dd:0c:14:82:a3:ca:fe:
78:03:e1:1b:a3:dd:be:6a:b5:de:bf:7f:e5:e9:87:6b:c9:f9:
ef:48:aa:fd:36:6f:b1:c2:05:66:49:4c:fd:f1:9d:88:5c:8b:
c9:4d:1a:7e:d5:d9:b5:1a:1e:1b:99:2f:a8:3e:df:96:c3:17:
ce:1a:6c:4d:f7:b4:6a:30:92:89:c7:67:cb:70:c2:a1:e2:35:
f4:73:60:49:a9:4c:82:32:57:50:31:f7:f8:0e:50:27:73:0a:
29:50:d7:b4:6f:00:ef:6e:65:45:1e:c8:98:d8:88:98:cf:20:
3b:58:20:7b:69:60:06:8d:b8:08:22:ce:22:da:8a:17:4b:83:
fd:14:56:42:40:83:33:3d:02:36:1d:28:ec:0b:ee:d9:b7:b6:
bb:25:60:fb:1a:c3:a9:96:37:c6:a5:88:8c:25:51:bb:a0:9a:
17:84:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:20 2025 by rpki-client