Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa
File: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (raw, json)
Hash identifier: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=
Subject key identifier: 0C:49:F8:25:03:E0:86:CD:93:DD:9C:49:6C:39:50:9B:A2:96:74:92
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 0194266C387B5A8E193A16C04C1B61542A40
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50596
IP address blocks: 185.235.64.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:38:7b:5a:8e:19:3a:16:c0:4c:1b:61:54:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c49f82503e086cd93dd9c496c39509ba2967492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:35:33:2d:4d:8e:36:4a:2f:ad:ac:ae:5c:33:
2c:c3:00:a6:00:c2:f1:86:74:29:3c:f4:f9:15:90:
1b:3e:f1:dd:bd:79:59:93:fd:f0:dc:8d:ef:b8:37:
f1:3e:d4:5b:20:97:6a:3e:fb:1a:13:20:f8:5e:11:
9d:fb:9d:e0:01:cd:a2:af:3d:a7:49:d6:98:81:61:
aa:4e:9f:8d:c5:cb:68:60:f2:d0:dc:7c:15:da:f9:
af:0c:c8:80:9a:d0:4e:29:ec:5c:77:45:6c:10:84:
28:00:0e:16:fc:f0:ee:6c:ac:1a:bb:c4:6b:7c:77:
be:ee:6b:5c:9c:97:41:7c:8f:14:c3:e8:45:27:6c:
8f:de:e6:fc:ea:91:75:a0:cb:d4:13:c4:cb:f6:02:
c6:6c:0a:b4:e0:7c:51:01:a9:e2:aa:78:d2:0c:b0:
74:cf:04:ee:b1:63:29:11:02:56:84:b4:e5:f6:0f:
b4:5f:83:a1:81:30:5d:9a:49:62:5a:27:4d:45:a4:
b3:6c:85:f0:a0:b9:8f:63:38:07:99:d7:0f:69:3e:
2f:c9:12:94:44:00:d7:40:eb:18:ce:41:8b:04:31:
45:71:17:8d:b9:c1:39:ad:71:2a:ff:92:f0:08:84:
89:60:61:e6:b0:27:bb:fa:13:d9:d4:d2:67:f6:ab:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:F8:25:03:E0:86:CD:93:DD:9C:49:6C:39:50:9B:A2:96:74:92
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:00:c8:c6:8a:9b:71:d5:65:a3:c5:6f:a3:5a:e9:35:ad:0d:
43:36:7f:40:aa:c0:62:de:3f:30:27:13:81:f7:2b:0c:16:dc:
2a:35:00:b1:51:89:de:36:7e:ef:8a:35:ea:c2:d3:48:ea:41:
d0:b6:62:e8:cb:dc:61:d1:a5:12:c3:7d:56:84:e8:b1:49:f9:
61:6b:f8:09:ee:08:99:b0:a5:6a:10:73:e0:d4:ed:c1:1e:88:
ff:b0:79:8b:0d:e4:21:0a:df:a3:57:0f:b6:17:60:1c:fc:bc:
69:5d:20:b3:a3:47:45:41:1f:3d:f2:11:0a:7b:35:5e:2d:93:
35:1c:10:06:3f:17:31:c4:d5:16:7f:38:cb:a3:ec:d7:27:20:
4a:28:e1:8a:64:32:d5:9a:3a:db:56:5a:b8:a0:2d:56:6c:31:
77:46:fc:09:4d:a7:14:a0:35:02:48:12:79:5b:73:37:6b:61:
8c:65:ac:94:55:2a:5c:4b:25:6a:ec:bf:8f:ac:a3:e3:16:37:
74:7f:a2:00:4d:5d:8d:bb:bd:de:bc:f3:f5:38:c8:b0:2b:1d:
ee:07:d7:38:8f:f9:a2:01:c1:0b:9b:f6:d2:73:eb:68:46:06:
2c:78:59:c5:2a:9a:37:0c:b3:9c:3c:5d:c8:42:00:6e:dd:a1:
63:a6:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:22:18 2025 by rpki-client