Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R2R3dYwVExujkP_3YEzS5IWSFks.roa
File: R2R3dYwVExujkP_3YEzS5IWSFks.roa (raw, json)
Hash identifier: iCdIt4hjH3rsHPjbBwBDkiRUbawLUhZbiZd908W2whA=
Subject key identifier: 47:64:77:75:8C:15:13:1B:A3:90:FF:F7:60:4C:D2:E4:85:92:16:4B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01944311AD0350D8B26562E82FC66FFE23B5
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R2R3dYwVExujkP_3YEzS5IWSFks.roa
Signing time: Tue 07 Jan 2025 23:20:19 +0000
ROA not before: Tue 07 Jan 2025 23:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 185.184.120.0/24 maxlen: 24
185.184.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:43:11:ad:03:50:d8:b2:65:62:e8:2f:c6:6f:fe:23:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 7 23:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=476477758c15131ba390fff7604cd2e48592164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:98:36:38:4e:78:bf:43:a6:4f:f5:45:3e:
d4:29:74:6f:eb:e3:86:90:79:1d:d4:ba:f8:3c:fd:
f7:35:2c:30:cf:8e:c2:8d:a3:5e:8d:98:f9:9b:a4:
8e:49:b1:f3:f8:b1:bf:ad:7e:48:07:9f:8b:2a:56:
6c:60:60:d7:12:28:31:4a:41:ad:8d:67:e9:77:b6:
9d:4b:6a:d5:86:6a:99:47:61:3d:de:5a:3f:40:4d:
3f:7e:6e:c6:74:ba:c8:f5:38:6e:33:9b:ff:56:8f:
8b:9f:28:81:88:00:bf:ec:56:1d:42:a3:eb:21:58:
63:af:36:59:d5:d1:aa:ca:dc:03:3a:71:cb:8c:91:
24:c1:4d:e3:68:14:e9:4d:f9:01:52:87:8c:f1:70:
6a:27:20:2d:8a:fc:98:03:35:d9:9c:16:46:6b:86:
cd:07:11:39:a5:72:e0:27:d1:e2:53:13:4b:1d:2f:
f4:5b:a4:9d:0d:38:da:70:d0:5d:1d:a4:77:9d:be:
30:c9:ba:c0:5a:2c:5c:0e:d1:98:e9:c9:4c:2c:b0:
0b:10:fd:dd:9e:ca:b2:ca:7d:43:c5:bb:86:8f:32:
08:f3:85:3e:bb:5e:06:4a:f1:0e:0d:cc:8e:87:a3:
78:29:c4:a0:8a:3e:d9:38:d6:1c:19:1f:1f:aa:c5:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:77:75:8C:15:13:1B:A3:90:FF:F7:60:4C:D2:E4:85:92:16:4B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/R2R3dYwVExujkP_3YEzS5IWSFks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.120.0/23
Signature Algorithm: sha256WithRSAEncryption
93:8a:87:cf:de:47:1f:9e:00:99:ec:a9:86:56:e6:5d:64:23:
c0:ea:00:c9:35:37:b0:d5:f3:90:47:8c:54:d6:3c:4f:d8:ef:
d6:12:e4:fa:f7:45:90:76:97:ab:20:d9:b6:88:ab:bb:ef:7c:
f2:a1:9a:e3:b9:4a:3c:ea:b9:11:4a:55:c3:2e:c9:9f:38:49:
3b:af:a7:1d:93:bd:5b:eb:0c:9d:66:71:f5:33:2a:6d:0b:29:
74:c8:cc:9b:69:95:b1:e0:3e:41:d2:69:32:7f:12:9c:cb:55:
a9:55:81:69:a7:37:ee:4c:47:d6:c6:ad:3d:60:4f:cd:4c:25:
ed:79:c0:53:88:08:34:d3:e5:a8:ca:7d:f7:e6:2c:0f:88:8c:
ed:4c:cf:76:72:40:c2:e6:84:06:29:82:db:f3:c7:17:08:0d:
65:4b:0b:b2:79:ff:c6:9d:3e:b0:05:35:7b:c3:04:6d:75:74:
69:e5:57:57:37:ac:6a:d0:6d:73:e8:b1:30:20:39:10:17:89:
d3:51:0d:f1:d5:be:00:b3:b4:15:90:55:7d:be:48:c8:34:de:
3e:d7:5f:05:e4:d7:7f:38:8c:93:95:30:8a:dd:28:1f:f0:f6:
f6:7b:80:8c:b3:b2:13:4f:93:2f:2d:73:0d:93:38:b4:24:00:
68:ac:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:41 2025 by rpki-client