Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/ruzowO5hkwvsrCMVqncyR6RC2cM.roa
File: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (raw, json)
Hash identifier: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=
Subject key identifier: AE:EC:E8:C0:EE:61:93:0B:EC:AC:23:15:AA:77:32:47:A4:42:D9:C3
Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial: 019425218CDDC256E2956235501669C361FA
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/ruzowO5hkwvsrCMVqncyR6RC2cM.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205360
IP address blocks: 185.221.4.0/22 maxlen: 22
2a0b:fec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8c:dd:c2:56:e2:95:62:35:50:16:69:c3:61:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeece8c0ee61930becac2315aa773247a442d9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:32:d5:cd:e6:95:a8:10:f9:84:18:47:4f:
33:ca:23:ea:26:a9:eb:44:e7:ca:2c:18:64:41:1c:
3a:e7:0e:4f:f7:eb:e3:f5:b7:e7:57:f6:97:44:8e:
80:e0:5c:1e:8b:df:26:fd:24:52:1a:e6:b2:a9:7a:
14:4f:47:1a:74:f9:90:46:b1:06:ea:64:3c:61:23:
aa:4b:b2:4f:5b:11:29:67:19:90:41:1b:40:40:26:
61:86:fe:e7:3a:0d:73:69:a4:15:00:88:ce:2e:2c:
4a:6c:36:05:2f:71:90:c9:61:5a:7e:86:42:df:3d:
ec:3e:01:41:83:a7:bf:b9:b2:1e:87:aa:af:63:3e:
82:be:b8:fb:3a:74:b7:94:1a:01:42:41:1c:37:a3:
7f:8f:ac:fc:85:c8:a3:0b:86:0a:78:d8:2a:8b:e4:
d2:8a:29:a6:49:cd:92:d5:0b:ab:49:7e:d9:10:bf:
88:ca:8a:a0:b2:f4:13:07:3c:3f:8b:99:bf:f9:ef:
90:78:f2:73:23:c9:b2:72:00:56:e6:4d:69:8a:b8:
b2:cf:24:ac:d1:f6:c0:06:82:e7:58:68:36:ce:c2:
e2:54:17:90:75:17:5e:a7:32:cf:cd:98:9d:11:c4:
9c:46:d5:72:42:5e:4d:38:e9:aa:d1:cc:b6:a7:39:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:E8:C0:EE:61:93:0B:EC:AC:23:15:AA:77:32:47:A4:42:D9:C3
X509v3 Authority Key Identifier:
keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/ruzowO5hkwvsrCMVqncyR6RC2cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.4.0/22
IPv6:
2a0b:fec0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:06:60:44:97:d7:13:83:67:c9:3e:bf:85:46:1f:e0:04:53:
5d:65:0f:3a:53:38:00:06:83:e2:5b:b4:ed:f1:0b:2d:1d:02:
a2:62:f5:9e:ff:61:b3:41:a1:8e:aa:2f:bf:cd:cb:ee:b5:cb:
b8:6d:85:ea:90:da:4c:55:28:83:38:c6:83:b2:c2:ef:cb:81:
b2:28:50:a5:1a:c4:65:aa:19:fd:8a:44:92:33:d8:6f:70:0f:
55:b0:89:f5:b7:62:89:f5:b4:9e:c6:48:bb:fd:2d:bf:0b:7f:
83:40:ee:ef:0a:1b:30:92:16:44:70:b1:fd:61:78:84:06:ce:
26:c1:e2:b6:d6:a8:42:03:73:80:0a:42:1f:9f:57:e2:91:05:
e2:48:d7:ab:aa:21:44:28:c3:ef:61:37:76:47:4d:9a:2e:b3:
27:4d:72:32:02:1e:55:5a:64:b2:87:6e:b9:d8:73:c1:fd:4d:
ae:29:00:96:e4:76:2b:f9:ca:bf:9b:5f:d6:79:12:e0:8e:2c:
ef:55:b1:e9:80:65:0c:fc:d3:c5:03:f1:9a:e4:7c:ec:4f:3f:
7f:ce:e5:52:fa:e9:24:83:97:b6:10:cd:6b:da:ca:a7:18:20:
7d:af:d4:46:4b:9c:60:e0:49:5e:36:76:93:69:a4:6d:2e:51:
f1:c3:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:10 2025 by rpki-client