Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1CtxcKKKmUQBQaIrjK448YER6Kk.roa
File: 1CtxcKKKmUQBQaIrjK448YER6Kk.roa (raw, json)
Hash identifier: 7rWcxRTcm3L9jOxoHrEkUvnNBxoTtLZiz3QTZYbBiy4=
Subject key identifier: D4:2B:71:70:A2:8A:99:44:01:41:A2:2B:8C:AE:38:F1:81:11:E8:A9
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D713EA5334CE12DCF540A7A858B6C0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1CtxcKKKmUQBQaIrjK448YER6Kk.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57380
IP address blocks: 185.103.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:13:ea:53:34:ce:12:dc:f5:40:a7:a8:58:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42b7170a28a99440141a22b8cae38f18111e8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:7d:3b:63:2c:9a:fd:76:be:7b:a0:e1:43:
53:17:4e:a6:c7:b3:35:2e:d3:3b:91:54:ad:38:93:
d5:b6:b7:1d:83:be:9a:cf:57:57:df:06:2a:b4:be:
bf:1d:a9:b7:06:fd:29:f4:62:c8:9a:e4:32:46:2b:
ff:45:f2:36:e4:c0:74:fa:ac:5d:f7:29:ae:8e:8c:
39:43:3c:03:8f:33:85:bb:08:47:09:be:1a:47:8b:
de:7d:29:03:9c:65:66:79:3c:f4:c0:04:0e:19:fb:
60:44:23:e7:76:48:91:14:ba:0a:f9:bb:da:a4:9b:
24:e6:82:31:15:2c:a7:ec:70:13:00:d8:ef:12:df:
f9:d3:99:c2:9e:ac:6e:fa:ed:a6:c9:70:c0:a6:3b:
29:6b:a3:09:0c:dc:18:33:69:20:42:07:e1:e5:2a:
c6:d1:38:32:7c:7b:d2:76:14:77:6d:cc:37:7d:60:
6c:74:e3:61:08:99:74:c1:cb:11:82:d1:5b:8f:dc:
fa:bb:27:df:2b:0d:cf:2e:cf:29:f4:28:79:61:3e:
aa:46:fa:46:94:8d:f5:9d:fb:71:f4:ae:fa:f5:01:
8e:f6:2d:22:9c:f5:b8:32:0c:8e:73:1a:0b:5c:1c:
83:ea:23:55:9a:a8:be:46:5f:35:54:83:40:f4:69:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2B:71:70:A2:8A:99:44:01:41:A2:2B:8C:AE:38:F1:81:11:E8:A9
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1CtxcKKKmUQBQaIrjK448YER6Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.108.0/24
Signature Algorithm: sha256WithRSAEncryption
30:da:1a:8a:10:13:d2:29:61:7a:8c:d2:60:fd:9a:b7:d9:dc:
d4:1a:c9:98:ad:b1:e4:cf:ff:11:c5:9f:da:ff:64:3e:c7:8c:
46:65:c5:77:86:dc:67:32:bb:f8:03:b2:81:88:84:ca:61:49:
ce:c2:aa:05:76:6c:64:34:d4:8a:3e:96:dc:76:6e:c6:65:a5:
b3:3e:ef:4d:cb:12:22:2c:de:53:3a:2a:55:e7:a9:d4:42:d6:
6e:d0:6d:c4:82:3f:91:15:88:44:fb:9b:69:a6:fe:e8:f3:b9:
d3:1a:dd:a5:d1:03:2b:ac:9b:67:33:11:d9:f0:c2:c4:4c:0b:
d6:73:41:96:82:35:d9:0d:19:d4:fb:ae:86:2d:9f:29:e8:12:
fa:80:e1:da:3a:ec:f9:b3:54:e7:bd:58:cc:b7:aa:54:36:56:
35:d3:bc:fe:13:68:cf:b7:61:be:99:6e:95:d0:d7:35:4e:d4:
26:16:c1:d2:8e:88:c2:23:0e:f5:3a:81:e1:6a:b5:7d:94:25:
51:8f:88:5a:b5:86:da:c7:22:6c:90:18:c6:9c:70:fe:f3:61:
0a:7d:c0:a3:66:ad:4d:b1:03:50:44:f1:dd:d2:2e:dc:59:48:
17:31:be:d1:18:54:0a:de:21:ef:48:66:97:a0:88:6b:2d:e4:
5b:5c:b9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:52 2025 by rpki-client