Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1UU73mAe64IYFR_1tGdVQWc2H7Y.roa
File: 1UU73mAe64IYFR_1tGdVQWc2H7Y.roa (raw, json)
Hash identifier: mA4l2JjhyQtdIC8GK38k0bi8H5cSyM8q8UL5SifLR4I=
Subject key identifier: D5:45:3B:DE:60:1E:EB:82:18:15:1F:F5:B4:67:55:41:67:36:1F:B6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D722A5894C9D41EE5D95666EB4DA06
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1UU73mAe64IYFR_1tGdVQWc2H7Y.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206044
IP address blocks: 185.212.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:22:a5:89:4c:9d:41:ee:5d:95:66:6e:b4:da:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5453bde601eeb8218151ff5b467554167361fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:f8:6c:49:ea:0f:ac:6c:9a:ed:46:a0:fd:
3e:5d:18:7e:04:3a:c3:03:dd:62:4f:e5:f1:61:35:
87:43:26:2e:e3:02:b3:dd:b6:b7:f9:29:ee:cc:78:
9a:10:e0:72:48:4e:54:03:dd:c9:61:d2:88:25:94:
00:92:d3:f1:66:b4:31:92:90:5e:f6:d3:1d:76:93:
af:b6:8c:11:9e:d7:b4:c0:ad:a2:f9:45:d0:0c:1c:
5a:4f:b1:34:83:6e:cf:d0:6f:c5:f0:32:c8:dc:de:
39:32:c2:eb:38:8c:3a:a0:01:bf:3f:70:b6:fa:b2:
be:a2:27:35:d9:e0:3e:b2:fb:40:67:dc:4a:1d:cb:
fc:fa:8a:76:2b:0b:50:75:6d:6e:62:09:50:7f:a0:
4b:be:1f:a8:19:7d:f7:c8:a6:02:cb:a6:f8:df:a7:
6e:26:e2:d1:9a:80:89:a4:50:3e:90:e2:d4:78:f0:
b3:52:2d:65:78:a1:0b:19:3c:48:cf:48:4a:bc:42:
32:d0:09:51:0c:ad:93:1b:1f:04:9b:79:40:27:84:
47:1a:75:14:95:b2:f5:4a:b2:33:54:ce:9a:36:ee:
c7:23:44:3a:d3:b6:18:b0:df:7a:f0:8b:df:02:88:
7a:85:93:b7:21:c1:80:e0:51:b9:5f:3b:ae:51:cc:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:3B:DE:60:1E:EB:82:18:15:1F:F5:B4:67:55:41:67:36:1F:B6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1UU73mAe64IYFR_1tGdVQWc2H7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0b:c9:32:30:c1:d5:20:96:e5:f1:c1:b3:73:b8:d7:b1:bc:
32:24:38:1f:6f:3d:e3:77:90:f6:d2:7c:0a:db:7f:80:44:ef:
ce:7a:8e:fb:dd:b2:90:5c:60:c8:d1:e5:cb:4c:ff:f6:9d:50:
6d:4e:c5:6b:87:76:f6:a4:df:4e:84:2b:59:01:cd:58:20:7a:
44:29:4e:f6:44:10:22:99:b4:71:eb:e2:66:3d:89:cc:43:2c:
7b:d9:77:de:ff:be:c3:4d:6a:be:b8:6c:11:c8:0a:a4:21:38:
dc:9c:30:7a:a2:66:90:f6:f1:eb:c4:f1:3f:64:bf:5b:46:46:
21:cf:d5:0f:42:ec:79:00:50:41:28:b5:90:57:9b:9a:26:0f:
4e:a5:a6:67:11:e8:84:1a:36:28:83:c0:31:1b:2d:72:8e:59:
13:82:b8:d3:ba:ab:79:46:8f:5d:4e:3f:c7:d3:cd:6b:25:23:
38:9f:28:80:a4:01:b2:c7:e7:ff:0e:88:33:9b:b2:13:11:8a:
73:34:ad:73:96:cb:2f:f2:db:bb:f1:84:40:1e:57:9f:a1:ef:
71:ed:5e:1e:c1:61:06:cd:4b:59:47:17:f8:9a:a1:81:ac:2a:
c2:2b:61:a0:cb:b8:cc:b6:3b:72:c7:88:9a:bf:11:6a:7e:c9:
5c:4a:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:44 2025 by rpki-client