Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/aJLzwtCUdiDsbzLkcixPxdB6v1g.roa
File: aJLzwtCUdiDsbzLkcixPxdB6v1g.roa (raw, json)
Hash identifier: TdGcGZMlwlb3nN8Fqxn50IkU+YqrMQQtF9K5MrHEYUo=
Subject key identifier: 68:92:F3:C2:D0:94:76:20:EC:6F:32:E4:72:2C:4F:C5:D0:7A:BF:58
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D717B5918F3A08B68889C7FB2C791A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/aJLzwtCUdiDsbzLkcixPxdB6v1g.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199425
IP address blocks: 85.209.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:17:b5:91:8f:3a:08:b6:88:89:c7:fb:2c:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6892f3c2d0947620ec6f32e4722c4fc5d07abf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5c:93:18:96:4c:aa:9d:c9:12:c7:c5:11:7e:
23:2a:95:f0:c0:58:6b:16:32:a3:17:13:7c:54:09:
15:0e:d2:eb:e2:d8:d9:fb:76:9a:86:89:43:a4:d7:
9c:6e:d4:4b:f5:a0:4e:9b:26:28:44:5a:48:bd:96:
7e:60:5c:58:0e:e1:89:f4:9d:43:a6:7e:50:04:f7:
41:3c:69:cf:c7:d9:ef:6e:8b:91:46:8f:e4:8e:28:
be:c1:39:e6:a4:83:66:f7:5e:96:67:98:dd:19:5f:
1b:43:90:b7:97:49:5d:b9:ea:89:78:8f:cd:1d:f0:
2b:1a:a5:1d:61:ca:53:20:9d:25:a2:09:3b:70:7b:
83:64:c5:ea:0d:c4:d7:52:af:f6:32:1b:54:52:1a:
5f:10:0e:1d:95:60:b4:97:7d:ec:1f:75:cf:40:c6:
f8:26:16:1b:ea:17:e3:a4:ea:d5:58:ad:61:85:f2:
b4:d0:cb:96:45:b8:57:90:65:4e:7e:87:77:21:c6:
19:36:6e:0e:65:73:9a:22:05:84:eb:d5:7e:7d:5b:
11:80:19:c1:eb:12:fc:bc:09:ac:f5:71:ff:35:da:
b6:df:2b:aa:d7:6a:f4:aa:d7:19:4e:b7:13:99:37:
0e:bd:8b:32:39:40:c9:39:de:cb:c4:e9:97:da:ce:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:92:F3:C2:D0:94:76:20:EC:6F:32:E4:72:2C:4F:C5:D0:7A:BF:58
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/aJLzwtCUdiDsbzLkcixPxdB6v1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2e:eb:7c:c3:a4:75:71:2e:40:6d:e7:57:6b:8f:26:5f:e8:
ad:23:b7:11:17:b6:f8:1d:76:94:1e:c5:f3:63:40:b7:e8:39:
2c:72:21:a5:a0:17:d8:39:7a:1c:c2:ec:59:cf:93:b5:1c:a3:
1d:af:9a:8c:de:67:0a:ee:43:8c:69:93:0f:64:0d:43:50:05:
8e:5b:f7:b4:20:ff:80:04:c6:c8:40:da:78:d9:78:17:9e:27:
03:31:26:58:ce:6a:13:22:42:50:8a:db:82:fb:b8:4a:79:8e:
7f:70:7f:58:80:91:50:b5:6e:a1:8a:b5:65:90:43:a7:14:7c:
f1:9a:69:6a:f8:55:c8:e7:a9:b6:a7:4e:46:1f:dc:bd:78:a8:
da:8f:54:55:e1:0b:c0:35:dc:ef:0e:19:62:f4:d0:fa:8a:76:
da:3b:d7:a4:c4:1c:e6:0f:4d:76:87:45:09:6e:ab:ff:71:b5:
4d:48:22:ec:58:ee:f7:6a:30:f9:20:dc:ee:ee:33:11:16:a8:
fa:d7:e2:d5:3a:a9:eb:e6:6d:12:d9:5d:4f:b7:19:84:bc:3b:
b3:5b:af:04:5a:0b:e2:09:9b:98:27:50:f8:ad:d2:64:44:8c:
2d:f2:a7:21:fa:a5:2c:f4:02:0d:46:e2:88:dd:57:48:1d:30:
38:18:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:39:17 2025 by rpki-client