Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/DpA6vqU4LJr5KoLtREWlTrMePeU.roa
File: DpA6vqU4LJr5KoLtREWlTrMePeU.roa (raw, json)
Hash identifier: JzcSaxZjM50huCWTepEHWuRTcnth93I21P4Hl6vppKc=
Subject key identifier: 0E:90:3A:BE:A5:38:2C:9A:F9:2A:82:ED:44:45:A5:4E:B3:1E:3D:E5
Certificate issuer: /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial: 0194221FBBE9331F894F64CED643284DC11B
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/DpA6vqU4LJr5KoLtREWlTrMePeU.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42889
IP address blocks: 185.190.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bb:e9:33:1f:89:4f:64:ce:d6:43:28:4d:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e903abea5382c9af92a82ed4445a54eb31e3de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:a7:f6:84:b1:14:f8:aa:83:65:d8:ee:29:
a7:d8:12:a5:3a:0f:08:2a:2e:cc:f5:40:43:f2:d5:
9e:50:36:c9:b8:66:4b:22:43:9b:e0:34:5c:7a:81:
02:4b:85:88:2a:4f:64:bd:72:f7:81:05:6f:ed:ad:
2c:b0:5b:62:4f:38:5c:df:07:f4:27:c4:e6:f3:c9:
a5:c1:08:82:21:86:88:3c:55:99:19:76:ce:b0:97:
1a:f6:05:b0:11:dc:80:78:79:f3:73:7e:52:90:ca:
8a:56:28:cf:77:3b:56:22:95:0a:31:24:e1:da:42:
30:f1:df:a3:93:4e:aa:fe:6a:70:48:54:60:80:26:
c2:3d:52:22:b6:73:76:cf:fa:32:7a:43:41:fc:63:
bb:f2:5a:69:ed:5e:0a:b7:51:20:0d:04:f4:47:10:
ee:78:f6:e0:7b:0e:57:b0:a7:92:6e:8f:68:70:51:
9e:5a:9a:98:db:ab:2c:0a:10:53:4c:f1:ac:de:35:
90:44:b6:ff:1e:a5:89:fb:d4:02:46:49:8b:fb:0e:
3d:db:fe:e7:99:8c:1c:96:c5:57:b7:a1:3d:3c:75:
d3:e1:0f:92:aa:9f:a7:00:0f:9b:96:a4:10:bd:fa:
f9:94:5b:76:f6:a1:b5:70:5c:ed:74:b7:aa:32:bf:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:3A:BE:A5:38:2C:9A:F9:2A:82:ED:44:45:A5:4E:B3:1E:3D:E5
X509v3 Authority Key Identifier:
keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/DpA6vqU4LJr5KoLtREWlTrMePeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:79:63:94:3d:8c:52:fe:36:81:c7:12:fa:55:a4:e3:c7:70:
ad:a3:76:dd:f7:6b:18:4c:af:fc:fc:2f:5a:d9:8d:5c:ca:2a:
38:4c:84:1b:57:ba:12:87:d4:6c:7a:40:79:41:82:ea:92:66:
84:14:96:bb:19:33:5a:c2:11:5a:15:7f:d9:b8:23:c8:d6:a6:
57:30:dc:27:20:38:a7:d5:eb:7c:ed:20:cf:49:16:ad:c6:5f:
4a:4b:bc:b8:84:e1:86:d8:ca:e4:f8:28:68:82:51:17:85:a4:
f1:92:ba:1a:be:4e:7f:02:db:cc:eb:15:49:e8:63:96:57:e9:
9c:1d:ec:da:c8:1f:0d:af:4a:fd:dc:25:2d:94:5e:6d:fd:17:
01:ee:96:c2:38:cd:4e:16:be:79:6d:ad:d7:79:c9:92:75:a5:
6b:60:ad:cc:5f:8d:7e:b1:6e:b2:b3:00:e7:bb:27:9c:a6:ff:
bd:21:a1:30:d1:87:bb:b0:17:a1:4a:fb:3e:56:34:57:e2:cb:
79:0c:a1:78:22:d6:7c:f0:dd:b4:05:3e:9c:d4:00:75:6b:e5:
73:7f:c8:fe:ba:7d:10:e8:44:29:ea:63:09:02:d0:b2:80:88:
e4:f5:92:19:28:90:0a:42:d6:5d:cb:d5:3b:78:33:a3:72:f0:
7a:59:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:45:51 2025 by rpki-client