Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa
File: 1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa (raw, json)
Hash identifier: Ohp9jg/lWKCAW1pqYiDBNHfJGsbI7n6Nnedeq9nVw0Y=
Subject key identifier: FB:69:00:33:C1:35:50:BF:CF:BD:FF:55:CE:DE:80:74:67:F2:87:CA
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 01942067DBE410F06BE45326FA4634CBE39A
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200813
IP address blocks: 185.94.160.0/22 maxlen: 22
185.94.160.0/24 maxlen: 24
185.94.161.0/24 maxlen: 24
185.94.162.0/24 maxlen: 24
185.94.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:db:e4:10:f0:6b:e4:53:26:fa:46:34:cb:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb690033c13550bfcfbdff55cede807467f287ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:c4:ed:82:b8:1a:c5:5c:9c:ed:cf:8f:15:
c0:77:34:24:ac:8d:cb:de:e7:6f:4b:8f:f3:0f:60:
0b:80:f9:03:7e:ee:20:a1:90:5a:d0:96:47:da:07:
f7:70:8a:f8:ec:95:a6:ba:e8:22:b2:42:fb:fb:7e:
01:12:e1:1a:55:a2:f2:ad:aa:ac:aa:59:4c:01:57:
d4:31:c5:ab:51:2b:49:c0:9f:4d:5f:2a:38:b7:57:
c3:80:2c:2f:87:7a:48:92:f2:a7:95:b2:b8:32:ee:
57:32:3c:74:04:b8:93:4d:8b:7b:70:d4:81:34:c7:
0d:92:2d:0e:90:1b:33:77:60:f0:51:88:cb:82:79:
89:bc:58:3c:af:49:fd:20:31:f0:76:f7:57:b3:bd:
88:78:4c:d1:78:43:97:5b:80:d1:1d:a8:e9:4d:12:
b3:eb:9a:ec:27:8c:36:29:df:e4:7e:f8:00:50:b8:
8d:22:cc:7b:43:f8:9a:93:0f:f5:f8:0c:b7:63:4c:
c5:d8:9a:cf:3f:06:90:fa:67:1e:f4:c4:ed:4e:e4:
7e:2d:05:c0:86:91:de:ae:59:e5:14:8a:89:6d:d5:
29:36:74:cb:58:a8:b2:75:55:43:61:ef:99:8a:11:
31:ea:8b:8a:0d:f7:70:57:fa:af:2a:25:e8:fe:08:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:00:33:C1:35:50:BF:CF:BD:FF:55:CE:DE:80:74:67:F2:87:CA
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:a4:a4:e6:eb:04:62:09:b8:1c:2b:78:19:44:f7:57:ce:2e:
59:e8:49:f0:eb:1d:81:c1:17:57:50:5d:55:82:27:68:44:ed:
cb:41:2f:1e:e1:38:ac:fe:d9:b0:4d:ea:31:8b:ae:e2:17:64:
eb:f1:3e:39:34:ba:d4:c2:8e:a7:36:a8:1d:60:32:4f:11:62:
47:6e:34:f7:0f:b9:c9:92:05:8c:cf:44:10:95:eb:9c:60:67:
98:9a:78:60:73:ad:e8:9b:76:33:00:67:c8:52:ca:e7:f1:56:
26:6f:d7:aa:b2:6f:ae:82:53:04:ad:6c:4d:5c:de:27:8e:72:
f0:30:66:5d:e0:af:47:93:0c:9d:2b:65:bc:6b:af:ab:e6:98:
19:8b:08:1f:31:71:ac:c3:ba:13:d8:ac:fa:53:a3:9e:bf:be:
4f:04:89:f1:6d:6c:40:2b:69:20:4e:14:e1:4f:7d:a1:7f:8a:
42:f2:d6:6f:5a:28:16:e3:11:19:b9:bd:fd:f5:db:b5:f8:91:
5b:70:8c:f0:14:dd:12:c1:fe:a9:b1:75:6a:d4:04:a0:e4:18:
9b:3f:c2:bb:28:37:b5:94:b6:4e:61:f4:86:ba:72:7d:78:43:
23:d1:54:e1:21:26:06:37:60:9e:6d:6b:4b:0a:bf:ab:c0:21:
8a:d0:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:03 2025 by rpki-client