Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa
File: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (raw, json)
Hash identifier: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=
Subject key identifier: 68:42:F8:C4:53:90:99:16:2B:67:01:B7:33:F6:DC:26:DE:6E:23:B8
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 019427B5B0499D0D55C26C50924A502D7D76
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48159
IP address blocks: 185.66.228.0/24 maxlen: 24
185.66.229.0/24 maxlen: 24
185.66.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b0:49:9d:0d:55:c2:6c:50:92:4a:50:2d:7d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6842f8c4539099162b6701b733f6dc26de6e23b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:c0:38:f3:5e:e6:3b:53:f5:70:e6:69:df:
59:16:1a:1c:1a:d9:e6:83:42:41:ca:45:ec:87:40:
af:88:81:5c:80:e0:22:ca:33:b3:20:20:82:23:18:
98:34:46:0e:aa:12:f6:2b:36:0a:48:7c:44:3f:73:
d0:7c:f9:f5:f2:8a:3f:85:62:7c:0f:c1:49:50:06:
e9:36:d0:4e:80:fd:ba:f2:98:cb:4c:57:9e:f8:60:
a1:f7:d4:1c:56:29:f3:21:47:8d:88:4d:84:5e:d1:
03:35:a8:68:90:01:7b:60:df:00:6d:47:4b:6d:22:
b7:e7:21:c4:ca:ab:5d:17:de:90:b7:97:9c:99:b5:
e2:70:f8:de:b9:de:1e:70:53:e9:73:94:de:80:0e:
b0:c1:e4:28:85:f0:75:63:09:2c:0e:fa:08:61:6f:
5b:a9:e8:79:1d:e5:43:06:49:1c:7c:71:04:2f:95:
3e:43:15:f9:1a:92:5a:0a:cf:40:1c:81:57:e0:55:
aa:87:53:b8:c7:83:d7:72:90:30:37:d4:d7:4c:c7:
ab:7c:a0:28:ee:3e:8a:df:ce:0d:a7:cf:82:21:6e:
50:38:bb:5f:4f:38:a4:d5:b7:f3:e8:aa:99:2d:be:
2b:37:b5:8b:ac:53:fe:7c:7f:61:7e:b5:0b:40:da:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:42:F8:C4:53:90:99:16:2B:67:01:B7:33:F6:DC:26:DE:6E:23:B8
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.228.0/23
185.66.231.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fb:96:a2:ae:33:0f:51:23:15:23:73:58:e2:c7:df:d1:8e:
41:41:48:59:b6:74:04:f5:ac:4e:d9:17:a8:22:68:9c:50:30:
66:3d:b2:5d:74:07:80:73:3a:07:36:dd:05:6a:9d:83:3a:40:
a5:e3:1c:6f:9c:dc:82:b7:ed:33:a3:0d:cd:c7:6d:4a:cf:6e:
31:60:ff:d6:cf:5d:86:2b:68:6b:4d:98:1a:09:a9:24:e5:58:
ed:52:66:07:ef:66:c7:8e:dc:e1:e0:99:d0:eb:38:56:17:57:
be:9e:84:90:59:3a:c0:09:15:d7:28:3a:23:15:fd:cc:1c:f4:
48:35:16:1e:de:9d:ba:2e:43:8a:a5:ef:24:50:a0:65:79:f0:
c8:ca:04:5a:1f:55:51:b4:36:0c:96:80:be:92:65:ec:09:56:
ad:6f:b3:1e:f9:46:4c:17:25:da:ea:bb:ef:b9:4c:b7:a0:2a:
5c:7b:b5:d2:de:6d:e0:d4:37:cc:21:46:27:ee:0b:40:bd:01:
88:d9:34:a1:02:61:01:03:41:80:5f:69:a5:31:fe:bd:ed:ae:
37:2a:30:2f:d4:fa:78:b9:3a:ef:df:25:36:30:71:bb:34:02:
ac:c9:3c:97:3a:9c:c7:09:b8:a0:75:e0:a9:0c:b3:2d:61:b4:
06:75:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:46:41 2025 by rpki-client