Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/sc5esKExOPd9MvtDyHiUo5axTto.roa
File: sc5esKExOPd9MvtDyHiUo5axTto.roa (raw, json)
Hash identifier: T21z00EGEhOOCwVKI7S6BwJd+ujtp85ADOaPIJ5A1Tk=
Subject key identifier: B1:CE:5E:B0:A1:31:38:F7:7D:32:FB:43:C8:78:94:A3:96:B1:4E:DA
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CC28F39F0FF5504084CE3A3A27FC8
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/sc5esKExOPd9MvtDyHiUo5axTto.roa
Signing time: Wed 01 Jan 2025 01:48:26 +0000
ROA not before: Wed 01 Jan 2025 01:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207030
IP address blocks: 185.27.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:c2:8f:39:f0:ff:55:04:08:4c:e3:a3:a2:7f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1ce5eb0a13138f77d32fb43c87894a396b14eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:0e:c7:8e:73:8c:fd:bc:66:67:26:ec:8d:
af:a6:cd:5f:2b:c1:b8:c2:0d:60:c1:db:4e:56:9f:
48:40:5c:06:b3:36:85:e5:cb:7e:c6:a0:fa:9b:3d:
28:ba:4b:97:6b:f7:60:a2:d1:bb:e6:07:d4:37:71:
3a:4c:59:3f:7a:5d:82:82:9f:fb:6a:40:6f:73:6e:
60:44:2c:2f:57:46:1d:fe:f3:61:26:9b:19:b3:27:
4a:17:8a:02:58:79:73:86:cf:f2:6a:ac:a1:3a:ed:
7e:9c:cd:ee:cc:27:62:ae:1a:98:58:7e:8b:a5:16:
88:ca:32:76:91:ed:56:49:78:97:d5:fd:a0:f6:51:
e0:55:20:27:7f:c1:df:5b:b5:bd:c4:49:7a:96:03:
90:f3:20:db:40:21:b2:b9:8f:4d:35:39:d2:44:85:
02:4a:8d:3f:bc:df:82:1d:e9:3a:c0:81:f1:d7:6b:
96:9d:8e:5a:cb:00:6a:ed:ef:8c:98:ad:7a:5c:4c:
f4:28:7a:1d:8e:cd:9d:8d:9b:e7:ea:56:52:4a:75:
f6:e8:75:26:14:f4:1d:e0:82:4c:c9:72:b0:8f:3b:
21:d5:f2:64:a7:22:e2:a1:e4:d8:f7:c4:d1:3f:19:
d8:d5:6c:ef:36:f0:f1:dd:1e:1c:1e:7a:b0:e2:a8:
63:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:5E:B0:A1:31:38:F7:7D:32:FB:43:C8:78:94:A3:96:B1:4E:DA
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/sc5esKExOPd9MvtDyHiUo5axTto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:54:be:d4:86:d8:ea:67:6e:f5:fd:2e:35:bf:c0:a2:e1:28:
79:13:2e:78:2d:a7:30:e4:81:ad:5d:df:d0:9d:e0:f4:a6:89:
e8:52:0e:28:84:de:39:b8:8b:91:3f:a2:ba:04:33:68:15:21:
db:e3:29:48:fa:b3:5c:26:72:6a:b2:a9:fc:e0:49:7e:1b:21:
17:e8:f8:ab:e6:14:fc:42:76:15:d9:ea:88:41:9a:6f:7d:17:
06:73:e8:80:f9:58:0d:3b:32:b4:2c:88:61:c8:8c:f6:b1:07:
7a:74:42:7d:b7:93:df:f6:fb:9f:b8:02:2f:6e:e2:3e:a0:5a:
c4:ff:b6:5f:b2:73:17:22:db:35:a4:b4:10:37:be:cf:eb:00:
4a:3c:0c:6e:4b:3e:44:51:a6:88:07:67:b7:91:f6:b6:cc:84:
30:64:b8:8e:99:80:bc:24:d9:2b:32:90:42:aa:2d:09:ec:98:
d5:3c:4b:30:32:fa:ec:6a:a4:4c:7c:e8:61:0a:22:96:c9:2e:
52:a5:25:21:b5:7c:cd:a7:3c:31:a9:fe:20:a6:53:63:d8:fc:
61:81:3b:d1:2e:b3:ba:15:b7:cc:53:1f:29:0d:9b:78:40:3a:
82:0c:50:05:ab:40:e3:73:b2:56:1c:b6:64:1a:de:9b:99:29:
bf:9a:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:39:38 2025 by rpki-client