Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/dAVWxqlNNVP6A8VBFL9RneZwmJI.roa
File: dAVWxqlNNVP6A8VBFL9RneZwmJI.roa (raw, json)
Hash identifier: 1lPQWQ8lwFJDBfgG4WjGvPhvOrJDEic6DuXOVo8+YHc=
Subject key identifier: 74:05:56:C6:A9:4D:35:53:FA:03:C5:41:14:BF:51:9D:E6:70:98:92
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 0194228DDDC26758E52A079EBC34867AF581
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/dAVWxqlNNVP6A8VBFL9RneZwmJI.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205235
IP address blocks: 185.38.175.0/24 maxlen: 24
2a01:4262:1ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:dd:c2:67:58:e5:2a:07:9e:bc:34:86:7a:f5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=740556c6a94d3553fa03c54114bf519de6709892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:ec:11:60:96:43:24:3b:6a:33:06:eb:ae:
ca:da:82:49:7a:a2:2c:c5:a3:86:e4:41:0c:85:01:
79:44:d6:d9:a4:9e:b0:1a:8b:f1:f1:92:81:ac:3c:
7a:b1:dd:2e:aa:0d:1a:d2:3d:59:81:50:11:a8:6e:
d4:9e:9a:5f:1d:e4:ac:24:d9:7a:cd:8d:8e:8a:e1:
e6:48:94:6c:42:64:b3:31:c0:a4:dd:1c:c6:1c:a5:
ea:96:4e:85:3f:ab:88:24:34:bd:06:65:cc:a9:37:
38:b9:86:a6:fb:1e:df:dc:3a:bd:01:38:86:cb:b4:
88:6c:a5:26:a9:0f:a0:53:3b:c7:fd:55:90:61:ca:
04:ba:83:93:8b:6e:36:7b:62:92:ec:00:07:dc:d4:
6b:c3:9b:b3:82:73:eb:60:60:70:a8:15:2e:f7:e2:
e2:4d:f1:06:a4:f0:2c:e8:3b:e8:1e:d4:3e:7f:fc:
4a:48:64:29:7a:55:ea:db:61:a4:bf:08:5e:70:74:
63:18:26:14:8b:13:7b:12:8c:95:fe:57:96:76:f6:
22:93:9a:8d:28:9a:6b:26:66:4f:b5:1d:87:63:9a:
0a:12:9c:14:88:c4:6c:d4:19:4c:d1:79:a7:2a:c7:
8c:d8:4b:04:e7:9f:5e:e0:b8:41:36:73:e9:3f:63:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:56:C6:A9:4D:35:53:FA:03:C5:41:14:BF:51:9D:E6:70:98:92
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/dAVWxqlNNVP6A8VBFL9RneZwmJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.175.0/24
IPv6:
2a01:4262:1ab::/48
Signature Algorithm: sha256WithRSAEncryption
7a:2d:67:41:79:a7:a8:4e:84:c0:c4:05:9c:37:8c:54:38:6e:
7d:3c:37:6d:76:e4:02:80:92:6c:77:d7:3b:70:4c:06:a2:e3:
e5:18:48:43:7f:5c:e3:2e:47:5f:cd:71:06:12:2a:2d:bc:c0:
ab:9a:2b:db:87:41:59:e1:bb:0f:ed:9d:62:a1:f8:d8:47:b3:
b1:a1:51:a0:0f:50:2c:4b:14:a1:75:ce:d6:97:17:e5:f4:f8:
ce:ca:30:d4:70:29:ea:9d:a7:0a:41:70:24:fd:be:28:00:2f:
c4:fc:20:d8:13:d5:e3:b0:c1:c8:a8:26:23:e1:d0:c8:ff:ea:
a1:45:fa:b2:1f:01:6f:f8:d2:dd:77:ff:ea:3f:22:18:ee:b9:
bb:79:29:2e:58:38:85:5c:1c:db:62:6b:77:2c:13:7d:bf:35:
be:55:43:ee:99:78:be:c2:23:ae:e4:88:2d:f2:05:04:76:af:
3e:27:c0:0f:c5:9a:de:e0:c1:62:29:b5:d2:3b:a8:53:52:64:
9a:a2:93:1c:8f:c8:9b:01:d6:d3:4f:5f:d2:b2:cd:0d:54:18:
96:05:7e:bb:24:11:2d:52:b1:ac:6a:63:03:f9:4c:9b:e4:32:
be:e1:29:8c:6b:1a:1f:af:e4:e9:af:a0:e5:d2:ed:c3:58:3c:
76:10:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:04:17 2025 by rpki-client