Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa
File: tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa (raw, json)
Hash identifier: zwhvufu3pCnK7pPMp4eZFrdISltUdwm1mGEs0/GHH0M=
Subject key identifier: B6:90:34:46:6D:45:02:24:51:27:FA:38:21:70:88:DB:0F:57:B8:F9
Certificate issuer: /CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Certificate serial: 019422FB94AF7F890DD3EA943261F704A534
Authority key identifier: A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5582
IP address blocks: 185.113.32.0/23 maxlen: 23
185.182.224.0/22 maxlen: 22
2a0a:fa80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:94:af:7f:89:0d:d3:ea:94:32:61:f7:04:a5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01a1c7dbb9a1571a5bf4924ab3fc50493145f4f
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b69034466d4502245127fa38217088db0f57b8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:7a:9b:7a:b2:4e:49:f6:9e:b5:b7:4f:c3:
db:2e:b7:47:82:4c:0f:8a:7a:06:7f:e9:b0:e0:93:
60:2d:6c:be:6f:f2:e4:cf:09:d1:7e:73:19:ca:2e:
36:da:01:a8:9c:6a:ca:3a:cb:44:5c:ad:96:c7:0a:
be:d8:ad:2c:a4:89:13:92:05:ac:a5:8f:d2:e1:bc:
43:8b:25:c4:d8:da:d0:bb:bf:2d:58:9e:f5:13:b1:
c5:e4:56:7c:d2:00:84:93:30:a5:87:21:a0:69:62:
a0:c2:8b:5a:1e:35:52:1d:5c:5a:04:4c:f3:b0:1a:
ea:db:ce:4e:27:88:ec:24:41:a0:bb:f7:94:de:eb:
af:d3:a3:b3:bd:85:f7:96:25:88:3d:60:b6:7d:67:
d1:8d:db:02:20:97:33:5a:73:27:08:20:25:3c:ba:
dd:07:bf:8e:5c:89:a5:c4:13:50:8b:ef:2f:52:94:
6d:9d:cc:7d:31:4b:35:88:77:0f:8e:e9:93:c0:64:
d8:59:11:5b:3d:3e:88:a1:b9:a9:03:75:cb:b5:8f:
4e:76:2b:4f:06:d4:38:14:61:93:78:98:85:87:19:
d0:f1:18:19:33:4d:c2:a6:bc:a1:d7:72:4c:08:5c:
82:1f:29:98:25:bd:d1:26:a7:cf:47:03:54:bd:74:
95:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:34:46:6D:45:02:24:51:27:FA:38:21:70:88:DB:0F:57:B8:F9
X509v3 Authority Key Identifier:
keyid:A0:1A:1C:7D:BB:9A:15:71:A5:BF:49:24:AB:3F:C5:04:93:14:5F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBocfbuaFXGlv0kkqz_FBJMUX08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/tpA0Rm1FAiRRJ_o4IXCI2w9XuPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e896b8-0ea0-4bbc-8c35-2262c5bd7a2c/1/oBocfbuaFXGlv0kkqz_FBJMUX08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.32.0/23
185.182.224.0/22
IPv6:
2a0a:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
a6:3b:15:d6:b0:fa:4c:0a:52:ab:6b:ba:56:5a:35:27:fd:16:
c1:23:1c:b6:42:36:4c:af:36:f5:48:4c:54:13:f7:63:45:8a:
52:8b:45:60:36:9d:6e:39:81:ba:3e:16:80:be:d3:15:8d:a7:
b8:36:c7:21:d6:c2:e5:d9:26:28:fc:12:70:27:8e:96:27:17:
78:59:02:85:59:00:04:c3:6c:37:4c:1d:3b:f3:e6:f0:fb:89:
eb:7e:22:07:f5:e3:a0:87:de:68:b6:11:6b:44:3d:1c:85:3d:
bf:08:1c:4f:44:16:42:ad:43:b9:33:44:1d:b8:2f:a3:6e:5a:
b3:cf:9e:32:5b:35:23:38:7f:4a:15:ca:61:48:bd:1d:73:07:
05:11:b7:2e:91:a7:8e:f6:9a:41:52:8a:8f:a3:ce:8a:a2:89:
2e:4e:49:59:aa:7e:3f:68:36:ec:24:51:54:7b:e8:dc:14:39:
92:cf:6e:3d:0c:b3:3b:8d:6d:1a:0d:9f:27:00:c2:8f:48:7d:
74:e0:5a:3e:75:db:dd:93:cf:b1:04:7f:fc:b0:ec:8b:fe:7a:
4b:67:ad:0e:b8:e4:e4:e4:a1:8d:4f:81:aa:04:c3:25:13:4e:
4a:65:82:32:65:2c:b7:27:78:54:56:9e:76:72:26:a8:27:ca:
b7:3f:8f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:50:10 2025 by rpki-client