Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_RLPnAuY2Y9qihsIkMGkQqJ76_A.roa
File: _RLPnAuY2Y9qihsIkMGkQqJ76_A.roa (raw, json)
Hash identifier: 5Uvf8grMmrmrDD8+C9amWzrqooZXF6AgP61UblvK2NI=
Subject key identifier: FD:12:CF:9C:0B:98:D9:8F:6A:8A:1B:08:90:C1:A4:42:A2:7B:EB:F0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194A962B7C279754EECD78F69AD8EE0E4CD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_RLPnAuY2Y9qihsIkMGkQqJ76_A.roa
Signing time: Mon 27 Jan 2025 20:10:06 +0000
ROA not before: Mon 27 Jan 2025 20:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 185.227.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:62:b7:c2:79:75:4e:ec:d7:8f:69:ad:8e:e0:e4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 27 20:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd12cf9c0b98d98f6a8a1b0890c1a442a27bebf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:5b:b7:78:14:3a:01:10:08:5d:0e:29:4f:
8f:69:29:89:f2:4a:7d:e3:fb:4e:28:db:5c:ad:b3:
da:47:93:67:23:39:f2:0b:4c:b4:86:53:0a:48:5c:
f6:3b:04:8f:b9:b5:d3:45:56:30:7b:84:61:28:fa:
20:cb:13:8b:08:67:07:f9:c2:b9:e6:ea:98:20:35:
bb:d4:24:90:e6:5e:96:dd:33:05:d1:9e:7c:1a:08:
d1:07:f3:ba:9d:ca:4d:53:a5:9a:05:61:58:57:58:
62:67:cf:59:3b:3e:fe:dc:03:fb:00:d0:d2:c1:62:
e5:15:fb:30:94:69:ee:75:68:c2:b0:29:ec:06:d6:
57:0d:fd:01:35:31:c1:56:1a:d3:f2:e3:9e:db:04:
91:16:6c:04:24:6b:3e:c9:12:f3:ca:ca:b8:a6:62:
d3:03:5d:07:98:09:37:8a:06:ec:24:1b:6d:5d:c4:
5b:45:3e:12:6c:ae:41:85:12:6e:cf:9e:ec:42:99:
bb:c1:95:20:17:2e:30:45:e6:93:83:48:f4:57:e3:
2f:3f:1e:d0:02:02:a4:da:d1:7a:4a:5c:99:db:78:
32:2c:cb:98:d3:20:af:a6:77:f4:12:24:6e:a1:bf:
15:59:6b:9b:9c:e1:5c:60:b5:ba:8a:51:a6:a0:e9:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:CF:9C:0B:98:D9:8F:6A:8A:1B:08:90:C1:A4:42:A2:7B:EB:F0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_RLPnAuY2Y9qihsIkMGkQqJ76_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d5:c7:d7:61:2c:77:c2:de:09:05:98:d6:fb:4e:82:da:5a:
33:c5:49:c6:0c:41:a7:c5:ee:4f:2b:86:fe:0c:d2:96:7a:d2:
6b:f1:f1:41:14:d7:14:f5:7a:ed:0c:47:41:7c:ef:55:9f:ff:
1c:83:a4:9f:4c:29:c3:60:cf:2c:a2:37:94:af:78:9f:8f:24:
1d:67:ef:70:b4:77:33:f6:c5:a4:c8:52:fc:da:a2:d4:5e:9e:
8f:01:04:09:72:02:7e:03:13:fd:5a:db:8b:1d:22:4f:13:e4:
46:e4:42:94:6e:77:2f:d9:e9:89:2f:e6:e7:91:7a:cd:5b:02:
b8:88:77:c9:55:1f:5a:8e:ef:af:e0:60:28:ad:95:78:f3:60:
68:0e:b2:ef:28:56:41:cd:b0:5f:65:2c:28:12:e6:d7:be:a7:
41:31:b9:82:31:7f:18:df:e0:fa:73:1c:55:62:4a:f0:83:e3:
7a:69:9d:23:12:35:a5:61:22:4e:0e:22:28:08:db:71:cb:ce:
49:85:91:1f:23:41:a0:56:0e:71:41:88:7b:28:25:07:88:77:
4e:e8:b6:0e:3a:6d:a3:c7:84:e2:ec:32:dd:d6:e0:f6:f9:b6:
5e:5b:ac:2d:52:d4:3b:6d:8d:3b:b9:6f:9c:91:69:d6:92:98:
fa:72:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:14 2025 by rpki-client