Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iXvUMjMC5rgrpwVHZrvhPowJnAA.roa
File: iXvUMjMC5rgrpwVHZrvhPowJnAA.roa (raw, json)
Hash identifier: 5rqPo/TC4w2ri315uZfLOTRsvSdUOiCeJDgtvB4S4+E=
Subject key identifier: 89:7B:D4:32:33:02:E6:B8:2B:A7:05:47:66:BB:E1:3E:8C:09:9C:00
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222041A2A90B2DEE31BDC3FE98ED27CF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iXvUMjMC5rgrpwVHZrvhPowJnAA.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206501
IP address blocks: 185.108.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:41:a2:a9:0b:2d:ee:31:bd:c3:fe:98:ed:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=897bd4323302e6b82ba7054766bbe13e8c099c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:a7:42:fd:18:77:a4:ed:98:5f:72:60:a8:
e8:e6:a5:3d:25:63:7a:a7:9f:c8:11:70:50:b4:81:
09:8d:a0:f6:38:ab:cc:07:77:ce:4c:06:b2:ec:71:
11:88:3c:39:66:44:a3:70:d1:ba:cb:31:f6:f0:fd:
4f:9e:37:d4:6a:46:e8:e6:83:22:f9:28:ae:e2:81:
84:4e:d7:fa:2f:01:fb:df:e9:c4:04:4f:c8:88:d2:
06:c6:3c:06:b6:86:b7:88:82:a2:e4:4d:c8:5f:24:
4f:b5:41:b7:15:eb:1f:41:38:ef:c4:c7:b3:e5:9a:
ca:28:30:08:04:df:d0:c2:f3:54:63:24:1c:fa:41:
21:b9:9f:26:e5:e3:8c:34:2e:a7:85:e9:b5:e8:f0:
0d:68:56:5c:52:53:97:f5:b5:58:a0:e3:b7:fa:8b:
13:08:8b:20:7e:fe:6f:de:47:24:c7:c0:00:86:67:
93:ab:12:e2:cf:be:3c:c5:bd:3e:c1:66:3f:c1:56:
93:1a:da:1a:77:b9:71:ef:bc:0d:37:a0:fb:5e:78:
ce:31:61:bf:16:ec:95:1f:c3:63:51:6c:2e:b4:1b:
8c:b1:d8:52:e6:59:f1:0e:06:11:93:47:0f:ed:86:
4d:d1:24:f6:d4:56:75:a9:6b:0b:00:dc:fb:bb:87:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:D4:32:33:02:E6:B8:2B:A7:05:47:66:BB:E1:3E:8C:09:9C:00
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iXvUMjMC5rgrpwVHZrvhPowJnAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.205.0/24
Signature Algorithm: sha256WithRSAEncryption
36:48:4e:fd:3d:e3:bb:ec:1a:22:4a:9e:63:9b:4b:d2:06:88:
74:b3:ab:0a:34:e6:9d:4b:bc:e9:9e:43:dd:6e:c7:05:bc:82:
13:ee:37:76:cc:cb:84:bc:79:5d:0b:02:45:c8:1e:41:a1:ab:
f5:fa:f0:fd:71:84:16:b9:d9:c6:e8:1a:01:93:23:3f:39:96:
48:35:68:8b:37:1d:3e:91:cf:32:a1:5e:7f:93:a2:35:21:b4:
a1:13:80:a9:51:d3:2a:78:df:68:09:84:b4:4b:b8:bb:a5:16:
4d:f4:e3:52:d6:08:a6:d4:2e:5c:3f:cb:39:9e:aa:05:95:99:
d0:7b:2e:42:6c:e6:19:be:88:b2:24:f3:99:ca:9c:02:bd:87:
5f:54:b5:2a:cc:1f:3f:eb:d2:8b:86:33:07:ff:2f:37:87:93:
88:f9:ae:7a:b8:f0:1b:24:f4:9b:3d:77:33:c3:37:d3:d2:03:
7f:44:f9:d5:ad:31:90:21:88:8b:ca:4d:05:41:e6:81:e9:4e:
86:6f:6f:3a:5f:f4:43:fc:a1:ff:59:a6:5c:ce:b6:12:00:7c:
97:1e:29:e7:14:7f:93:85:b4:1b:62:ef:d6:ec:e1:82:3f:4e:
2e:74:1f:cc:ff:08:b4:30:45:72:ef:96:7d:ce:fc:47:e3:c6:
3f:21:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:51:24 2025 by rpki-client