Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/iOzGDAy-qErjiYCUQPq5S2xsHRA.roa
File: iOzGDAy-qErjiYCUQPq5S2xsHRA.roa (raw, json)
Hash identifier: EO5Nyg7UrTNVSVoeALt1d3217TiALMgeZ+f/YmIuYh4=
Subject key identifier: 88:EC:C6:0C:0C:BE:A8:4A:E3:89:80:94:40:FA:B9:4B:6C:6C:1D:10
Certificate issuer: /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial: 019420D5A13C44B81A0ED703E112F28A5314
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/iOzGDAy-qErjiYCUQPq5S2xsHRA.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39534
IP address blocks: 185.151.68.0/24 maxlen: 24
185.151.69.0/24 maxlen: 24
185.151.70.0/24 maxlen: 24
194.50.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a1:3c:44:b8:1a:0e:d7:03:e1:12:f2:8a:53:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88ecc60c0cbea84ae389809440fab94b6c6c1d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:1c:da:03:4d:ec:51:97:2d:97:3b:4f:19:
57:98:58:1f:a4:cf:76:f7:c3:6f:7a:d1:64:54:6d:
e5:46:2c:4a:6d:67:b2:3e:a6:2a:5f:f7:e7:23:1d:
b2:48:12:a1:cf:c2:83:e1:36:89:30:02:5c:c1:74:
fc:bb:48:59:d6:15:5a:72:b1:c0:3e:03:53:e7:b8:
f0:91:5d:0a:95:c5:99:08:c8:d0:88:7b:fe:b2:82:
fa:45:b1:b2:0e:6c:21:e0:a7:3e:f9:ce:fd:50:36:
b2:0e:ea:da:39:e7:91:c4:de:b6:b1:1a:17:dd:2e:
bc:7a:ad:16:9b:ff:ff:c2:73:ed:07:69:2b:ad:0e:
35:7c:73:a2:0f:39:73:de:24:28:67:64:5f:2f:06:
fb:bc:81:83:f8:70:03:10:75:3c:24:0e:3b:c1:c8:
18:d0:2a:ae:e4:c1:1a:39:4d:14:76:bd:75:fd:79:
e1:34:75:9e:c1:fa:9b:b2:72:16:fb:6c:64:c0:c4:
29:c5:ce:1a:1d:65:07:b5:f6:93:31:08:d2:3e:39:
59:49:f9:d9:5a:3a:1a:44:92:f8:2e:27:1e:d6:e2:
6f:5e:52:d5:21:b9:94:9d:cd:6f:7b:66:7f:34:8f:
05:f1:98:af:e5:60:27:b0:80:3c:88:c6:93:47:40:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:C6:0C:0C:BE:A8:4A:E3:89:80:94:40:FA:B9:4B:6C:6C:1D:10
X509v3 Authority Key Identifier:
keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/iOzGDAy-qErjiYCUQPq5S2xsHRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.68.0-185.151.70.255
194.50.38.0/24
Signature Algorithm: sha256WithRSAEncryption
12:14:b3:fd:81:55:2f:70:4e:88:5b:8b:f1:21:a7:9f:49:89:
91:5f:ea:43:23:1e:da:58:4f:cd:44:f5:16:72:13:76:df:9e:
6e:63:0b:1f:7b:6b:89:b5:7e:6a:5c:12:c8:a0:a0:20:8b:ac:
e8:57:0d:c1:3e:77:d9:3b:07:51:4d:99:66:b6:3a:80:e2:62:
44:a6:a8:14:e1:c4:c7:8f:26:12:cc:c6:26:70:ea:01:5a:0f:
bb:f9:4b:a0:d4:e5:8b:99:00:80:3b:b5:32:3a:2d:51:1a:88:
48:d2:a8:a0:81:2d:a8:30:66:be:c3:fa:af:bc:ca:ae:78:6c:
11:8f:f4:03:3c:06:34:2c:d0:5c:56:d8:d5:21:d4:83:2e:d1:
b0:74:2c:8c:d8:fb:a0:9c:bf:8b:22:2d:12:af:da:b3:77:0a:
8f:8c:59:60:04:72:91:6b:de:ed:1e:2c:01:c1:7c:7b:0a:00:
0e:67:38:4b:cc:fa:b0:66:32:32:04:59:c3:d5:c7:36:b6:00:
c0:0d:af:dc:e7:a1:a9:1d:1e:6b:4f:3c:38:a3:62:d7:1b:3f:
94:6d:05:2e:87:e1:fe:66:c1:fe:ac:7f:75:bb:52:47:3b:9f:
60:40:3e:bd:e5:ad:85:28:20:f2:25:b4:7d:fd:2f:f1:68:4c:
43:fe:7a:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 08:44:20 2025 by rpki-client