Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/tCKYdWD2hSQqFlBHMS87DdwFA_c.roa
File: tCKYdWD2hSQqFlBHMS87DdwFA_c.roa (raw, json)
Hash identifier: P2KIjX/YYHmksRirKKz2Fd1xnQFo0kzJQbDUVFG/Ics=
Subject key identifier: B4:22:98:75:60:F6:85:24:2A:16:50:47:31:2F:3B:0D:DC:05:03:F7
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 01941F8C9D063553FB6B330136879D5B6ABA
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/tCKYdWD2hSQqFlBHMS87DdwFA_c.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58580
IP address blocks: 185.254.56.0/22 maxlen: 22
185.254.56.0/23 maxlen: 23
185.254.56.0/24 maxlen: 24
185.254.57.0/24 maxlen: 24
185.254.58.0/24 maxlen: 24
185.254.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9d:06:35:53:fb:6b:33:01:36:87:9d:5b:6a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b422987560f685242a165047312f3b0ddc0503f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:24:a5:f0:d0:f3:d4:b2:a8:91:a9:09:ba:
bf:1b:71:b9:fb:d1:e1:d5:10:a0:b3:53:4a:cf:b6:
ef:f8:8b:50:4c:01:bb:aa:86:bb:7d:de:c0:54:4d:
67:db:7f:91:26:89:5d:a2:e3:01:60:22:fb:cf:c2:
9d:74:21:76:0a:9f:82:0f:c7:88:0d:31:dc:59:67:
2b:d5:b3:38:ac:77:ac:64:a8:e6:0c:e0:42:99:a3:
3f:e1:b8:5b:51:9c:68:27:28:a0:c9:ec:96:8a:cc:
6a:4a:d9:60:e3:fd:2c:72:ff:5f:e6:66:07:26:72:
0b:9f:cc:6e:fe:4a:f7:10:35:e4:46:20:32:12:39:
90:7d:bb:89:51:70:dc:d1:04:1b:84:40:03:41:d2:
13:33:b0:a7:48:3d:fd:f8:37:ec:53:23:3a:da:9f:
a1:0a:81:f7:e3:cd:31:cc:ef:0a:cc:e8:38:6b:87:
af:f7:ee:a1:94:80:16:25:dc:fe:11:0c:32:6f:9a:
cc:74:27:df:9d:96:d0:39:eb:00:1e:59:69:b9:d3:
b5:01:e7:ad:74:fc:00:dc:eb:1f:8c:b2:23:08:55:
44:17:ea:bb:c0:58:38:05:21:40:64:c2:71:b3:59:
88:48:51:91:76:1b:e4:e6:b5:50:dc:ab:e9:c0:0b:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:98:75:60:F6:85:24:2A:16:50:47:31:2F:3B:0D:DC:05:03:F7
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/tCKYdWD2hSQqFlBHMS87DdwFA_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.56.0/22
Signature Algorithm: sha256WithRSAEncryption
00:bb:72:5f:32:cf:ae:a5:e8:13:45:24:f5:7a:49:53:82:1b:
2e:6e:8f:fc:df:ea:00:ec:b5:43:a0:3c:32:23:98:01:ce:d4:
35:b8:ad:da:22:d6:f0:5e:e7:50:48:3c:ce:a0:d4:b5:48:95:
9b:48:2f:da:23:f9:c7:d5:79:f6:b2:ce:fb:0a:8d:ac:1b:50:
42:c2:db:ee:05:38:ff:35:68:e6:c6:fe:56:73:5b:62:84:6a:
b9:af:c5:3d:35:71:f0:71:de:c4:aa:e7:47:4b:a9:3b:d7:f9:
8e:b6:f9:03:89:c5:31:eb:40:5e:d2:55:fa:f8:91:cb:cf:cc:
d7:2a:03:c8:e3:c1:8b:8f:99:a2:95:2c:ec:1a:5f:09:a4:6b:
22:3b:8b:62:f5:e2:bb:00:e3:3a:10:9f:ae:cf:8f:51:1b:3d:
46:d4:05:5b:26:6c:9e:1b:77:a5:d2:b9:4e:03:9b:b5:8d:c7:
81:74:40:d3:a0:69:5d:9f:d3:65:9f:02:29:b8:71:16:eb:f6:
60:79:c6:65:05:9e:67:34:6b:54:e4:1f:88:5a:7d:36:6b:07:
b1:1f:33:72:22:4d:20:92:78:15:9d:a1:de:6f:e4:71:d6:56:
fa:42:5a:39:ee:c7:c8:e4:84:45:3a:c8:b5:24:a0:c6:ef:77:
cb:3d:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:36 2025 by rpki-client