Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/CnryW-h9KBqAbLH3yoElsj6kkME.roa
File: CnryW-h9KBqAbLH3yoElsj6kkME.roa (raw, json)
Hash identifier: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=
Subject key identifier: 0A:7A:F2:5B:E8:7D:28:1A:80:6C:B1:F7:CA:81:25:B2:3E:A4:90:C1
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 019426D95C8D1E0D130947C0A37BAB96C0D5
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/CnryW-h9KBqAbLH3yoElsj6kkME.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60941
IP address blocks: 185.21.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5c:8d:1e:0d:13:09:47:c0:a3:7b:ab:96:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a7af25be87d281a806cb1f7ca8125b23ea490c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:e6:b7:28:c3:03:37:6f:a0:d3:83:f6:a7:
98:33:0c:12:7b:b4:f2:7c:d2:81:32:84:b3:2c:ad:
eb:32:91:fa:76:91:f6:18:45:99:56:84:14:8d:d9:
99:45:07:a7:48:7a:15:c9:bb:24:fe:6d:e6:62:5d:
ff:04:f8:fb:f0:87:ff:11:16:86:19:06:22:29:42:
2b:97:26:41:54:91:25:73:bc:b6:4b:6e:68:94:56:
ba:cf:c6:dd:75:de:48:f4:8d:45:c7:ee:d8:7b:5d:
b7:5a:a4:8c:7f:d2:58:b7:29:b5:c5:65:3a:c3:70:
0d:f8:71:ab:a9:a9:8c:8d:8c:58:d8:25:1b:c3:3d:
66:47:fc:01:8d:af:c3:f8:b7:d6:fa:aa:7e:ea:0a:
d4:89:31:9d:24:bd:2f:86:0d:a3:aa:01:3b:cc:0c:
97:ff:9e:54:95:2c:9d:15:22:ed:bc:e9:85:1f:42:
63:ea:7c:8d:5b:08:2b:ae:e2:7d:43:ee:c7:fa:1c:
06:37:13:4c:4b:9e:61:ee:e3:3a:0f:ba:dc:c2:2f:
71:a8:b8:2b:94:85:c0:c1:3c:55:fd:a8:5a:99:bf:
82:a2:00:62:14:6f:bf:09:dd:3e:7b:8a:8b:9c:9b:
41:f5:5d:15:46:51:ba:3a:22:3f:df:ad:d8:d0:f7:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:F2:5B:E8:7D:28:1A:80:6C:B1:F7:CA:81:25:B2:3E:A4:90:C1
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/CnryW-h9KBqAbLH3yoElsj6kkME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:75:fa:bc:07:4a:0b:f1:75:7a:6e:87:89:5f:6d:f6:23:fa:
23:b0:29:61:38:b5:9f:24:b2:0e:c3:20:ae:0d:36:1d:49:65:
ad:f7:d6:c0:69:4a:05:f4:c3:42:8b:9c:86:43:2e:f0:2e:f1:
57:2a:54:cf:d0:68:ba:c9:a4:5a:f5:f3:52:cf:5d:73:93:69:
f8:7e:f5:ef:fd:05:38:75:29:2a:42:79:bd:e4:c3:40:4d:57:
f7:9e:b7:f5:7f:67:4e:31:cc:e3:2f:44:e1:6c:11:4b:69:50:
07:a7:b9:b6:52:8c:0b:1c:7f:71:33:2e:f0:b3:0b:a4:07:3d:
54:4d:36:1d:0b:7b:f4:e3:aa:39:38:f4:a5:55:74:f1:4b:f4:
9a:10:65:08:42:06:60:fd:17:1e:65:25:d4:94:61:d3:cb:fe:
2f:5b:0f:f0:e4:f9:25:38:8b:9f:fc:f7:6c:29:d9:b6:a5:09:
ed:d7:92:59:39:dc:14:4d:cd:b2:a1:e6:69:43:16:3d:23:5c:
b6:00:a3:ce:5a:4a:22:56:d4:63:74:4f:21:53:3e:22:e0:c6:
75:d3:ac:e2:83:ef:12:62:56:a9:a8:b6:59:28:b0:40:2e:45:
d2:ef:b2:76:d2:10:94:13:1c:66:22:c3:ba:46:a5:b3:9d:28:
1b:16:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:34 2025 by rpki-client