Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/_khA_VnUk6WIR9HzLzBYy21gjiY.roa
File: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (raw, json)
Hash identifier: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=
Subject key identifier: FE:48:40:FD:59:D4:93:A5:88:47:D1:F3:2F:30:58:CB:6D:60:8E:26
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 01942068314636F8C94084940DAA24ED585A
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/_khA_VnUk6WIR9HzLzBYy21gjiY.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51104
IP address blocks: 185.26.85.0/24 maxlen: 24
185.169.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:31:46:36:f8:c9:40:84:94:0d:aa:24:ed:58:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe4840fd59d493a58847d1f32f3058cb6d608e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:ab:14:50:f9:81:e5:c6:b6:a1:65:ef:e1:
49:67:57:02:73:05:2c:d9:2f:3c:60:72:fd:fa:ea:
62:e5:a3:78:01:fa:db:06:2d:de:85:50:68:8f:29:
7e:82:87:27:92:4f:79:f8:2d:b4:9b:ed:5f:8a:93:
a7:77:67:33:90:cd:44:ea:00:ad:0a:73:80:55:36:
fb:9b:47:4d:80:a5:86:cc:5d:6d:bf:d1:77:3a:6b:
6e:21:c0:1f:12:d8:73:15:d9:e0:91:1f:aa:58:fc:
7d:58:eb:71:a7:b1:75:74:ac:fe:76:ce:c8:7b:94:
61:78:69:95:76:8c:c6:99:02:7e:c4:cb:16:19:9a:
0f:30:66:f3:4b:b8:a5:24:09:8c:50:79:fe:0e:96:
93:19:b9:6b:21:7e:66:91:36:cc:ba:b1:d6:2c:22:
76:11:91:8b:3b:ab:0a:af:21:3d:d1:42:2f:55:e2:
99:4b:12:4b:b9:90:82:7a:ce:b5:ec:4c:af:33:f1:
00:13:be:7f:d1:39:34:09:81:13:17:78:1f:45:1d:
c4:70:d6:16:5d:28:28:5d:10:07:dc:08:d2:f1:6e:
56:52:7c:31:91:a6:91:fe:77:1e:8a:00:18:b3:a6:
3f:50:e1:52:09:69:11:49:a8:b5:21:03:50:df:02:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:48:40:FD:59:D4:93:A5:88:47:D1:F3:2F:30:58:CB:6D:60:8E:26
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/_khA_VnUk6WIR9HzLzBYy21gjiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.85.0/24
185.169.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d7:0a:70:e7:ce:0f:7c:36:bf:54:fb:f0:1c:60:b9:44:64:
4f:ff:67:67:63:5a:8f:6e:d8:29:e9:ba:ab:ec:d8:55:32:4c:
62:e7:c7:f9:18:1c:4a:3d:68:c7:88:ef:0c:8f:8d:13:3c:08:
d5:a9:19:11:61:e7:7b:c8:1d:19:2f:ca:43:1e:e2:f2:57:b5:
72:77:e0:35:37:0a:23:a7:a0:83:1a:9f:9f:99:2b:1f:12:a4:
28:52:99:42:90:30:52:00:63:03:8b:f2:1a:bb:c3:70:3d:a1:
b9:51:33:d8:9e:1f:38:77:ee:6e:fa:ae:83:c3:e5:c5:1d:36:
a4:dd:20:e7:b0:74:7c:3f:e5:9a:84:c9:9b:29:e4:74:59:3d:
a3:6c:35:be:ed:ac:09:33:1c:b3:7a:d8:0b:f4:6a:cc:d8:b7:
65:bb:e1:fd:ac:22:ff:6f:4b:4c:03:fa:b2:e7:60:c3:43:33:
4e:ca:7b:f4:e8:b7:94:e2:8b:68:33:ce:70:b6:4a:41:e3:78:
08:22:21:9b:b7:42:02:7f:f3:2c:02:cb:cb:4c:e8:11:c4:f3:
20:98:ab:3c:50:00:1d:42:63:3a:ad:15:30:56:a5:60:4e:ff:
55:af:cb:66:0a:ac:7b:45:3f:cc:67:bf:5c:dc:2a:38:92:0a:
10:1f:be:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:45:23 2025 by rpki-client