Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa
File: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (raw, json)
Hash identifier: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=
Subject key identifier: 8C:5F:0F:81:DE:41:82:5F:1F:D9:C3:03:A4:08:0C:9C:9C:0E:88:D3
Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45
Certificate serial: 019425FC0EE9E3728B9A9DDB41DB8F03AFA7
Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa
Signing time: Thu 02 Jan 2025 07:47:43 +0000
ROA not before: Thu 02 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25697
IP address blocks: 185.168.48.0/24 maxlen: 24
2a03:3b00:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0e:e9:e3:72:8b:9a:9d:db:41:db:8f:03:af:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45
Validity
Not Before: Jan 2 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c5f0f81de41825f1fd9c303a4080c9c9c0e88d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:64:45:ff:db:07:64:6b:5e:8a:43:6a:e5:
e9:27:f7:25:4a:c8:b1:ec:0c:33:c2:a0:53:01:11:
4b:c9:97:48:ad:3b:b6:a9:c0:07:94:3c:4f:2b:24:
41:ff:51:5e:3f:a4:74:67:4c:b3:d6:ea:8c:90:1f:
36:b5:13:6a:ac:99:5e:61:37:84:9e:93:9f:07:a4:
f9:2c:de:e7:83:28:b9:69:0b:9d:4d:34:60:34:c2:
0a:ef:b6:99:c2:73:f1:e5:48:b4:8d:2e:58:ca:1a:
15:ea:30:43:96:69:f4:5d:50:3c:8f:9a:52:0f:83:
26:b8:75:06:b2:3f:13:0f:72:d2:5b:8e:b8:8c:91:
f6:ed:cd:83:46:89:6c:d2:9e:59:92:27:db:c4:6b:
d5:7d:05:63:9e:97:cf:2c:4e:6e:db:9f:43:b1:19:
03:12:6d:7d:90:03:50:19:14:11:d0:31:f5:ef:0e:
8e:91:41:d0:19:2c:85:c7:bc:da:f9:8a:b9:f2:e7:
ef:fe:ad:01:c5:49:20:b5:ff:d0:8f:77:90:a2:98:
8c:e1:e6:0e:2b:76:88:3a:a8:a5:1f:d2:1f:98:19:
a8:bc:28:8b:65:db:f0:25:2f:f2:e5:2e:b5:2b:72:
e7:ba:92:06:4b:fe:3d:ff:8b:af:5e:f9:a5:35:fb:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5F:0F:81:DE:41:82:5F:1F:D9:C3:03:A4:08:0C:9C:9C:0E:88:D3
X509v3 Authority Key Identifier:
keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.48.0/24
IPv6:
2a03:3b00:c::/48
Signature Algorithm: sha256WithRSAEncryption
48:7a:ab:cb:d2:b7:0b:33:64:45:c7:94:b7:f5:33:58:3e:c8:
1b:53:a4:72:0f:ff:89:5d:79:86:97:f3:ad:39:c1:ac:a2:87:
f4:41:b6:3b:2d:95:d4:0e:ae:a2:25:c2:f2:12:0f:2e:39:40:
c6:06:ec:3e:16:8c:0c:96:86:ec:3a:2f:44:d9:4a:7d:b9:a4:
4d:e9:0b:1d:b6:19:0c:12:70:1f:40:1f:4b:00:2d:9e:84:25:
14:d8:53:36:62:61:50:a4:26:d5:73:4e:42:09:b5:8b:ca:34:
b8:fd:ae:eb:1d:ed:aa:16:65:ff:fa:e0:47:c1:4e:03:5b:61:
ce:3f:5b:0a:da:5a:43:2a:6b:76:88:36:d9:48:63:b2:ba:b9:
3e:f6:19:36:4c:ae:9c:51:0e:62:9b:12:f7:7b:3d:fc:69:40:
4f:d4:dc:df:41:2f:7f:a5:5b:98:a3:51:a3:e4:4a:d7:9b:c7:
5f:34:a7:45:27:47:6e:75:f7:ac:6f:ab:d7:e7:23:12:23:88:
e2:c6:da:54:a3:fa:83:fb:4a:0c:c7:9e:0e:19:ef:31:74:99:
10:16:0d:a9:f0:35:db:e5:95:95:1e:ea:16:98:e4:91:51:0a:
ac:62:98:aa:fd:53:78:88:fa:f0:dc:99:1a:00:e1:0e:2e:49:
ac:be:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:47:15 2025 by rpki-client