Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/P_U2iG27Sx0ka84YmvyzBb-L07I.roa
File: P_U2iG27Sx0ka84YmvyzBb-L07I.roa (raw, json)
Hash identifier: IKhMvI2uWjbN56RRuDxCQt1hvOc3OT5hnF92ARY6Jng=
Subject key identifier: 3F:F5:36:88:6D:BB:4B:1D:24:6B:CE:18:9A:FC:B3:05:BF:8B:D3:B2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F8A876E7DDE7ABE4693FC2831D137
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/P_U2iG27Sx0ka84YmvyzBb-L07I.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43991
IP address blocks: 185.42.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8a:87:6e:7d:de:7a:be:46:93:fc:28:31:d1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ff536886dbb4b1d246bce189afcb305bf8bd3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:65:87:45:f0:7a:09:b2:a2:aa:71:5b:04:
40:03:95:25:6f:11:f4:1f:2d:14:48:79:b8:2f:8c:
61:2c:90:29:09:a4:e3:56:14:f6:3d:af:a1:35:07:
0b:48:ab:42:e0:43:60:c2:e7:ed:e7:26:14:23:e6:
31:ba:cf:37:f3:90:76:11:da:57:09:17:77:d7:05:
01:70:09:f6:26:4d:d3:1c:b6:34:6a:60:23:e8:78:
70:74:2f:97:6e:fe:84:fc:38:8a:bf:85:ba:ad:26:
41:2b:1c:02:1c:31:a2:1e:ab:7b:1e:c8:36:c8:ff:
69:29:58:eb:42:71:bc:62:57:00:fa:7c:37:63:93:
6d:54:13:f4:ed:fc:e2:64:0a:b4:ab:35:54:68:2c:
bc:a0:70:f9:2b:d5:bd:86:64:91:8a:70:82:56:78:
1c:71:8c:2a:d0:26:9d:ce:b5:a1:97:44:81:62:c9:
7a:79:fe:75:a0:6d:03:8e:1b:5e:27:1f:0f:70:d6:
31:20:ba:ce:a1:fc:1a:fe:d0:3b:4f:8a:9b:16:c9:
56:76:60:7f:5f:bb:ed:ed:54:ee:02:0a:20:86:3a:
f0:60:fd:ca:66:9a:97:12:f3:f6:e9:cb:65:bc:c9:
47:f5:7f:3a:6c:ec:bd:5e:e3:db:c7:88:c0:2c:e5:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F5:36:88:6D:BB:4B:1D:24:6B:CE:18:9A:FC:B3:05:BF:8B:D3:B2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/P_U2iG27Sx0ka84YmvyzBb-L07I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.13.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6e:cd:fd:3b:bf:c0:68:0b:a3:8e:e8:88:68:48:e1:d5:8c:
ed:d2:db:8e:67:77:4f:ed:ef:c3:6c:38:ca:68:cd:73:4b:82:
35:5c:38:c5:41:ac:ff:ab:51:42:04:19:8f:c5:7b:54:06:eb:
92:f6:c0:86:20:fd:81:ad:79:f8:c5:72:36:ee:16:43:95:de:
95:29:2a:be:5c:f6:97:96:5a:03:08:7b:2a:f7:c3:4a:b6:0b:
d3:25:35:89:1f:8d:5f:bf:b0:c0:61:40:ad:2c:16:c1:1d:9c:
b6:8c:ba:0b:7d:88:00:1c:3f:ad:74:9c:9b:41:3a:d2:e1:de:
04:ab:f2:60:e6:9e:c2:40:56:4c:44:89:c6:1b:a0:4d:41:e6:
ef:5f:9e:1c:ff:ae:e6:71:7b:a5:21:40:50:59:ae:6c:d0:de:
69:36:1b:1b:ca:81:ab:b2:c6:a3:2e:ca:42:7c:c0:ef:ba:c6:
24:6d:7e:a7:f6:e8:39:41:81:58:48:5c:94:ec:fc:65:f5:54:
13:9f:b2:17:0b:d0:dd:22:c3:5c:17:68:d0:a8:48:4a:92:47:
ac:01:a5:16:18:13:95:bd:3b:3a:8f:d0:19:66:af:0b:c4:79:
40:ce:53:50:55:0d:67:b5:f2:fa:80:99:6a:73:82:74:1d:85:
ae:ba:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:16 2025 by rpki-client