Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/8CZZasv15ITHGJH10Ps_PRDQgPA.roa
File: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (raw, json)
Hash identifier: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=
Subject key identifier: F0:26:59:6A:CB:F5:E4:84:C7:18:91:F5:D0:FB:3F:3D:10:D0:80:F0
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019423D6D1DF43280DA032A8230C13DB4D68
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/8CZZasv15ITHGJH10Ps_PRDQgPA.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49788
IP address blocks: 185.30.224.0/22 maxlen: 22
2a04:45c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d1:df:43:28:0d:a0:32:a8:23:0c:13:db:4d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f026596acbf5e484c71891f5d0fb3f3d10d080f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:29:5e:cb:f6:2c:22:6d:03:29:02:11:d8:
dc:38:b6:aa:2a:0d:8e:d3:22:a9:29:5e:ff:61:92:
b4:f7:95:0c:05:ea:de:ea:9d:27:0d:a7:95:ee:89:
98:6d:c4:6a:5e:0d:c1:07:64:c3:fd:b9:b2:07:17:
a0:50:7d:c0:88:fc:72:4e:58:82:62:cb:d7:76:72:
cd:57:0b:5a:d0:a9:29:71:a0:f5:5c:76:c3:af:26:
aa:63:de:c7:8f:60:45:ae:cf:14:02:d6:44:92:c4:
2f:52:b9:99:d9:c5:65:39:eb:79:2e:20:6c:9f:31:
a2:e5:a6:7a:2d:4e:47:2a:87:23:cf:50:6a:b5:aa:
bf:e0:09:5b:f0:d4:6f:e9:4e:b3:58:08:da:da:fa:
41:43:67:16:72:8b:46:0b:34:7a:fc:3e:4a:a2:de:
d1:3c:11:36:f1:bf:45:e3:9f:0a:1e:82:da:41:08:
37:9e:80:7a:fb:1b:94:fe:44:2e:7c:d4:4a:22:36:
5f:7d:c3:f8:0b:2f:60:d8:24:62:36:b0:47:36:54:
f7:e6:11:af:d4:d4:ce:44:af:2d:e8:aa:91:0b:f2:
0c:71:f8:ef:0d:4e:5f:b0:0c:86:b6:23:c3:fb:92:
d5:c6:7b:52:43:66:d0:24:9b:69:d9:05:ab:b1:b4:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:26:59:6A:CB:F5:E4:84:C7:18:91:F5:D0:FB:3F:3D:10:D0:80:F0
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/8CZZasv15ITHGJH10Ps_PRDQgPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.224.0/22
IPv6:
2a04:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
59:b0:8c:1e:a8:f5:67:9d:54:7b:fa:ed:20:a4:4b:2e:39:7c:
cb:50:cc:98:57:76:56:2f:cf:21:d0:31:19:67:c7:6a:ee:0a:
e3:ac:8e:01:ee:88:87:b8:52:23:59:f9:73:ee:82:3e:4f:89:
56:2f:96:a2:dc:f7:df:0b:7c:bd:04:8b:78:0f:45:27:8b:a0:
9b:3c:62:4d:97:83:2b:5a:d3:a5:0e:ba:71:c6:8a:92:09:79:
b6:f2:75:04:be:c3:57:da:05:d9:37:1b:cc:ac:da:07:62:ac:
d5:cc:2b:0f:76:d2:20:ed:9e:96:f1:96:05:58:0f:42:f6:15:
45:ef:ed:83:98:8b:92:25:22:d2:fa:66:ae:b7:d0:8a:79:98:
8a:20:81:76:00:98:e3:f1:53:2c:db:b9:55:b0:33:8b:7d:fa:
31:89:9a:a6:91:2e:98:14:ae:93:12:68:d5:f6:f4:33:f5:9e:
71:d0:9e:cc:f5:79:da:53:02:62:e0:5c:b6:d8:a0:47:81:ca:
b4:9f:8c:b1:ab:60:fe:81:15:c8:a1:3b:7f:f0:ec:97:77:4c:
e7:cc:77:3a:7e:92:5c:9b:21:61:f2:30:3f:ec:9c:ea:fc:f8:
1c:a6:3d:1e:eb:2d:00:f7:f3:df:7f:e0:a7:4f:59:a8:e4:47:
af:6c:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:33 2025 by rpki-client