Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/t18fV6YPwA2MAEndpMc8X0ToRWw.roa
File: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (raw, json)
Hash identifier: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=
Subject key identifier: B7:5F:1F:57:A6:0F:C0:0D:8C:00:49:DD:A4:C7:3C:5F:44:E8:45:6C
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019423D6FCFD60E5306258A30BA46DB104AF
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/t18fV6YPwA2MAEndpMc8X0ToRWw.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62284
IP address blocks: 185.110.28.0/22 maxlen: 22
185.110.28.0/24 maxlen: 24
185.110.29.0/24 maxlen: 24
185.110.30.0/24 maxlen: 24
185.110.31.0/24 maxlen: 24
2a13:e180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fc:fd:60:e5:30:62:58:a3:0b:a4:6d:b1:04:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b75f1f57a60fc00d8c0049dda4c73c5f44e8456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:5e:47:62:2f:62:74:38:34:4f:5d:64:77:
f4:55:9d:d1:79:54:07:67:e2:43:40:19:ce:d1:e5:
27:4a:86:f5:84:93:ad:fd:68:13:78:73:c9:85:ed:
17:42:78:74:1d:66:b1:2f:13:2c:80:2e:d1:1e:38:
c1:72:3f:d1:4f:a9:e0:26:76:5d:3e:70:41:b9:bb:
f9:0a:c3:d7:dd:c1:45:80:dc:6c:55:a7:0f:1b:9c:
34:9e:d3:77:d1:17:a2:b6:8a:2c:02:6d:32:97:46:
8e:b8:30:7d:3b:73:09:7a:9b:fd:16:b9:db:4b:4f:
56:cd:6c:fb:bf:ea:f8:82:d2:7d:9a:12:af:52:ba:
df:bc:c6:95:26:c6:b9:b9:eb:a8:5e:2c:ce:8f:8f:
f5:81:23:ee:77:9d:bf:52:ca:ba:d5:e9:7b:7d:86:
cc:a3:0c:ab:d6:15:ec:2e:5d:ff:07:cc:5d:94:5f:
56:2d:04:e2:3e:49:fa:43:62:ec:01:27:18:05:08:
28:e1:75:26:a9:c7:27:59:0e:ba:d3:d8:b5:05:30:
4c:df:79:47:b7:ab:88:74:8f:1b:38:d2:26:03:73:
ab:7a:11:7e:98:dd:92:fc:fb:36:57:70:45:6d:53:
3a:18:1d:c8:81:20:16:0f:7f:dd:de:52:c5:09:68:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:1F:57:A6:0F:C0:0D:8C:00:49:DD:A4:C7:3C:5F:44:E8:45:6C
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/t18fV6YPwA2MAEndpMc8X0ToRWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.28.0/22
IPv6:
2a13:e180::/29
Signature Algorithm: sha256WithRSAEncryption
29:6c:83:9c:ce:19:34:db:b7:21:e5:53:09:aa:2a:2a:92:71:
a3:f2:fb:49:93:db:e2:4b:42:26:42:5b:eb:13:1c:8d:be:74:
9b:51:95:57:f7:2e:24:79:2a:1d:d6:3d:a7:85:26:52:14:bd:
59:95:e4:95:60:3f:f4:18:a5:de:3e:b6:86:5c:5d:13:b6:71:
89:ed:49:1e:d3:d8:7b:77:8a:0e:56:96:d3:43:0c:e0:b6:f3:
fd:03:fb:5b:9f:ea:46:94:2d:56:aa:63:b0:90:c8:8c:c2:11:
50:fc:07:9f:3c:82:00:a6:b6:42:ff:55:de:95:07:06:04:33:
76:77:0e:f5:91:2c:37:34:01:c1:d6:b3:9c:51:e5:86:76:e4:
95:09:07:f8:0f:43:42:24:c6:87:e8:36:af:70:71:04:ff:8a:
55:c7:d5:f8:ca:28:c2:71:a4:41:bc:fa:ff:13:56:47:c1:11:
11:e2:04:90:55:87:60:55:00:50:6b:a8:6f:3b:af:0b:fe:25:
0d:26:a4:4e:81:a7:cb:fa:23:75:de:64:9e:55:88:8d:f0:ed:
a7:4d:f6:c4:42:29:e5:34:ac:cc:39:12:2c:24:2f:db:34:94:
2e:9d:98:19:26:d0:98:30:a3:41:0f:18:13:72:71:a2:65:13:
d8:2b:cc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:31 2025 by rpki-client