Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa
File: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (raw, json)
Hash identifier: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=
Subject key identifier: 6C:28:69:AB:B7:82:F0:75:19:88:E5:9D:98:96:73:4C:62:BE:64:29
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 0194266BD19C059E1D71106F29E13786424B
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206734
IP address blocks: 185.36.96.0/24 maxlen: 24
185.36.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d1:9c:05:9e:1d:71:10:6f:29:e1:37:86:42:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c2869abb782f0751988e59d9896734c62be6429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:44:00:dd:43:89:fc:b6:07:d9:6f:9c:92:
81:53:95:b4:03:96:4e:77:17:55:ec:e8:cd:2e:59:
3d:da:d5:44:03:1f:3e:9d:c2:58:c4:d2:0e:f6:07:
15:f4:24:f7:25:38:fc:95:61:cf:11:06:82:01:ef:
3f:8c:12:b1:75:87:82:9e:43:08:8d:d1:fd:15:89:
c9:02:41:84:4e:ed:5c:7b:ac:ef:96:e7:49:f7:d0:
f2:68:15:f2:ca:7a:69:9c:e7:a1:c0:9c:d7:93:87:
84:c5:fa:d8:ae:ee:13:e4:da:99:7c:0b:74:40:bb:
81:05:c4:05:7d:39:ad:0a:a8:5c:c8:26:84:d7:46:
aa:bd:b6:6d:e0:62:0c:c3:2b:af:b7:4e:b4:95:e5:
08:86:bd:79:47:d6:ff:48:87:fb:55:da:27:84:e2:
b1:75:ff:cc:da:b3:51:3a:3f:42:02:48:df:cd:d0:
a1:fb:e9:4a:0a:1e:00:78:b9:fb:4f:37:03:a9:07:
a6:6c:45:30:c2:b8:d6:81:70:87:16:9f:bf:23:ab:
d0:81:09:6f:96:d2:1a:57:ff:f7:be:26:26:32:73:
6d:66:ca:43:d8:71:0c:22:90:30:31:11:3e:e5:e5:
a5:7c:90:8d:12:81:2a:11:a2:40:2d:0f:59:e3:1d:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:28:69:AB:B7:82:F0:75:19:88:E5:9D:98:96:73:4C:62:BE:64:29
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.96.0/24
185.36.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:33:ac:7a:fa:a1:76:3d:3c:0e:9d:f1:02:93:28:e8:d4:00:
a1:9f:b1:dd:52:7c:b9:7c:cb:b9:04:f9:c3:c2:cf:83:08:70:
61:35:7a:5e:fe:eb:85:7b:74:61:6b:f4:d5:0c:b7:97:a3:11:
07:af:40:03:fc:a9:da:95:59:74:9a:d5:1b:97:44:4b:95:d6:
0a:d3:94:77:63:d5:64:46:82:8c:09:d1:79:e1:7f:3f:06:d3:
a0:5c:1e:4a:60:6f:76:47:43:2e:66:71:21:5a:bd:66:9f:05:
37:b7:c5:90:ee:d1:ff:ca:42:ce:ae:07:52:45:ea:c5:14:ed:
b1:80:61:eb:04:44:f7:86:8a:7c:7c:a8:6d:91:66:d6:57:b2:
f5:dc:f2:8b:2a:79:29:0e:38:fc:9e:8c:94:7d:31:94:34:36:
e0:50:8e:bc:6e:fb:85:3f:21:14:97:66:5e:4c:5e:39:ec:5f:
3c:dd:1d:56:98:c0:db:75:b9:dd:92:88:97:7c:53:11:77:db:
d0:86:03:ca:c1:3e:7a:14:86:64:82:3f:ac:49:ca:eb:56:07:
18:4e:29:b7:c1:eb:5c:5a:ba:22:65:8d:d3:2a:5a:1a:68:8e:
93:46:34:2a:6c:43:18:1a:3a:d1:b7:6f:9f:81:f8:45:92:0f:
15:11:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:53:34 2025 by rpki-client