Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/l-fA27baArnfz8uDdDUN4TrASTU.roa
File: l-fA27baArnfz8uDdDUN4TrASTU.roa (raw, json)
Hash identifier: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=
Subject key identifier: 97:E7:C0:DB:B6:DA:02:B9:DF:CF:CB:83:74:35:0D:E1:3A:C0:49:35
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 019424B38698DF3E015E86E7FCCABAEAFB37
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/l-fA27baArnfz8uDdDUN4TrASTU.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207452
IP address blocks: 185.244.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:86:98:df:3e:01:5e:86:e7:fc:ca:ba:ea:fb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97e7c0dbb6da02b9dfcfcb8374350de13ac04935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:ff:13:d9:fd:e2:56:e6:d8:3c:cb:91:5d:
9d:e7:cd:2f:e8:0c:5f:29:38:e0:4f:a5:99:e7:18:
7d:4f:8f:78:1f:72:26:da:3e:c0:0b:09:6c:4c:46:
30:38:3e:13:ba:5d:2e:a2:f3:9c:79:05:f8:fe:bc:
0a:5b:94:4b:19:70:38:c2:0d:0f:c7:2c:bb:5c:bf:
df:d6:74:95:97:48:a0:9b:b3:f0:08:08:25:d1:1c:
1e:29:df:c8:2f:50:68:33:b3:65:f7:c9:c6:d8:7c:
b2:12:f1:a1:68:0c:0e:66:c4:81:9c:35:42:ca:96:
bc:33:6a:cd:9e:54:36:48:7e:6b:ad:3d:3a:19:ed:
6a:3c:da:8f:bd:09:a8:99:3b:02:33:f1:7e:1f:a3:
e6:de:ec:19:95:e6:0a:ee:b7:99:f8:aa:a2:f6:a8:
0c:d9:bb:b3:e2:76:25:71:c5:42:16:3e:8c:f8:28:
c4:3a:05:5e:a2:26:c3:86:2f:ed:b1:dc:ef:44:21:
dd:99:ae:47:c6:86:e5:9f:d9:2b:dc:a1:cb:5d:42:
db:84:e3:5a:4c:85:cf:84:cf:f9:c3:d7:6f:b1:d5:
90:9c:52:6d:69:3b:41:d7:55:10:1a:ad:89:da:96:
6c:5c:2f:9c:76:b9:94:d7:8a:9a:46:52:19:35:55:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:C0:DB:B6:DA:02:B9:DF:CF:CB:83:74:35:0D:E1:3A:C0:49:35
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/l-fA27baArnfz8uDdDUN4TrASTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.248.0/24
Signature Algorithm: sha256WithRSAEncryption
50:34:08:29:5a:19:e8:d4:56:66:2b:6f:76:2a:7e:ba:a0:92:
9a:d3:9d:93:83:17:08:78:ee:f3:c3:15:d5:b6:48:f8:34:6a:
20:d9:98:85:52:26:91:b4:0c:fd:83:11:a2:4a:6b:85:fc:e2:
e4:e5:cd:6d:eb:58:6b:58:2b:2a:e8:02:b0:07:5b:58:e6:8b:
e6:0f:92:c8:46:f8:a9:41:c3:0b:01:64:37:eb:73:40:99:1c:
aa:51:c4:e2:3d:e7:b1:fe:96:10:d7:b5:d8:21:e5:22:eb:4a:
00:9b:dc:9b:49:30:bd:57:c1:11:f7:c6:87:26:68:78:b7:88:
d1:0a:c3:9d:c6:94:56:70:7f:01:61:46:03:ed:42:d4:5e:26:
b8:0a:c5:03:ac:e4:3c:26:50:50:21:4e:85:33:26:7f:0f:da:
ab:c1:d0:f1:2d:f7:53:b2:60:c1:c7:8f:c7:d8:8a:18:98:7c:
1b:3a:cf:8d:1a:50:5c:09:5f:fb:27:fc:15:51:ab:36:29:f3:
0e:e5:50:13:98:e4:43:cc:58:5d:5f:72:ae:bf:fb:e0:d5:e5:
c7:40:21:b6:2e:52:ba:35:c0:8d:05:97:07:03:45:aa:54:cc:
4a:fc:5a:de:1a:69:91:11:58:ba:0b:46:59:c1:4d:ba:4c:97:
08:c2:da:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:04:56 2025 by rpki-client