Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/gMn3NAKyq7saXpkPxZO8WkflotA.roa
File: gMn3NAKyq7saXpkPxZO8WkflotA.roa (raw, json)
Hash identifier: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=
Subject key identifier: 80:C9:F7:34:02:B2:AB:BB:1A:5E:99:0F:C5:93:BC:5A:47:E5:A2:D0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 0194228E008968985A61FE76C97E17253C87
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/gMn3NAKyq7saXpkPxZO8WkflotA.roa
Signing time: Wed 01 Jan 2025 15:48:39 +0000
ROA not before: Wed 01 Jan 2025 15:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60266
IP address blocks: 185.33.157.0/24 maxlen: 24
185.33.159.0/24 maxlen: 24
2a00:cb20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:00:89:68:98:5a:61:fe:76:c9:7e:17:25:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: Jan 1 15:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80c9f73402b2abbb1a5e990fc593bc5a47e5a2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:d8:3a:9d:fa:22:65:26:f1:28:95:e2:4b:
55:e7:6d:e7:8c:ce:a9:c9:00:3a:29:27:6c:fc:18:
c1:b3:dd:91:15:c2:ec:3b:00:94:1e:57:51:6f:b4:
78:e7:c0:f2:73:bc:9f:5c:f9:f2:dc:04:31:c9:7c:
ec:c6:9b:76:ed:81:2a:2c:c9:26:2d:4c:3a:fe:b6:
a8:05:4d:81:79:ae:c9:ac:c6:13:73:79:83:45:a5:
b9:ae:26:8a:32:13:d1:c1:a0:ce:52:d1:1d:6c:15:
06:79:4b:c9:d3:fc:73:6b:85:03:61:cf:1a:19:0b:
fe:3e:fe:f0:3c:32:d2:f4:a2:46:25:0a:fa:db:69:
46:e2:e5:e9:54:ea:8a:ac:28:e8:5c:a8:46:39:4f:
64:97:a4:a4:24:3b:a3:08:20:ae:6d:21:52:19:6a:
b7:d1:46:48:d1:c2:4d:f0:6e:87:2a:4f:f9:be:17:
cb:1a:1f:6d:bd:8b:3f:25:cd:3b:7c:fc:68:4b:83:
27:eb:58:a6:b2:5c:d6:51:42:96:98:61:a9:40:b1:
47:bb:bb:e1:69:2f:3e:05:91:8e:c6:9c:41:5d:ae:
05:62:6e:b4:c9:b7:84:5e:d9:a8:99:28:a4:ad:5d:
fe:95:ea:d5:70:24:f4:ac:33:09:c9:fe:c8:65:a5:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:F7:34:02:B2:AB:BB:1A:5E:99:0F:C5:93:BC:5A:47:E5:A2:D0
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/gMn3NAKyq7saXpkPxZO8WkflotA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.157.0/24
185.33.159.0/24
IPv6:
2a00:cb20::/32
Signature Algorithm: sha256WithRSAEncryption
94:f5:a9:2b:00:15:06:9c:70:9e:b1:8b:cf:f3:c7:8e:1e:af:
e3:94:ed:d1:2d:9c:80:22:aa:4a:08:6d:6c:0e:bd:a0:cf:1a:
dc:63:34:87:a7:a2:e5:28:90:d8:90:c3:34:0a:f5:e8:d8:a4:
9e:19:be:9a:1d:bf:0a:56:2b:2f:57:4b:98:fd:2f:49:af:4f:
43:f1:31:a2:96:c3:73:1e:94:ef:3e:15:af:cd:18:e6:80:cb:
40:1f:ab:00:16:f6:28:28:37:8d:6c:50:c2:41:08:29:a3:af:
7d:69:79:f9:24:91:c6:7d:39:cb:17:ab:ba:c8:33:26:10:e3:
d0:b8:4f:e7:1d:5b:e9:0f:67:3c:f8:d8:a2:4f:2c:91:58:05:
a7:56:e5:75:85:55:39:03:dc:e9:75:ef:e7:c1:8a:87:6a:fb:
09:ce:c4:dc:ef:69:54:e2:ac:7b:27:f6:af:2b:2c:d8:8f:33:
ed:db:ea:21:04:ff:69:42:ea:c6:2d:0f:c1:c9:7a:7a:6c:db:
97:e2:24:c2:62:0a:08:9c:b9:2b:fe:76:68:7f:4f:d3:40:c5:
da:15:3c:61:1d:32:fb:96:c0:2a:db:fd:f4:3e:9c:3c:17:57:
6b:27:92:83:dd:c4:a7:99:73:1f:8e:be:ce:bd:2f:b4:05:7b:
ab:ab:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:43:55 2025 by rpki-client