Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/_ImNSv6eqpMmc8LhLdIjg50bCa8.roa
File: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (raw, json)
Hash identifier: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=
Subject key identifier: FC:89:8D:4A:FE:9E:AA:93:26:73:C2:E1:2D:D2:23:83:9D:1B:09:AF
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 0194228D1CE584766DBD863BB2F0F52031A4
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/_ImNSv6eqpMmc8LhLdIjg50bCa8.roa
Signing time: Wed 01 Jan 2025 15:47:40 +0000
ROA not before: Wed 01 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51142
IP address blocks: 185.189.208.0/24 maxlen: 24
185.189.209.0/24 maxlen: 24
185.189.210.0/24 maxlen: 24
185.189.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1c:e5:84:76:6d:bd:86:3b:b2:f0:f5:20:31:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Jan 1 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc898d4afe9eaa932673c2e12dd223839d1b09af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:76:36:6d:53:7f:bc:b5:5c:14:e2:74:90:
01:f3:6b:ba:f8:bc:73:77:4f:db:43:7d:bc:7e:29:
8f:e1:2f:fb:c8:f2:45:80:7e:1c:02:ea:e7:c6:e7:
9f:1d:e9:49:23:3b:e2:26:b1:f6:d4:00:8a:5d:b2:
75:f1:58:89:a6:05:c2:50:f3:05:9e:6e:77:59:eb:
2f:83:9c:00:cf:db:8c:81:5c:eb:7a:f7:bb:30:b1:
46:2e:e1:1a:78:b5:c3:e7:65:34:a7:93:91:c1:c1:
83:e0:b6:c9:92:32:c6:8e:b2:03:d7:b5:fb:59:4c:
ce:52:6a:32:1a:3f:77:70:75:60:12:bf:f1:dd:c8:
85:2a:50:4a:47:07:5e:f2:fa:af:0f:ea:d2:09:3e:
c4:d3:09:54:81:f6:11:18:cd:d5:35:21:9c:1f:54:
43:81:65:e4:f9:0e:8a:bd:85:31:c6:23:35:cf:1f:
49:dd:a8:09:89:e8:0c:aa:5f:62:6f:f3:ff:53:b7:
a2:48:a9:0f:58:25:2a:59:d5:00:5e:b2:dc:df:8e:
6e:7e:4a:ed:6f:53:98:42:c0:23:c4:14:4b:7a:ff:
53:39:2e:2b:bf:0c:2b:be:63:ec:eb:c6:cb:08:31:
62:3f:c9:60:e8:49:43:19:0f:ec:be:8f:2f:a3:d3:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:8D:4A:FE:9E:AA:93:26:73:C2:E1:2D:D2:23:83:9D:1B:09:AF
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/_ImNSv6eqpMmc8LhLdIjg50bCa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.208.0/22
Signature Algorithm: sha256WithRSAEncryption
70:ac:2e:7e:e4:89:77:85:80:49:65:04:76:74:2d:cc:cd:90:
f0:18:ea:47:d2:82:76:75:0e:98:8b:57:cf:fd:77:6a:7c:1a:
12:b9:d6:a7:f5:8e:60:01:7a:09:fa:18:b1:47:4d:44:02:20:
1d:e9:47:38:b6:76:3d:4c:69:86:04:1a:cd:bc:fd:5a:91:e8:
36:b0:68:a5:e6:29:30:89:1e:92:ca:4a:4f:d2:db:21:db:d6:
67:46:cb:d9:88:41:ed:47:26:83:64:36:4c:f8:fb:08:c3:f2:
5c:0b:fe:40:4a:79:83:e9:86:0d:92:c9:6a:1f:3f:93:22:03:
93:11:b7:8b:36:24:a2:cc:2a:92:de:01:2a:03:2e:55:c6:0e:
4c:18:f8:e5:c9:9e:78:ec:49:00:13:bd:8c:45:d7:79:ad:85:
e5:94:ca:eb:30:ec:fa:92:9e:39:6d:dd:d9:ea:73:4d:be:2d:
db:71:ff:08:2b:b0:52:79:ae:82:52:43:c8:18:61:cb:19:cb:
9a:b7:47:7d:1b:c5:42:2a:3b:3b:2e:58:8a:01:77:32:bc:7f:
a3:e7:48:ed:c3:22:6f:53:4d:5f:c3:bd:ac:59:75:4c:6e:0c:
a6:77:9f:8c:b3:81:ef:7c:21:db:3b:b4:59:e7:51:5d:8f:38:
68:23:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:53 2025 by rpki-client