Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/0cwv1kps50n5fxH17jZ6DrIm1N0.roa
File: 0cwv1kps50n5fxH17jZ6DrIm1N0.roa (raw, json)
Hash identifier: undM2lyLTll3NMITFEXa/JcW5GP1KelrAOfh7Rau6zQ=
Subject key identifier: D1:CC:2F:D6:4A:6C:E7:49:F9:7F:11:F5:EE:36:7A:0E:B2:26:D4:DD
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 019421B21084C47DF025635CE4864CB4EE62
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/0cwv1kps50n5fxH17jZ6DrIm1N0.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44926
IP address blocks: 185.168.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:10:84:c4:7d:f0:25:63:5c:e4:86:4c:b4:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1cc2fd64a6ce749f97f11f5ee367a0eb226d4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:c1:00:dd:7c:0f:a7:82:71:7a:d9:fa:53:
d1:2b:14:7f:02:5a:04:26:58:a1:b6:2d:33:7d:f5:
36:57:31:1b:fa:e0:6f:5f:39:c9:49:6a:c2:7d:83:
bb:b9:d2:23:ae:72:00:1c:79:d0:d2:6e:7c:ac:9c:
3d:ba:2d:ae:af:0d:a2:e6:79:e1:3b:ce:d9:c5:b3:
4b:72:ad:c6:74:21:13:c0:95:23:c1:e2:19:ec:db:
64:d1:96:6b:06:b6:b2:03:96:e4:2f:7b:61:ab:a3:
7e:68:56:57:f1:f2:05:cd:1a:e0:a3:a9:13:8a:99:
aa:f7:91:af:14:cf:f5:38:87:82:9a:c0:c4:bb:01:
b9:df:dc:58:f8:ee:26:a1:4e:e2:00:55:1e:dd:8a:
41:f2:1e:a3:1f:d7:d1:5e:32:d7:0f:92:32:56:a4:
ac:ad:54:c7:9a:6d:16:03:99:ac:62:ab:23:90:b1:
18:f6:4f:59:bb:ec:ba:77:3f:d8:81:94:bd:2a:3c:
5f:5b:56:66:99:c2:2c:ac:6b:82:f7:ef:7b:27:49:
50:dd:d3:5f:bf:59:c9:58:af:9a:33:ab:fb:95:56:
0b:2d:e5:29:14:42:cb:7e:9a:d8:8b:27:8e:b8:9d:
2a:3d:29:a0:1b:74:62:9f:df:36:d1:e4:a6:8b:3c:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CC:2F:D6:4A:6C:E7:49:F9:7F:11:F5:EE:36:7A:0E:B2:26:D4:DD
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/0cwv1kps50n5fxH17jZ6DrIm1N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.161.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6c:fd:cb:31:a3:3d:7c:38:32:3c:53:7b:cf:35:eb:34:17:
a4:77:15:09:59:eb:d9:0c:99:5b:21:36:bf:0c:24:e8:d7:ee:
ab:7a:b7:62:8c:66:5e:7f:06:cb:81:f6:65:4f:07:35:f1:8f:
bb:8f:83:3f:bf:b9:7c:2a:05:fb:ea:40:39:0d:25:e5:bf:ce:
52:31:b5:08:0d:af:f8:62:cb:56:08:27:4a:1d:d9:16:52:b1:
19:cb:7c:3d:19:5a:9c:3c:85:0f:06:72:88:1b:30:79:31:1e:
eb:fe:af:8a:c7:62:c9:f5:e7:60:59:46:3b:a3:f0:ed:ee:0d:
b4:11:8c:a3:f8:fb:49:67:70:43:fb:8d:18:f8:b8:1c:73:d2:
e9:1d:a8:09:a7:54:cf:32:50:c3:1d:cf:99:e7:b0:16:ee:a5:
47:60:04:87:3b:09:e4:26:52:59:05:08:13:2e:9f:30:81:47:
cb:61:5e:7f:fb:c1:6c:03:aa:c4:b2:32:4f:c9:1b:e1:0e:b5:
34:59:68:3d:3b:e3:7c:95:8b:ba:ed:84:89:87:49:f8:7e:3f:
e0:87:ac:0d:af:92:1a:95:e3:53:01:0c:05:e9:31:64:5d:ee:
ab:60:88:c7:24:eb:34:6a:4f:9b:13:22:72:7b:4d:c3:f1:ca:
81:c5:1d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:55 2025 by rpki-client