Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa
File: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (raw, json)
Hash identifier: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=
Subject key identifier: 84:38:49:D8:E9:AE:00:29:A2:ED:0F:CF:CA:C8:B4:53:2E:7E:08:18
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 0194252156AAE9126C2F7B41CD9FCF48CA72
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 185.78.120.0/24 maxlen: 24
185.78.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:56:aa:e9:12:6c:2f:7b:41:cd:9f:cf:48:ca:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=843849d8e9ae0029a2ed0fcfcac8b4532e7e0818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:e4:14:fe:8b:35:e7:87:e0:bc:1f:cb:95:
b2:c1:68:ee:cb:1b:c8:4f:88:3a:9e:ce:b0:7f:9e:
bb:20:c5:df:5c:e6:10:74:74:df:f1:c6:2b:32:b6:
e1:99:22:10:7f:fc:34:d7:5d:80:8f:a7:4e:3a:71:
3a:1b:e3:3f:f6:09:a1:dd:8a:cf:29:8d:c7:e1:5d:
ad:7c:83:f5:3a:f2:58:d0:58:a0:b0:aa:ae:ab:40:
54:20:8f:62:fe:5e:c4:95:a9:29:99:93:b5:b6:0d:
87:59:4c:94:3b:58:6c:75:f5:4e:f8:ad:fb:6d:58:
83:3f:8b:30:bc:ad:06:cf:39:ce:7d:a0:0a:cc:7f:
8e:a9:04:64:e9:16:a8:2f:81:4c:34:1c:68:3f:d0:
af:78:c6:da:51:61:fb:4b:53:b5:d9:76:f0:ae:aa:
a8:61:e2:66:e0:99:07:87:5e:1f:3a:64:fa:3b:51:
46:a6:3c:bc:98:74:bb:a5:4d:0d:f3:88:ef:42:4c:
27:85:f0:5e:e1:8f:1b:fe:a0:b1:b0:0b:1a:7b:45:
ca:03:bf:14:b5:3c:91:65:45:ad:41:39:2a:05:dd:
9c:87:47:51:d6:c7:dc:d0:77:ce:6d:ff:a2:db:9f:
66:e6:88:4f:d1:21:47:a3:a2:04:79:ca:6e:6f:1a:
ee:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:49:D8:E9:AE:00:29:A2:ED:0F:CF:CA:C8:B4:53:2E:7E:08:18
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.120.0/24
185.78.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2e:a3:09:ac:98:b0:5e:8f:6f:18:18:d8:12:75:4a:5d:3b:
c9:4d:e4:54:6f:31:a9:15:f4:10:77:b7:d3:d1:79:e1:a2:50:
c6:f2:7c:64:df:e7:0e:f7:b9:f2:d3:63:b5:b8:64:1a:0c:ce:
66:d0:09:c4:18:02:94:e9:78:9b:3f:85:a4:5b:68:9a:af:26:
85:73:d1:2f:65:12:8b:c5:7a:9e:c8:15:ba:31:f1:f4:1c:ec:
26:84:d1:a6:80:3f:a5:d9:8c:fe:4c:6e:49:fc:e6:4d:ef:12:
fe:90:45:5e:c0:e8:0b:a9:d2:79:86:9f:92:f3:07:b0:2a:80:
56:01:95:ed:19:29:51:63:08:2a:91:b9:78:28:42:a2:9d:e2:
71:85:39:0b:2e:e1:2d:75:6b:3b:51:04:a1:d2:fd:5a:56:0f:
2e:d0:23:6d:1a:89:0e:1f:e2:c0:88:7d:8e:5c:3a:7f:bf:c5:
15:32:2d:f5:21:d8:19:c8:46:e9:30:66:a5:fa:0a:cd:eb:4d:
b3:46:a2:32:44:23:61:60:0c:bb:f7:82:d6:90:52:e2:62:65:
f8:9c:fe:0d:d4:71:66:b3:2a:a3:83:6e:0e:63:c6:14:19:a2:
23:70:9c:e9:4f:d9:b9:43:c3:82:65:12:97:d3:44:da:97:34:
e8:83:cc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:24 2025 by rpki-client