Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/cOWofKyb3NN8nv4CWZV7MLxAcXc.roa
File: cOWofKyb3NN8nv4CWZV7MLxAcXc.roa (raw, json)
Hash identifier: LjkxNR+VtLN8pFku0A8FzCtI0cGNobOpe7LNW6GMeZ0=
Subject key identifier: 70:E5:A8:7C:AC:9B:DC:D3:7C:9E:FE:02:59:95:7B:30:BC:40:71:77
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 019422FC0FE648DACD92386D6BA3123816FA
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/cOWofKyb3NN8nv4CWZV7MLxAcXc.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13127
IP address blocks: 185.36.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0f:e6:48:da:cd:92:38:6d:6b:a3:12:38:16:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70e5a87cac9bdcd37c9efe0259957b30bc407177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:1d:b1:43:cf:f5:20:0b:c1:11:10:d2:13:
d0:ab:56:79:32:6b:c6:49:3d:1c:24:3c:dc:0b:12:
6c:1b:0c:b4:93:f0:9e:8a:10:f6:ef:fd:43:10:86:
d2:19:50:d8:b3:11:7d:85:63:16:95:a4:88:99:8d:
9f:7c:fb:7f:70:ba:2b:ef:6d:cb:bf:fd:53:51:9d:
8d:ee:2b:53:e9:12:3a:85:6e:ad:b3:98:7c:a2:f4:
ab:d6:8d:64:ea:60:00:99:2a:7f:1c:70:2a:41:32:
cf:f5:c1:3c:8b:39:a4:0d:06:0a:96:40:71:9e:8f:
fc:d3:be:77:77:b3:8c:e8:25:c9:91:3f:73:62:51:
e8:11:03:ff:f2:b0:93:d4:23:d3:48:70:a6:48:14:
0b:7c:a0:39:f3:9c:17:a7:59:7f:f1:08:07:db:63:
14:af:10:02:4a:3c:b1:00:8c:92:8b:51:be:ec:2e:
e3:94:43:03:c7:91:05:ce:22:ed:b8:65:8e:3f:5a:
4e:80:b4:48:fc:6e:b0:72:73:c5:20:66:68:a6:51:
b7:73:5e:9e:40:8f:18:1e:1d:2c:3c:ff:19:5c:21:
58:84:3e:b5:a3:d4:a8:36:f4:ae:15:d2:b2:eb:73:
a5:88:51:d7:5f:92:e0:43:bd:23:e9:96:80:21:37:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E5:A8:7C:AC:9B:DC:D3:7C:9E:FE:02:59:95:7B:30:BC:40:71:77
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/cOWofKyb3NN8nv4CWZV7MLxAcXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.41.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5c:3e:e3:e7:d1:20:54:89:ea:07:06:62:fe:81:09:0d:70:
c8:bf:58:36:eb:79:2f:6d:39:91:d7:60:62:a3:bb:8e:b4:34:
1b:10:56:1c:e9:16:c5:5c:0f:df:a9:99:ee:cc:b8:c5:50:e5:
20:1d:6a:d4:7b:dc:9b:15:57:e0:8e:33:0d:30:32:7f:58:d1:
f8:fd:99:8a:26:aa:82:65:08:56:e4:3b:4a:ac:47:c2:35:20:
20:cb:c3:58:e1:f0:2d:2b:d7:35:dd:95:2f:09:f6:15:ec:4a:
0d:2e:0a:1c:53:b6:49:20:5d:62:4b:a1:be:8b:7a:f4:c7:16:
e2:40:e3:d3:cc:a6:4a:eb:91:fd:55:aa:f5:00:e6:7c:66:bc:
03:16:ce:37:8b:af:82:c2:30:18:12:03:8c:94:ca:55:0e:b6:
5f:91:67:c8:7e:37:48:03:b3:14:04:08:56:4c:de:6c:81:46:
a7:df:6e:82:d7:7c:56:b8:84:c9:bb:65:fd:cb:d8:75:4a:b5:
fc:f8:f7:be:bb:2a:37:cf:28:92:e1:7a:98:8b:0b:ba:31:19:
90:6c:ae:7a:c3:da:16:11:9e:c4:f6:d2:a4:f5:03:10:40:5a:
67:60:db:d5:63:6b:bd:93:86:45:f4:c7:a7:24:88:fa:17:1e:
da:e9:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:56 2025 by rpki-client