Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1TcXaqqR1_ZKpC5wVadTdxuukxw.roa
File: 1TcXaqqR1_ZKpC5wVadTdxuukxw.roa (raw, json)
Hash identifier: +aHRoyHj29kaTTmbUvmAcqee3qVM7LYdakDn99RdKSE=
Subject key identifier: D5:37:17:6A:AA:91:D7:F6:4A:A4:2E:70:55:A7:53:77:1B:AE:93:1C
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 0194AF79DCBB1138899C7A65F91691EDDC45
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1TcXaqqR1_ZKpC5wVadTdxuukxw.roa
Signing time: Wed 29 Jan 2025 00:33:06 +0000
ROA not before: Wed 29 Jan 2025 00:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200461
IP address blocks: 185.23.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:af:79:dc:bb:11:38:89:9c:7a:65:f9:16:91:ed:dc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Jan 29 00:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d537176aaa91d7f64aa42e7055a753771bae931c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:2e:55:a6:aa:74:7f:d1:b0:bb:50:91:68:
19:fb:98:ba:18:d0:21:64:a5:9b:bb:19:c9:f8:d8:
4c:5e:66:4b:5d:a4:fe:de:a1:88:96:4b:d7:3d:4b:
1a:a6:fa:8f:21:0c:1e:4e:a6:b9:cc:cd:4d:48:1f:
05:ac:4b:81:7c:8f:5a:af:b4:ff:ef:90:ed:05:78:
b4:65:fa:56:dc:21:60:dc:43:97:37:1f:0b:fc:e4:
d8:99:21:d3:ba:ea:3b:22:6d:9b:59:f4:22:3e:1b:
1f:27:6f:dd:1c:fc:50:a6:29:3f:64:3f:fa:db:3d:
92:72:52:25:d2:64:aa:24:50:7e:aa:ae:f3:bf:87:
2b:c4:7d:27:8f:d0:8e:f0:2f:2c:06:93:96:cb:18:
4d:14:f9:a0:72:8f:b9:33:43:44:9e:e6:3c:65:3d:
e6:8a:98:d4:94:0a:d3:71:e0:14:d1:e9:f1:32:a5:
3f:20:9c:fd:c7:25:5b:c4:21:9d:46:00:64:d1:3c:
e2:a2:d8:ca:60:92:34:99:71:da:8b:dc:c9:6b:da:
67:d7:9f:f0:d6:37:cc:44:57:0d:c1:0c:d1:d2:7c:
36:5a:41:0c:3a:d2:57:65:e4:17:cc:07:2a:fc:89:
75:92:2c:e5:83:75:34:6c:36:f1:8d:ed:11:7c:a9:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:37:17:6A:AA:91:D7:F6:4A:A4:2E:70:55:A7:53:77:1B:AE:93:1C
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/1TcXaqqR1_ZKpC5wVadTdxuukxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.5.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a8:02:12:6e:ca:8f:a9:f9:53:11:e8:0a:03:a4:6d:7a:91:
8b:db:04:97:74:72:02:ea:79:a1:b4:57:89:a5:56:8f:9a:61:
45:d2:7a:0d:83:0f:ce:8f:e5:4d:52:38:8c:9c:27:93:f2:27:
9b:dd:9f:cf:31:cd:51:15:52:e2:8e:ab:74:5e:f1:a6:2e:9a:
54:4f:a5:5b:67:35:5b:c1:2d:fe:a8:47:b5:99:12:bc:8e:ed:
90:7a:63:2d:0c:df:51:9b:13:de:dc:b1:df:f6:e7:41:1a:3b:
e9:2b:07:15:0d:b3:6e:bc:c4:d6:1d:c5:ca:c0:3c:c8:6f:c2:
ec:35:a0:d8:45:00:f3:5b:4b:d1:d9:a7:5d:34:74:54:f6:02:
a2:2c:6b:df:0c:27:0c:a2:0a:60:d6:25:9b:98:c3:e3:0d:ed:
96:49:6a:11:df:1f:a3:57:26:68:7a:84:d0:8e:7c:5b:fe:1e:
6a:f1:ed:23:f6:19:b2:45:59:74:b8:a1:3d:a6:5f:3a:50:f8:
ee:21:8b:09:74:d1:09:7c:ea:5f:f3:1c:d9:b4:c3:3f:6a:37:
6c:cd:08:73:6c:cf:cb:57:27:90:8a:c8:93:65:e3:9f:67:13:
6e:50:8d:7b:74:8c:16:d3:db:e5:12:04:98:ed:ed:4c:25:20:
d3:37:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:30 2025 by rpki-client