Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/aCk5yRvbKuue3ENXzksiDKszHOM.roa
File: aCk5yRvbKuue3ENXzksiDKszHOM.roa (raw, json)
Hash identifier: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=
Subject key identifier: 68:29:39:C9:1B:DB:2A:EB:9E:DC:43:57:CE:4B:22:0C:AB:33:1C:E3
Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial: 01942369B3B04F9449C06556A82305408BBA
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/aCk5yRvbKuue3ENXzksiDKszHOM.roa
Signing time: Wed 01 Jan 2025 19:48:37 +0000
ROA not before: Wed 01 Jan 2025 19:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60868
IP address blocks: 185.25.32.0/22 maxlen: 24
2a00:77e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b3:b0:4f:94:49:c0:65:56:a8:23:05:40:8b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Validity
Not Before: Jan 1 19:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682939c91bdb2aeb9edc4357ce4b220cab331ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:87:f3:ac:9f:77:e6:68:db:c0:c6:09:a6:
1b:b0:be:f4:1e:88:86:c7:c1:5a:fc:80:c8:36:cc:
c2:23:53:55:e2:8d:44:21:4b:71:c5:2b:86:10:13:
f9:87:53:8f:75:c8:20:88:b2:8d:d1:1d:a0:57:55:
23:8b:67:e4:c3:9b:0d:d4:34:ec:cc:5b:06:db:1b:
81:0e:7d:bd:76:4f:d1:12:01:44:37:ab:0b:f4:ea:
db:fd:98:fb:d8:17:1a:12:92:a9:45:b5:16:34:30:
2e:ed:04:3f:ef:62:51:7b:e0:07:d6:c8:cb:3a:43:
5d:e7:e8:0d:e7:5f:5f:41:8b:71:ae:e9:fd:47:6a:
46:82:b9:99:ed:ce:8a:67:a2:82:dc:76:e9:73:89:
ea:1a:54:7d:38:4c:e8:0a:af:46:6d:38:20:d5:5d:
17:98:3c:fa:07:25:e9:b5:99:d0:77:a1:b0:af:c4:
1f:2c:c3:91:00:a5:42:9a:df:5f:40:cc:87:de:92:
95:44:f9:87:e5:4b:3f:9e:e1:67:3b:b8:12:0f:1c:
4c:b6:c1:21:13:9b:06:de:33:8e:dd:10:89:92:6b:
bd:74:ee:8c:5c:28:63:4f:7f:e3:31:75:e9:d4:41:
3b:c0:f0:4c:94:99:98:86:8f:31:43:4a:d3:f6:84:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:39:C9:1B:DB:2A:EB:9E:DC:43:57:CE:4B:22:0C:AB:33:1C:E3
X509v3 Authority Key Identifier:
keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/aCk5yRvbKuue3ENXzksiDKszHOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.32.0/22
IPv6:
2a00:77e0::/32
Signature Algorithm: sha256WithRSAEncryption
6d:df:02:06:10:c5:f1:05:a1:64:43:f4:74:20:69:93:44:db:
62:a6:b2:84:3e:c9:2a:21:7e:f6:62:b7:ae:18:66:23:55:b1:
1f:dd:86:d6:02:69:2a:df:4a:c2:84:1f:0b:8c:7c:8b:7a:20:
5a:f0:3d:3b:8a:ad:45:f1:96:3e:09:b6:1e:a5:38:e2:95:d0:
84:fe:f2:63:7b:d2:57:b2:b1:b6:4e:36:cd:19:e6:87:5e:81:
cc:74:83:d9:cf:8c:c3:23:ac:d0:29:1a:ea:4e:e3:09:3c:c3:
84:c9:80:1d:c7:a5:41:a6:f2:25:d9:6e:3b:ca:bc:51:30:f9:
31:30:fb:01:75:7b:a0:06:0f:8d:4a:dd:dc:a9:ba:91:4d:24:
6f:16:ea:11:4f:2f:13:8c:c1:55:7a:47:7d:54:50:6c:cc:01:
c5:70:9f:10:52:50:77:2f:08:c8:47:26:16:e8:00:12:e8:4a:
73:ba:de:4a:e3:c2:01:96:b1:55:b2:cf:11:c8:9a:bd:c1:68:
1c:f5:4d:49:5c:36:30:63:df:ae:86:9c:c0:bf:36:7a:4e:ec:
b4:ee:2b:aa:dd:88:05:e1:7f:b7:6c:55:b7:88:80:65:25:c2:
58:8f:2b:89:e3:1f:24:8d:8a:bb:8c:a5:26:1f:fb:45:5d:a1:
a6:8b:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:39:03 2025 by rpki-client