Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tp85miaZEXw3Jo9EKI88rJNAxCY.roa
File: tp85miaZEXw3Jo9EKI88rJNAxCY.roa (raw, json)
Hash identifier: w1A6qFijgoLv5j1rHfN1LVempKoIwt4pkO+GOzCoyds=
Subject key identifier: B6:9F:39:9A:26:99:11:7C:37:26:8F:44:28:8F:3C:AC:93:40:C4:26
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 01942521883646FEBF48D3D912B70A4207DD
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tp85miaZEXw3Jo9EKI88rJNAxCY.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 185.156.184.0/24 maxlen: 24
185.156.185.0/24 maxlen: 24
185.156.186.0/24 maxlen: 24
185.156.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:88:36:46:fe:bf:48:d3:d9:12:b7:0a:42:07:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b69f399a2699117c37268f44288f3cac9340c426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:e5:be:14:6f:50:94:82:b0:d3:e5:0b:ee:
2c:a2:2a:d6:14:6c:9d:d6:54:64:ed:16:5c:7d:fa:
35:b8:70:4b:e8:92:d6:bc:e3:a0:83:d5:59:23:db:
5e:b4:19:22:4f:8d:6e:15:f6:72:1a:83:4d:97:69:
a2:9e:b6:f2:ad:d5:8c:1e:9e:43:00:d0:4c:88:78:
0f:7f:06:e3:28:26:f4:3f:26:0b:1e:d6:d6:ae:e4:
a3:9d:dd:41:92:4c:b1:c4:23:ea:a1:74:b6:cb:8b:
40:97:03:12:9c:a9:ec:0f:68:21:cd:e4:02:54:83:
f6:a3:a6:5c:1c:fc:c8:f2:e1:cf:14:0b:75:61:ae:
9c:5d:cb:a5:57:78:c7:59:63:bd:d9:93:9b:12:a4:
bb:0e:aa:13:0c:ed:19:1c:c3:81:33:7f:b5:f2:00:
52:9c:f4:49:cf:f7:27:ad:92:9b:0c:b8:ab:d0:e7:
4e:4a:9e:ae:cd:42:9e:64:27:40:3f:64:db:bf:5b:
87:9b:66:15:d1:74:2c:ef:26:00:8b:6f:d8:a2:9a:
d9:43:be:66:f9:ca:e0:95:98:c0:b6:81:cf:24:d0:
08:5f:40:47:77:0e:d1:f6:ca:56:47:68:43:72:14:
80:c3:39:93:81:e6:aa:a5:ee:27:83:b7:44:90:2a:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9F:39:9A:26:99:11:7C:37:26:8F:44:28:8F:3C:AC:93:40:C4:26
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tp85miaZEXw3Jo9EKI88rJNAxCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:c2:02:cd:d7:fc:4e:fd:26:f6:ae:d5:be:f0:91:7a:e3:84:
02:91:37:db:3a:ab:2a:1f:16:e9:13:cf:df:52:d8:18:8b:a1:
45:c7:ba:b1:01:4d:76:a9:1f:fc:c8:c4:fa:dc:8a:5e:a3:e3:
b6:7f:62:b7:23:79:de:37:aa:d8:11:cd:74:62:d8:67:9d:dc:
92:44:ba:a1:b6:d3:6e:32:03:6f:7a:b1:68:68:1e:d3:1c:31:
d3:b3:43:23:5b:7e:5f:0f:ec:9d:42:8b:67:92:e9:9d:d0:75:
94:39:19:da:79:f2:21:67:20:41:79:52:8d:65:c8:b7:07:df:
74:66:99:97:1e:1b:a3:97:14:b3:ae:84:a5:be:4a:e0:ed:41:
64:d3:1e:81:8f:ab:92:e1:6f:c3:55:c2:91:d8:9a:56:17:1c:
e2:a4:58:6a:86:14:3c:c7:42:3a:7f:ec:41:6f:eb:68:c0:d2:
a8:60:e8:6a:69:36:68:72:cc:77:fc:8a:52:47:9f:ee:2a:46:
ef:33:73:17:df:e9:53:74:de:fb:e2:f3:ec:52:89:7a:62:03:
98:9e:a2:a4:a8:d5:00:ec:98:cc:b0:0a:19:06:80:6f:66:f9:
5a:ad:31:67:31:4f:6e:bb:0e:8c:f8:29:c2:74:c6:7d:0b:fb:
f0:b1:54:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:12 2025 by rpki-client