Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/1-NdTr5SG40wO4Kbvwy1COocgFrk.roa
File: 1-NdTr5SG40wO4Kbvwy1COocgFrk.roa (raw, json)
Hash identifier: oe54LaKxNplT5wDF3qIUM33hwicykogi4I92CR9BK78=
Subject key identifier: F8:D7:53:AF:94:86:E3:4C:0E:E0:A6:EF:C3:2D:42:3A:87:20:16:B9
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 01966BDB84E15E799A7705507C248BF11E7C
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/1-NdTr5SG40wO4Kbvwy1COocgFrk.roa
Signing time: Fri 25 Apr 2025 07:31:10 +0000
ROA not before: Fri 25 Apr 2025 07:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56841
IP address blocks: 185.23.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:db:84:e1:5e:79:9a:77:05:50:7c:24:8b:f1:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: Apr 25 07:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d753af9486e34c0ee0a6efc32d423a872016b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:b5:82:2b:4b:04:19:25:df:2e:2a:57:a2:
80:b9:3d:7d:0a:46:4e:42:09:1b:cc:ba:47:f4:a4:
75:a4:71:60:5b:93:2a:37:ba:44:26:41:2b:20:b6:
58:26:9e:47:97:1c:ee:f5:92:05:c4:e9:25:3c:e9:
70:81:e8:cd:5e:96:65:e6:c8:26:cf:73:18:fe:e2:
26:d0:06:18:ae:08:45:c9:57:fe:e1:2c:2a:c0:a1:
75:e0:69:9f:e4:66:78:40:1c:8b:c2:d2:67:46:25:
a8:d5:a9:e0:f3:0f:27:b9:8d:e7:1d:47:e8:9c:b2:
ad:12:65:77:cf:62:ff:c4:66:d1:b3:50:e9:80:12:
17:d4:20:af:67:7e:71:61:ed:43:ce:3a:72:da:85:
2b:bd:9a:d8:c6:f7:64:07:80:c4:70:29:40:cf:40:
e9:ea:ce:1e:1b:58:16:2a:d8:b1:b1:80:32:82:c9:
97:70:eb:5e:35:0d:cd:5b:c2:c5:a6:1b:8b:75:0d:
a4:ed:a0:4c:70:2c:b6:a7:33:26:26:e5:8c:e4:2d:
13:72:70:3e:94:3b:45:24:d6:81:9b:c4:b3:d4:cb:
11:89:e3:e0:e4:50:f4:7e:8f:ef:04:78:cb:25:6a:
f9:11:2e:0f:d2:b6:4e:ba:69:e2:17:ed:a4:a1:58:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:53:AF:94:86:E3:4C:0E:E0:A6:EF:C3:2D:42:3A:87:20:16:B9
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/1-NdTr5SG40wO4Kbvwy1COocgFrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.111.0/24
Signature Algorithm: sha256WithRSAEncryption
33:1e:cf:7a:11:76:31:ea:32:16:2c:22:61:09:04:ce:91:a6:
af:10:90:f2:b6:37:54:7a:5d:67:08:e3:ac:a3:b9:72:d9:e2:
c6:bc:54:23:d5:48:5f:e8:f9:f1:b0:2e:76:14:45:5d:13:a1:
aa:ed:05:43:52:8f:ec:b5:ca:b9:f6:05:a2:16:65:fa:c9:68:
c0:5a:27:44:43:b7:fb:dd:d4:63:fb:c0:f8:79:60:82:90:4a:
9b:d3:d4:02:e6:4e:f1:1b:4c:e5:52:50:cd:eb:dc:64:e3:02:
49:c4:b7:f5:27:b6:1a:d9:0a:f6:ae:d8:79:d6:a4:c6:95:e1:
c2:a1:9b:4b:8b:fb:d0:91:25:02:2e:0c:33:60:7a:b0:c9:1a:
46:bb:02:b8:1d:d7:9e:d2:02:01:15:f5:d6:42:06:35:84:1a:
74:6e:ce:b6:51:5f:bc:b3:6d:2a:89:86:cb:86:89:6f:3d:db:
3d:53:e2:e3:72:aa:a6:a8:4e:3f:a1:01:06:b1:50:dd:37:5a:
83:1d:28:ee:4a:23:b9:14:ef:98:16:ea:a1:03:e9:09:b5:90:
cc:6c:d3:92:55:13:fd:43:cd:ac:1c:43:3c:30:aa:b8:01:4f:
4e:22:9a:a4:bd:c4:60:a0:07:9f:3c:09:6f:6c:a6:9e:81:4d:
a7:39:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:48 2025 by rpki-client