Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/stJA80yW4F1cSrmOzRPbXub7b1g.roa
File: stJA80yW4F1cSrmOzRPbXub7b1g.roa (raw, json)
Hash identifier: 5o9FX/sobhwcx2zWjhXbG+VgB450Fn7x7FoBORm3XUo=
Subject key identifier: B2:D2:40:F3:4C:96:E0:5D:5C:4A:B9:8E:CD:13:DB:5E:E6:FB:6F:58
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 019651F8EDB1932E10FB1178E8888A64F103
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/stJA80yW4F1cSrmOzRPbXub7b1g.roa
Signing time: Sun 20 Apr 2025 06:53:10 +0000
ROA not before: Sun 20 Apr 2025 06:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56815
IP address blocks: 185.140.240.0/22 maxlen: 22
185.140.240.0/24 maxlen: 24
185.140.241.0/24 maxlen: 24
185.140.242.0/24 maxlen: 24
185.140.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:f8:ed:b1:93:2e:10:fb:11:78:e8:88:8a:64:f1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 20 06:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2d240f34c96e05d5c4ab98ecd13db5ee6fb6f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:c9:ed:85:72:94:6c:02:b6:b2:b9:68:bc:
b8:75:63:cf:58:6c:b4:83:76:bb:c9:ea:3e:80:24:
0e:2b:f6:9f:bf:6a:ac:5e:d6:99:c3:81:22:df:80:
ed:00:e5:88:f8:dd:e5:60:94:e3:bf:86:f9:07:2d:
ae:11:5a:27:0f:bb:18:f6:62:a0:fb:b8:67:a6:51:
04:7d:c7:5b:a4:a1:09:79:2d:f4:38:fc:99:84:be:
2b:58:cc:dc:e4:a8:f6:ed:df:1e:41:83:f1:a9:a5:
d9:55:c1:90:e4:d7:a0:f2:b6:58:f3:06:fe:47:93:
85:d2:53:d5:72:64:7d:0b:5b:c8:87:e1:e0:16:99:
f7:6a:59:16:4d:f0:6c:7a:08:39:0f:bc:2e:ff:27:
f2:4d:b6:6f:15:86:b8:c4:f6:62:a3:1f:82:e7:0c:
b9:ae:26:4f:51:7c:b4:fd:87:2e:21:be:78:6a:a6:
e9:4f:e0:7a:d0:d9:db:1a:2b:d8:b5:fb:f9:ee:1e:
13:89:2e:53:dd:32:55:e9:ff:5a:5f:d8:60:42:04:
88:6e:5d:6c:52:6f:4d:b5:6c:6b:ee:04:89:e3:da:
89:29:34:0c:52:f9:33:41:c9:9d:1e:30:28:ee:9c:
ad:87:71:b7:ce:cc:8a:d3:d6:9b:a2:2b:8d:20:fd:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D2:40:F3:4C:96:E0:5D:5C:4A:B9:8E:CD:13:DB:5E:E6:FB:6F:58
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/stJA80yW4F1cSrmOzRPbXub7b1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:61:11:94:9c:18:25:de:ba:94:24:91:b9:e6:ff:5c:e6:23:
e5:1f:90:67:23:95:d1:59:60:95:b1:2d:cd:00:c5:c3:b4:ba:
85:97:14:96:20:c7:63:49:17:c1:95:dc:94:20:34:19:00:ba:
61:5c:1a:9e:10:49:29:da:9f:41:24:46:ca:7a:25:43:82:cf:
eb:51:ae:3d:06:2e:42:58:8a:8f:1c:d9:ad:25:3e:c0:b4:a6:
16:53:ff:5d:9f:11:0c:20:ab:f9:9a:e5:52:5c:05:84:a0:eb:
51:08:ad:81:81:46:99:ea:af:eb:71:6c:45:be:3f:f1:34:3b:
df:02:37:5e:cc:d5:15:f1:e7:87:9a:5e:c0:6b:0d:55:c0:79:
40:fb:88:28:d0:45:e9:47:29:16:ea:35:d6:66:e8:cb:33:ef:
cf:28:0e:ce:18:19:e2:05:31:16:a1:e0:30:4c:50:2c:c9:b6:
4b:60:77:71:dc:f5:be:b1:3a:4a:08:a7:d4:da:11:fa:af:8b:
e8:2a:91:c7:27:64:45:9c:44:ac:76:87:36:af:75:e3:79:74:
c4:ea:eb:48:73:70:ad:1d:2c:c6:30:aa:e1:51:94:34:c5:00:
a3:23:54:ad:a5:91:d6:55:a1:88:e0:a0:6d:94:a9:0e:9c:19:
9a:b6:0a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:17:08 2025 by rpki-client