Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/55JFNSckaoCTJFscpnZ15Z8LU74.roa
File: 55JFNSckaoCTJFscpnZ15Z8LU74.roa (raw, json)
Hash identifier: GRReeOM7oJTTHXUXweiR+HBLsm1q3n5lU0XuRPsx/jY=
Subject key identifier: E7:92:45:35:27:24:6A:80:93:24:5B:1C:A6:76:75:E5:9F:0B:53:BE
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01966353FC36EA308E6E0444557C1B90BAF5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/55JFNSckaoCTJFscpnZ15Z8LU74.roa
Signing time: Wed 23 Apr 2025 15:46:10 +0000
ROA not before: Wed 23 Apr 2025 15:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210349
IP address blocks: 185.238.242.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:53:fc:36:ea:30:8e:6e:04:44:55:7c:1b:90:ba:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 23 15:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e792453527246a8093245b1ca67675e59f0b53be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:a5:9a:6d:2d:92:23:90:09:1c:4c:aa:e7:
71:ae:d7:93:91:b1:77:df:37:95:16:1f:38:a7:4b:
de:97:e2:48:f8:8e:11:8d:5c:23:b5:67:81:49:05:
84:27:ee:82:c3:fd:00:79:a5:b7:bf:4e:ac:89:82:
bd:5a:f5:5b:b6:e3:e0:f4:fb:b5:1c:6b:de:ad:20:
1a:4c:5f:aa:ef:7e:f5:cb:c4:6a:26:09:9c:be:7d:
7a:85:34:ed:6e:91:85:a3:37:6a:2a:00:1f:b3:e3:
cf:9b:11:b0:4d:64:8a:f3:75:01:48:1f:39:fa:ca:
45:dc:a0:80:cd:4b:67:f0:e7:18:c4:29:ce:73:6b:
ba:3e:57:47:c1:3c:c5:86:ea:3d:3e:86:38:1f:90:
a5:53:02:94:b7:cc:87:6c:af:07:cf:4d:f7:93:4a:
16:9e:33:ef:cd:ba:26:9d:35:ec:0b:a0:ea:33:fb:
00:41:06:33:6d:2f:a1:b0:38:94:b2:9b:92:ce:9b:
59:79:97:af:b4:b0:fc:0f:46:2f:cd:04:89:fc:01:
c3:66:fa:25:d8:01:75:0b:6d:e3:10:72:39:0f:ee:
46:f9:77:83:ee:68:20:ac:52:a3:f3:bc:05:64:2a:
76:a3:ca:ae:73:db:60:5c:8e:44:f1:a4:5f:f6:26:
00:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:92:45:35:27:24:6A:80:93:24:5B:1C:A6:76:75:E5:9F:0B:53:BE
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/55JFNSckaoCTJFscpnZ15Z8LU74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.242.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f6:dc:75:1a:59:2c:03:b4:e7:0c:c5:ac:0c:a6:18:0e:00:
f5:ce:31:53:bf:81:d2:ca:9d:a8:77:e2:25:5c:f5:45:fa:d4:
12:2d:4d:7b:c5:16:a0:87:a0:b2:ca:c7:8b:3e:c6:c3:ba:a4:
1d:50:7f:f8:a7:47:d4:67:b8:6d:c6:05:c4:ed:39:c9:80:ea:
67:02:65:fa:03:ad:c7:12:da:70:26:d8:3d:8e:55:96:7d:a1:
d0:76:03:ad:cc:2f:85:40:78:4f:24:4f:71:2e:8a:49:a0:09:
5e:fb:b3:0d:10:8b:52:b2:84:da:3b:71:76:ff:bc:23:aa:ce:
29:15:d0:33:2c:57:36:51:56:d9:e4:6b:e7:d7:c6:e4:24:dc:
61:27:5c:a4:36:5c:74:7c:0f:44:b4:a1:8f:93:7a:99:f8:6b:
3f:ff:c4:41:48:c8:36:e5:83:51:28:c7:19:aa:5e:a8:0f:3f:
a5:59:75:c7:36:63:35:17:36:fd:80:8d:f5:41:2a:cb:db:d5:
c0:a8:a4:b2:20:8c:8d:1f:35:52:a3:7d:ec:49:e2:70:9a:3c:
d1:bd:37:7a:e6:4e:58:a8:d6:9a:1c:cd:b5:33:c2:d4:f8:d9:
2d:df:4e:83:75:67:b3:01:25:da:3a:1f:f2:2d:e8:f8:8b:8e:
e6:10:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:38:35 2025 by rpki-client