Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa
File: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (raw, json)
Hash identifier: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=
Subject key identifier: 0E:85:2C:8B:C9:41:A7:6E:31:82:91:7B:0A:3E:64:D0:CF:17:7F:59
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 019422FC4EE6C4F5B40A4529EA0C8D715CD3
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa
Signing time: Wed 01 Jan 2025 17:49:08 +0000
ROA not before: Wed 01 Jan 2025 17:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206550
IP address blocks: 185.182.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4e:e6:c4:f5:b4:0a:45:29:ea:0c:8d:71:5c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Jan 1 17:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e852c8bc941a76e3182917b0a3e64d0cf177f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:b0:d5:16:e1:cc:62:04:dd:35:e8:c5:43:
c4:37:a1:6f:0a:f6:b1:a9:fd:a0:66:1e:f8:63:e0:
24:d3:5c:3b:38:b0:1b:6d:15:95:c0:18:b5:85:a0:
30:63:f0:48:20:6a:de:7a:bb:ae:a6:da:82:05:14:
62:7f:18:f3:b8:4a:29:e3:b2:d7:15:4c:43:24:6d:
76:23:42:25:4a:3c:dc:2f:91:b0:94:b2:22:7b:63:
44:04:33:85:30:f2:3d:8c:19:38:c2:19:6d:ac:f2:
28:8f:fc:41:33:54:11:d3:9b:54:af:a8:8a:bd:67:
81:4e:be:4f:07:0a:61:9d:c0:39:5d:6a:f1:78:8c:
44:d4:76:72:18:52:61:3b:97:2c:9c:c9:5c:80:cb:
cc:6a:55:fd:61:f5:4c:d0:25:c1:c1:f3:74:71:8a:
06:6e:6c:8c:2e:52:be:5d:36:06:20:8a:12:a8:65:
02:08:df:da:05:df:96:d8:33:c5:dd:c5:1a:4a:4f:
c0:b6:33:69:8f:10:ff:d6:7e:54:b1:3f:03:91:0b:
c1:bb:96:a1:d5:d0:a9:0e:eb:0c:14:03:92:59:ff:
50:52:5b:50:2b:9d:9d:2f:ed:f0:4a:51:65:56:87:
cf:aa:36:56:be:57:ad:3a:6f:99:d9:40:37:18:e5:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:85:2C:8B:C9:41:A7:6E:31:82:91:7B:0A:3E:64:D0:CF:17:7F:59
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:5f:c0:ee:d3:ab:ff:98:e7:1b:76:fd:af:9a:b4:df:fd:6b:
e3:04:19:9d:81:be:2e:42:a9:31:da:9b:51:58:fe:f3:1f:82:
81:44:7e:f3:68:94:a0:6a:59:86:57:5f:73:db:c1:9c:58:e7:
19:58:8d:12:bb:43:74:86:ce:46:2b:3c:fe:aa:45:0e:28:1c:
62:9c:3f:dc:ba:f5:41:c4:23:4c:b2:55:3b:66:b0:33:31:ee:
83:70:5b:bb:fd:ce:21:fb:e5:35:87:64:32:8d:c3:ee:ee:32:
6e:fd:ba:55:49:d6:e0:33:31:a8:65:c3:4e:33:f9:18:f7:1a:
26:39:a3:5e:57:50:b0:b6:1c:a5:17:9a:d6:f5:ea:5a:39:cc:
e2:be:38:c3:7f:fa:82:4c:b5:ef:b0:43:b3:b8:1c:41:56:55:
21:14:a8:92:fa:7d:81:9a:5f:7d:5d:4c:0e:38:dc:9c:56:6d:
f9:95:6d:ec:b7:84:fa:73:3f:a9:ab:14:62:bd:c5:7a:84:f0:
3d:4d:89:69:51:b9:01:9d:a2:46:66:05:bf:4a:5e:ac:e5:39:
7f:c0:9c:3d:db:cc:ab:b6:a0:91:68:9a:6b:55:4b:9b:f6:45:
9b:a0:76:79:cc:cd:df:dd:b0:8c:70:c4:f1:1d:b4:76:1c:58:
6d:84:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:54:49 2025 by rpki-client