Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/IsJ-Knhv-lcZp2ErCBVSweACDiI.roa
File: IsJ-Knhv-lcZp2ErCBVSweACDiI.roa (raw, json)
Hash identifier: vnx9hi+UuIlc5qw+h0Sh4yAOgrUWmAlxKn51sLYhn3s=
Subject key identifier: 22:C2:7E:2A:78:6F:FA:57:19:A7:61:2B:08:15:52:C1:E0:02:0E:22
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0196AF2E51390BA94E1DF673413514347DC1
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/IsJ-Knhv-lcZp2ErCBVSweACDiI.roa
Signing time: Thu 08 May 2025 09:16:10 +0000
ROA not before: Thu 08 May 2025 09:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201089
IP address blocks: 185.124.148.0/24 maxlen: 24
185.124.149.0/24 maxlen: 24
185.124.150.0/24 maxlen: 24
185.124.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:2e:51:39:0b:a9:4e:1d:f6:73:41:35:14:34:7d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: May 8 09:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22c27e2a786ffa5719a7612b081552c1e0020e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:52:67:a6:14:46:18:09:e4:6e:6c:7b:86:
47:46:c5:31:1c:0a:b9:68:d5:d3:5e:1d:e0:76:bd:
c7:6b:89:d7:dd:bc:df:eb:6f:96:51:4a:dd:74:f2:
51:81:9d:16:85:b1:29:91:25:cd:8f:a6:2f:a3:4f:
bf:c8:9e:9a:c2:37:a3:69:ac:32:70:1e:6b:b7:fa:
a4:cf:82:65:cf:8b:ff:55:58:b5:20:06:71:40:9d:
53:f2:28:6d:4f:cc:ab:f6:8b:74:53:f9:86:70:b5:
e1:91:28:71:de:ab:b5:b0:45:aa:64:48:c6:43:15:
d9:04:e5:07:6b:a2:c5:40:3f:e6:f0:df:54:cb:01:
fa:d6:7f:84:73:74:0b:b8:4e:de:44:a1:f8:bc:91:
5f:05:9c:e5:43:c2:d5:7a:01:c3:51:d7:77:8d:92:
fd:d5:92:5c:be:84:40:7d:e9:1c:a7:08:3b:0f:ba:
b9:37:f1:24:24:dd:2a:12:95:e7:7a:12:75:b2:37:
ef:61:a9:3d:cd:97:02:88:c3:12:77:99:39:04:24:
72:6d:8a:6b:50:72:5b:74:a0:6c:0b:e3:03:e1:f1:
82:2d:12:2b:24:13:64:d9:fa:8b:13:21:93:3e:a0:
1f:e9:df:a9:42:f3:ed:50:6c:24:79:30:4c:0f:42:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C2:7E:2A:78:6F:FA:57:19:A7:61:2B:08:15:52:C1:E0:02:0E:22
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/IsJ-Knhv-lcZp2ErCBVSweACDiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:cc:22:c4:d0:09:85:31:fd:f7:26:b4:da:29:0c:0f:21:87:
63:f2:c8:d9:09:7b:5f:84:ed:4c:84:ac:28:21:91:87:ef:d3:
5b:74:41:28:96:1f:2b:bd:34:08:66:11:84:ca:58:e9:81:09:
51:4a:20:0a:ac:8e:15:21:8a:fa:76:44:b5:6d:a6:3c:6f:0f:
e0:ce:7e:50:4c:95:85:13:34:06:98:85:a5:64:45:b7:8c:d0:
48:71:c0:64:c2:4d:0f:2a:1d:d7:9f:dd:77:89:49:51:21:54:
a9:64:e1:4b:95:8d:96:5d:e9:f2:b5:74:9e:ec:bd:cc:28:89:
cd:ec:31:12:51:07:13:fb:b4:e3:42:a2:a4:34:c5:4f:10:86:
64:55:70:93:b2:e5:57:c5:5b:db:67:b6:a1:a1:ef:3e:96:87:
f3:05:7a:c2:d9:54:13:9b:46:87:af:c8:5a:5b:49:cf:0d:24:
3a:03:33:68:bf:03:a5:4d:dd:90:be:1a:65:e4:95:2c:98:55:
61:b4:6a:93:e1:41:3c:e2:d3:b4:68:51:54:58:36:2d:53:ee:
a5:f5:62:cd:e8:a1:a0:88:58:31:70:e7:3b:25:6d:bb:55:d2:
c9:a7:53:69:cc:65:6b:e5:2b:3b:0f:5c:52:4c:51:8e:a6:ee:
c8:ce:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:53:57 2025 by rpki-client