Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/aNBkCcaYmA02zahOwaGbtyYv9MY.roa
File: aNBkCcaYmA02zahOwaGbtyYv9MY.roa (raw, json)
Hash identifier: D1US2CJVv8mZ6kukpOJiznwJywuhQdkODOcCQGRbYbk=
Subject key identifier: 68:D0:64:09:C6:98:98:0D:36:CD:A8:4E:C1:A1:9B:B7:26:2F:F4:C6
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 0196861254EF84B5AA210024B2A628ABFBA0
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/aNBkCcaYmA02zahOwaGbtyYv9MY.roa
Signing time: Wed 30 Apr 2025 09:41:10 +0000
ROA not before: Wed 30 Apr 2025 09:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56902
IP address blocks: 185.222.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:12:54:ef:84:b5:aa:21:00:24:b2:a6:28:ab:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Apr 30 09:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68d06409c698980d36cda84ec1a19bb7262ff4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:47:69:9a:e3:ff:84:59:07:0c:09:05:c8:
b2:16:20:20:10:26:cc:4a:c1:0b:df:95:89:fd:77:
50:f4:01:3c:89:83:ca:0b:cd:25:95:30:82:a0:05:
c9:ae:3b:12:37:51:46:ee:3d:3d:ce:6b:df:7d:54:
38:a7:55:25:eb:68:47:93:c7:24:36:92:23:01:c8:
43:2b:04:22:e7:6d:a9:71:6c:e0:6d:33:0f:68:d4:
49:7b:b7:75:d1:39:ac:2f:7d:c2:e5:f9:59:01:cd:
7d:10:c2:ec:94:1a:4a:90:0b:57:e1:72:5b:5b:34:
ec:06:57:5d:68:ae:81:8a:ff:f3:aa:5a:76:5d:0f:
4b:9c:d0:c1:ce:58:56:53:eb:b6:98:4d:ec:28:4a:
85:df:81:f5:85:0c:67:a7:37:55:fa:6b:30:be:cf:
81:54:85:e7:ff:fe:bb:7a:9b:7e:14:da:55:03:78:
e7:6e:37:40:09:b1:27:b9:bf:08:0d:33:d1:15:0a:
e6:ce:83:ff:72:ee:5b:b4:84:e4:df:7f:90:72:e9:
5d:73:71:2b:19:7a:be:6e:6a:36:5d:ea:db:c5:ae:
12:89:cc:8c:46:61:7f:3c:1a:cf:d4:f7:e3:20:84:
92:bc:9c:99:93:85:8a:6d:7d:88:65:d5:4a:d4:a4:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D0:64:09:C6:98:98:0D:36:CD:A8:4E:C1:A1:9B:B7:26:2F:F4:C6
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/aNBkCcaYmA02zahOwaGbtyYv9MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:54:0c:4b:52:c9:a6:23:28:07:8f:3e:11:98:b6:ce:18:f7:
ae:80:fd:4b:74:71:7c:eb:c5:a8:d8:1f:9f:f6:22:75:0d:d6:
ed:99:79:15:7c:55:a6:d5:6f:88:c3:da:b4:d6:d3:eb:02:02:
a2:e4:7a:ef:52:74:d3:f3:c5:0d:c5:48:7e:05:e7:f5:ea:fc:
6b:9f:6f:3f:fc:4e:7d:e2:4e:38:9c:00:f4:6b:b4:ad:1a:e7:
16:7a:55:16:2a:86:39:61:73:4a:57:4a:6a:08:d3:09:df:b0:
e7:56:ae:9e:95:64:1f:cb:81:35:76:a5:68:ee:5b:7c:41:c6:
b5:5a:4f:29:ff:17:c3:e9:9d:f6:35:33:07:b7:1c:76:d4:20:
19:60:81:f3:6c:1d:49:c4:aa:67:13:bb:39:de:bf:57:f2:ed:
be:58:eb:53:f9:95:30:ef:84:69:4f:82:2d:b2:f0:a1:b0:5b:
65:4e:eb:30:cc:b5:b2:47:c2:86:3d:0f:38:67:c1:41:93:d6:
ce:1b:5c:66:6c:14:55:30:20:f1:ca:f1:68:e9:5c:eb:f4:cf:
c9:6c:ed:2b:0f:ee:47:fd:48:45:cf:8b:b9:c7:9e:84:a8:e5:
cd:1c:7f:31:e4:f6:0f:55:38:31:5a:4a:58:3b:02:89:af:3f:
e2:a0:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:42:37 2025 by rpki-client