Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/7iFKRLth1Zm4UheUp7tUenlx6tU.roa
File: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (raw, json)
Hash identifier: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=
Subject key identifier: EE:21:4A:44:BB:61:D5:99:B8:52:17:94:A7:BB:54:7A:79:71:EA:D5
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 0195F66EC8B0F1EE435F351084820D65A7EE
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/7iFKRLth1Zm4UheUp7tUenlx6tU.roa
Signing time: Wed 02 Apr 2025 12:16:50 +0000
ROA not before: Wed 02 Apr 2025 12:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 185.244.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:6e:c8:b0:f1:ee:43:5f:35:10:84:82:0d:65:a7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Apr 2 12:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee214a44bb61d599b8521794a7bb547a7971ead5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:ce:c4:90:03:4c:de:cb:fb:1f:72:ec:16:
2d:ca:10:b3:cf:7e:ea:c0:f8:8d:88:a1:40:dc:9d:
c1:c2:99:45:cf:24:fb:48:d6:55:d6:13:d5:42:3a:
00:f9:45:7d:70:f6:06:54:58:c4:4f:a6:64:c2:a4:
fb:51:6a:dc:47:14:90:3e:e2:69:a3:66:9f:21:2f:
b4:3a:e0:3b:9a:39:2a:c4:a5:ec:8b:aa:e4:78:e8:
58:2a:b5:a7:91:7d:92:ec:50:f0:21:5c:e2:a0:f9:
96:0e:07:39:88:03:a0:c2:68:a3:cd:bf:dd:53:cf:
0e:ff:60:b1:52:fb:70:f0:8d:8e:64:8b:eb:0c:46:
ec:ee:d9:1f:34:f8:c2:c4:e0:4d:97:46:2d:6c:48:
fb:87:aa:06:96:d2:eb:be:c6:74:49:9d:6b:ed:31:
80:66:5b:f6:33:88:4f:23:5d:5a:02:bc:15:6b:5a:
4b:87:63:26:f9:5b:ae:e1:8a:aa:1d:d0:61:41:00:
7b:21:c8:e4:14:fc:18:34:de:88:37:3e:9b:d2:eb:
10:0e:1e:de:e9:bc:e5:41:c3:ee:9f:9b:bc:6e:e2:
7b:19:b4:bb:0c:51:4a:fb:0a:70:fe:ad:ea:42:36:
26:ce:cd:ea:f6:4c:7c:52:1d:dd:94:56:07:20:63:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:21:4A:44:BB:61:D5:99:B8:52:17:94:A7:BB:54:7A:79:71:EA:D5
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/7iFKRLth1Zm4UheUp7tUenlx6tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:55:d2:01:33:27:9e:73:e2:e3:85:00:59:88:a9:25:ac:9b:
a7:e3:5e:a9:1e:a9:14:fd:b0:7b:cc:df:95:0f:9e:bc:f7:ca:
94:5e:89:e4:6a:52:9d:fd:56:c0:1b:2b:da:21:e0:e2:37:68:
a3:4f:71:26:d7:6f:28:22:db:ba:d0:46:fd:2c:00:61:c7:cb:
04:63:2e:76:58:50:29:69:b3:a7:da:b4:52:37:db:77:69:43:
90:72:d1:4a:1a:2b:02:79:4f:ad:07:35:32:0d:f1:07:07:cf:
47:5b:11:22:17:f1:04:9a:cd:39:9c:b4:0a:5f:64:82:bf:5e:
62:f3:7c:c6:82:e6:22:6a:4f:f2:d6:d7:12:e5:b0:49:9f:99:
43:d8:2e:a6:ba:51:77:52:09:03:bc:68:59:13:39:f5:07:f6:
3b:84:dd:99:2c:4c:ad:8b:be:05:79:da:6b:0e:76:b7:14:b3:
bc:b4:9d:4a:30:b4:53:7d:8f:72:99:71:23:1f:a3:24:40:38:
c7:7e:7f:72:54:8f:21:b3:1d:18:17:d1:51:af:b6:48:3c:ef:
32:05:47:b3:2d:01:00:a5:e6:da:3d:99:a3:d6:d9:d2:2a:17:
d4:20:00:0c:cd:f9:9f:87:4c:8c:86:b5:26:0f:ce:c1:ec:c2:
da:0b:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:41 2025 by rpki-client