Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T_F3B2byXYmWxaqYOzxAX7lQJ8I.roa
File: T_F3B2byXYmWxaqYOzxAX7lQJ8I.roa (raw, json)
Hash identifier: E7mK1aUWqVRVbgMSVC0yznvlBcT6PaaKacYOQmKALxo=
Subject key identifier: 4F:F1:77:07:66:F2:5D:89:96:C5:AA:98:3B:3C:40:5F:B9:50:27:C2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01946A1323D307E76621B5262EE0E84B55CE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T_F3B2byXYmWxaqYOzxAX7lQJ8I.roa
Signing time: Wed 15 Jan 2025 13:07:06 +0000
ROA not before: Wed 15 Jan 2025 13:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59989
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:13:23:d3:07:e7:66:21:b5:26:2e:e0:e8:4b:55:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 13:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ff1770766f25d8996c5aa983b3c405fb95027c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:d3:60:ad:7d:3f:70:c7:5b:ec:28:74:a2:
d5:4f:f9:4a:51:30:c0:9c:2b:48:ab:a9:77:a6:b9:
93:b0:2f:28:6b:5d:cc:51:a7:46:35:e3:c8:27:79:
43:86:90:c0:82:92:93:d9:16:70:48:7a:b2:b7:be:
fa:78:f7:e4:57:a2:f8:05:f7:78:69:73:c7:76:5a:
57:d2:c7:2a:32:6c:ce:5f:8d:8e:6c:d5:d3:28:23:
a3:a1:6b:3a:95:65:6a:b2:2b:1c:ec:0a:c8:49:c5:
25:b5:30:d0:08:1d:c4:c0:bc:c0:c4:0d:7b:bf:5a:
6f:54:24:56:08:ff:6b:b4:8a:e4:32:aa:0d:84:dd:
5d:54:7a:7f:60:9f:8a:2e:ad:96:ac:30:03:b3:29:
1f:1d:1b:93:13:d9:81:1e:72:04:fc:39:a3:8d:af:
af:f2:67:12:99:af:f9:d8:df:9f:68:dd:09:12:31:
10:8a:9e:f8:37:53:36:9d:60:5f:24:81:45:94:e7:
ce:9b:ea:61:a6:cd:f4:c5:db:e4:11:02:cb:0f:65:
d2:c0:64:14:58:a2:d2:7a:05:ca:fa:1a:80:51:ef:
6e:91:f4:b8:12:17:12:37:7f:94:1c:11:e9:dc:99:
56:76:0b:73:3d:05:1d:31:dd:93:d6:6f:c1:07:6e:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F1:77:07:66:F2:5D:89:96:C5:AA:98:3B:3C:40:5F:B9:50:27:C2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T_F3B2byXYmWxaqYOzxAX7lQJ8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c5:71:84:82:12:07:be:db:6a:60:2f:7a:19:37:1d:99:51:
98:d1:c1:3c:3d:96:9a:a3:fe:6b:9a:e7:3e:9e:26:2a:59:63:
b9:e4:5b:1f:68:ab:73:1b:2c:56:9e:dd:56:27:d0:ab:f9:06:
87:d3:4e:da:78:90:df:2a:21:31:c4:2d:e4:bd:7a:a4:a6:03:
c6:fd:8f:08:42:43:4e:2a:de:b5:5a:45:9f:c1:57:f7:2e:fb:
bb:26:cf:04:24:57:8c:b4:72:9c:40:35:3f:73:17:3d:54:1b:
69:8e:46:cd:de:6c:b5:0f:93:62:2a:f5:2e:b4:90:75:f9:cc:
5f:c5:6f:e1:47:65:0b:09:6c:1b:24:0b:c0:0e:db:1e:61:68:
be:aa:f6:44:29:cb:4f:cb:5e:d3:f7:d8:d8:c2:01:31:69:52:
34:87:4e:c2:da:c9:cd:ad:b4:d3:f9:e8:16:52:6f:65:c7:61:
1b:01:00:c4:26:fc:c4:a5:9f:1b:da:cd:2e:a1:df:b8:e5:f6:
ef:90:50:3c:95:5d:56:b8:6c:79:30:1e:ab:4a:9d:25:0f:9c:
c3:ef:86:10:1d:6d:8c:d5:84:d2:e8:04:92:6a:bc:c5:3e:eb:
e5:16:d4:eb:2c:cf:86:a5:24:6a:61:c7:55:30:d3:e6:33:71:
8a:b0:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:12 2025 by rpki-client