Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa
File: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (raw, json)
Hash identifier: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=
Subject key identifier: AC:81:1C:0B:5C:AB:AE:D5:91:13:FF:9A:0B:86:A2:35:A1:E5:17:4C
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 0194221F9F9A19F0ED00B3892445AAB7EEDB
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 185.252.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9f:9a:19:f0:ed:00:b3:89:24:45:aa:b7:ee:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac811c0b5cabaed59113ff9a0b86a235a1e5174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:89:10:9f:8f:3f:9a:b6:2d:19:d1:16:1e:
7f:f7:63:b6:6d:fd:7c:42:21:22:49:44:9f:4c:fe:
59:5f:dc:f4:4c:45:f9:e1:cb:f3:9b:a3:31:c6:78:
dd:e3:19:ad:0b:7d:23:e0:e5:bc:61:07:2c:0a:28:
35:43:d6:07:b3:f3:f7:59:08:2f:89:b3:35:8f:3d:
e5:b1:d1:59:83:6c:fa:31:51:0c:62:23:e1:3c:db:
74:f2:fe:12:a3:ca:89:87:f6:95:37:5a:97:96:17:
4a:e5:48:27:44:bc:b8:3f:4f:65:62:8e:95:27:6f:
e4:f5:75:82:e8:a3:23:0a:ed:06:fd:cd:ea:46:d5:
2b:63:63:f5:1e:88:43:8c:d6:39:ee:7f:4e:48:8e:
8f:2e:61:09:80:27:30:9d:ab:94:a4:b5:be:52:f8:
31:2d:cb:df:57:22:f3:54:ee:a2:b6:3c:3e:b0:b2:
da:72:e4:92:29:84:b4:45:bd:1e:22:5b:98:88:cf:
10:19:d4:6d:36:a4:18:20:cb:30:4a:e0:83:27:6a:
a4:1a:03:06:81:53:ec:40:d8:41:50:e0:71:46:17:
0a:56:2a:90:70:d4:12:14:eb:79:d2:d5:af:ea:1f:
1d:b1:bc:d8:2f:1a:06:0e:e7:eb:af:09:6a:1e:dd:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:81:1C:0B:5C:AB:AE:D5:91:13:FF:9A:0B:86:A2:35:A1:E5:17:4C
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.212.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:f0:c1:91:5f:17:e7:8a:f6:f2:02:10:bd:50:ef:2d:18:0f:
12:e6:cf:db:3c:db:5c:20:0f:2c:f9:c7:53:39:f1:70:e2:6d:
4f:c3:1b:9e:b8:3c:1f:99:44:80:56:67:ac:bc:b6:81:fb:63:
d3:f6:0b:80:b8:f0:0a:04:7c:ff:55:2f:3b:ca:29:60:bd:2b:
ea:f5:ee:2c:6e:12:99:b0:72:2b:4c:4c:4f:b4:51:53:d5:b9:
33:63:e9:b6:0b:8f:1a:65:76:81:eb:83:c9:02:4a:e5:68:41:
17:0f:e9:dd:c6:4e:ea:07:e0:d9:d7:7b:75:fa:be:da:b0:52:
6f:5b:20:e3:cf:af:be:0f:e1:cf:3d:f8:8f:a1:12:61:33:db:
d4:0f:64:6e:32:20:67:11:5d:e7:f6:83:49:5a:7e:96:5d:51:
16:fc:45:c9:35:2c:c8:e5:62:4c:cc:af:c9:5d:94:11:44:aa:
4c:6d:32:a3:67:7f:c5:76:33:87:04:73:0a:0b:a5:0e:a4:97:
6c:66:95:fe:46:ff:5c:9f:73:ea:25:6c:83:2e:93:1a:6d:2b:
69:bc:01:93:a5:48:47:5a:c7:09:ac:95:a8:ae:d8:5e:e2:fb:
51:d3:d3:6e:6b:c8:70:ea:fe:cd:4d:73:1b:7b:a3:b5:57:06:
e0:bf:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:01 2025 by rpki-client