Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/9fywOGNsk6OIfuzuy-reOW9V4kc.roa
File: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (raw, json)
Hash identifier: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=
Subject key identifier: F5:FC:B0:38:63:6C:93:A3:88:7E:EC:EE:CB:EA:DE:39:6F:55:E2:47
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 0194266BF06717D87A7AA66B3279BEE41056
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/9fywOGNsk6OIfuzuy-reOW9V4kc.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60849
IP address blocks: 185.40.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f0:67:17:d8:7a:7a:a6:6b:32:79:be:e4:10:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5fcb038636c93a3887eeceecbeade396f55e247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:70:ef:34:d8:73:88:19:02:2b:6d:7f:c2:
db:78:05:f1:c2:39:2b:7c:1b:b8:cc:67:4f:3c:14:
a2:8d:68:11:d4:08:d3:8f:6f:ba:e3:77:60:5d:07:
48:4d:ca:16:67:f0:81:2b:bf:6b:c1:f2:18:a8:b4:
54:96:c5:ab:8b:c0:40:ef:71:20:e6:03:f8:5c:ac:
84:44:fe:52:82:6e:7d:76:98:67:40:8b:e3:a5:66:
ab:b1:de:14:c0:7d:88:21:67:76:ee:2b:f3:fe:6c:
61:14:5f:62:35:d1:5a:e6:7f:70:a2:f8:aa:83:bc:
bb:ac:72:ad:2f:46:b4:d5:03:a6:bd:9e:e6:e5:f7:
76:02:8d:24:77:bb:30:17:93:7e:03:a3:2b:9b:7a:
ea:30:b3:18:8c:7a:f7:87:ec:63:cf:f6:e3:6e:6a:
bb:2a:f9:b2:38:ba:aa:90:ef:20:76:1c:2f:0a:43:
22:c5:36:73:18:4a:81:86:35:e7:ee:08:2c:63:26:
c5:4d:70:0d:94:53:fe:e7:ac:d1:f3:a8:e7:70:97:
93:39:4c:50:7a:b3:93:74:3d:df:65:3e:2a:8d:76:
d1:14:a4:cd:ec:85:74:2c:49:87:4e:e3:8e:fd:bf:
ae:e4:75:56:10:57:af:d7:7c:a9:6e:ee:a8:99:c8:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:B0:38:63:6C:93:A3:88:7E:EC:EE:CB:EA:DE:39:6F:55:E2:47
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/9fywOGNsk6OIfuzuy-reOW9V4kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:dd:c9:58:e1:b6:1d:2d:e8:a3:de:6f:e7:02:5b:e4:22:d0:
3a:99:66:a0:eb:52:6f:de:52:3a:0f:42:42:77:ff:02:cc:9b:
a9:0b:60:98:75:ce:c6:bb:62:2f:99:1b:ae:a7:20:27:11:38:
69:03:eb:ba:d0:58:13:9d:4b:a8:6f:90:13:90:fa:5f:fa:21:
08:32:ca:d6:00:e2:9c:59:69:13:c0:30:99:44:72:8b:96:43:
69:e0:c3:d3:08:03:59:c4:4d:cf:46:8b:91:a7:8c:b7:e4:2b:
aa:2d:77:35:4c:5f:ef:d1:e8:35:ec:2d:2f:f1:7c:ff:6c:fd:
59:1e:f1:12:fe:ff:0d:d5:db:d4:dc:34:08:e5:d9:32:bc:03:
f1:ad:b3:bb:cf:e3:28:1f:e2:36:92:e4:e3:50:ae:1f:ab:8e:
87:7d:d2:eb:b7:69:87:0f:03:9c:c1:16:86:b7:d7:68:a3:e0:
26:a2:f8:cc:0f:f7:5a:56:a1:fb:46:3c:e3:26:2d:50:17:8e:
a1:bc:40:61:14:2c:54:fe:bf:f6:0c:e6:63:c3:a1:61:7e:d9:
19:01:27:44:e4:98:85:e1:8e:42:5a:6d:75:ae:f8:33:99:5b:
52:dd:5f:7b:c4:d8:98:48:60:da:9f:77:79:16:27:6b:50:8e:
23:52:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:28:42 2025 by rpki-client