Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/C7UrWrjqRYaoTXtQBjcVzEUShlI.roa
File: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (raw, json)
Hash identifier: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=
Subject key identifier: 0B:B5:2B:5A:B8:EA:45:86:A8:4D:7B:50:06:37:15:CC:45:12:86:52
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01941FFA8583F1CE60D3089FF60E9C5579D2
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/C7UrWrjqRYaoTXtQBjcVzEUShlI.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47232
IP address blocks: 185.214.192.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:85:83:f1:ce:60:d3:08:9f:f6:0e:9c:55:79:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bb52b5ab8ea4586a84d7b50063715cc45128652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:c9:86:77:72:50:08:32:77:14:cd:74:88:
48:75:2b:1c:4a:8a:ee:1b:b0:34:7e:28:17:a3:99:
59:61:ae:b4:15:90:16:cf:8e:4c:4d:5d:c6:c4:d5:
eb:28:45:97:3d:f9:a2:99:c2:d3:ac:26:49:02:b5:
5f:84:fc:3c:aa:47:ea:37:36:06:70:f8:a1:f8:3b:
24:42:8e:15:5b:d5:94:8b:63:a6:ba:70:13:90:a9:
3c:7c:91:a7:10:74:50:8d:29:e0:e3:9e:6c:b7:57:
3a:af:e0:02:5c:16:9b:c0:ac:4f:de:b1:64:67:ef:
06:77:1d:37:f8:17:88:c1:b0:94:55:2f:1f:60:a9:
a4:8d:fd:8c:51:55:38:e9:87:e7:89:c2:9f:1f:ee:
af:6b:0a:12:83:be:46:d2:8c:21:7b:93:3d:da:e4:
8c:80:93:59:ff:00:07:7f:03:3b:9f:c4:e1:d7:bd:
34:de:cd:61:c9:9b:f0:af:dc:d7:b1:57:34:96:5c:
cd:6f:ac:23:8b:2b:e7:70:04:8b:2d:07:da:97:7a:
b7:df:07:9a:e6:e0:43:d2:94:e3:fd:6c:92:32:aa:
6d:fe:c3:51:eb:ec:9a:97:e0:cf:36:1a:be:aa:4e:
80:d6:e5:a4:eb:02:ec:83:b1:91:c9:bb:ab:d1:7f:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:2B:5A:B8:EA:45:86:A8:4D:7B:50:06:37:15:CC:45:12:86:52
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/C7UrWrjqRYaoTXtQBjcVzEUShlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.192.0/22
Signature Algorithm: sha256WithRSAEncryption
be:e1:04:47:1e:00:02:0b:e8:47:a6:4c:33:77:7e:c7:85:2c:
b1:f6:22:da:77:bc:c0:de:a3:91:2c:21:14:dd:35:d4:90:bd:
80:30:94:16:b9:5c:bd:f7:b4:b3:b3:09:80:c9:66:fa:06:51:
ff:dd:dd:e6:c7:2f:ce:20:08:26:08:e1:dc:46:0d:e6:b5:65:
a6:2f:af:46:32:74:5e:9e:34:21:80:66:b0:67:92:c3:d3:de:
3f:f0:ad:49:2a:ec:7a:4f:94:8c:85:6b:4f:e9:3b:a5:26:20:
c7:15:e4:7d:5a:e7:3d:be:81:1c:b7:e3:94:23:78:0d:b9:34:
bd:a5:54:fd:f7:bc:7c:05:3c:cb:6c:60:d2:3d:3c:37:ec:0c:
14:30:93:93:ad:4e:1f:08:8c:68:55:7d:d3:4a:bd:bf:64:c8:
c0:2a:c7:02:4f:65:72:ef:29:a2:8d:94:8a:50:17:2c:f0:b9:
8f:bc:0c:0e:18:62:ae:92:93:dd:4c:ed:ff:56:95:b5:1f:13:
0c:ac:29:65:d8:92:fb:61:36:a1:45:a9:57:ab:d6:f6:f3:68:
d6:ad:8e:5c:43:06:1d:03:5f:a8:a0:f1:ab:dc:bc:71:3f:9e:
80:e8:11:ac:10:c6:98:cd:4b:47:fc:d7:74:f9:6e:7e:f2:62:
e4:4f:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:32:31 2025 by rpki-client