Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/gROQX262hBLEAaMQi9RZD0slHEs.roa
File: gROQX262hBLEAaMQi9RZD0slHEs.roa (raw, json)
Hash identifier: KRs0pMeE32FkERm2kWqQrSa0jY8OZzctwZkQ2Bh+yr0=
Subject key identifier: 81:13:90:5F:6E:B6:84:12:C4:01:A3:10:8B:D4:59:0F:4B:25:1C:4B
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 019425FCD12E9A2D086492F69F48386F7B47
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/gROQX262hBLEAaMQi9RZD0slHEs.roa
Signing time: Thu 02 Jan 2025 07:48:33 +0000
ROA not before: Thu 02 Jan 2025 07:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41405
IP address blocks: 185.7.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d1:2e:9a:2d:08:64:92:f6:9f:48:38:6f:7b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Jan 2 07:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8113905f6eb68412c401a3108bd4590f4b251c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d6:3f:13:98:19:0d:8c:6e:b0:9e:6c:3a:4c:
16:0a:3c:82:f1:78:75:3a:d2:c8:52:d9:25:40:b0:
47:68:89:05:21:45:c3:50:c0:ea:07:8d:6e:79:17:
7c:6d:0b:d5:45:ac:77:cb:1e:b9:76:1a:78:88:05:
d0:20:9f:a8:d6:7a:a9:7f:d0:ef:44:fd:2d:51:55:
57:5a:a7:0b:11:82:f6:a0:01:e6:62:0a:55:06:fb:
ea:b7:89:90:da:b3:63:f2:55:16:76:da:cf:db:50:
e8:af:38:09:bd:df:9d:39:00:7b:a4:3c:84:2a:13:
3a:ff:d1:a7:c2:30:ad:15:1f:fd:54:8b:dd:57:8e:
4c:25:40:36:fb:51:d2:56:66:47:99:21:55:18:e5:
6b:32:1b:11:e6:84:25:7b:99:ec:c7:44:dd:b1:c0:
74:f8:d5:7a:be:23:d0:e5:0a:1b:1b:44:65:b8:2c:
68:36:32:38:a1:7d:d0:ee:84:0c:c8:9d:6d:a9:da:
a2:34:20:54:bf:dd:91:b2:71:d3:9a:2b:32:30:b6:
bf:43:b0:78:b3:bb:97:b2:1d:ac:b5:2e:ae:59:b8:
38:53:d1:05:5d:de:48:40:02:46:94:75:84:fa:33:
cc:e6:fb:de:99:87:3e:21:cc:aa:ad:35:06:c4:a7:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:90:5F:6E:B6:84:12:C4:01:A3:10:8B:D4:59:0F:4B:25:1C:4B
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/gROQX262hBLEAaMQi9RZD0slHEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.240.0/22
Signature Algorithm: sha256WithRSAEncryption
86:ba:ca:8d:ed:2e:af:d0:a8:76:9d:56:09:c0:e2:bb:2e:54:
9a:5f:f5:89:a4:94:d9:8e:61:fe:16:c0:67:9c:88:b5:7e:b6:
b7:f5:df:3e:40:b2:9d:71:b2:48:77:ad:ca:e8:be:b4:1d:be:
f3:e4:88:46:38:d6:40:5f:67:03:62:71:8c:97:09:49:6f:36:
d8:3d:ba:72:57:49:06:23:2f:9f:ce:a1:4d:13:4b:ae:16:ad:
73:4f:6c:d9:08:cc:4f:ad:9b:7c:6f:1f:63:27:c7:8b:2d:d4:
eb:98:68:b8:0f:1c:62:9a:1b:16:7a:3a:4d:fc:a8:1e:ef:9d:
59:0a:b4:88:73:75:3e:10:8c:56:01:83:d8:57:a6:d0:4c:e5:
28:ca:95:c1:8f:b3:58:24:b1:0a:67:d2:ff:d1:25:a1:97:6c:
7e:99:bd:a8:73:48:38:70:30:67:c1:f4:f7:50:c8:98:43:78:
fc:3a:56:ab:ea:68:7b:8f:50:69:7d:55:40:1f:30:a5:10:9c:
cc:a9:f4:38:47:25:11:ef:51:63:af:a8:a7:3c:d8:0e:b2:6c:
f8:c1:b9:3b:9e:d2:db:ea:3e:a5:5e:c0:c5:73:bd:6b:f1:17:
91:b0:bf:09:c4:36:c6:9e:a5:ef:8d:62:b4:a2:fd:8a:07:cb:
53:85:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:54:44 2025 by rpki-client