Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/H7y3h5egzZRq_DcRMXxnHePpEqo.roa
File: H7y3h5egzZRq_DcRMXxnHePpEqo.roa (raw, json)
Hash identifier: SsgPkP/OTMccNNIk11dqOnNXkC8Kebf+Srm+sRJHeWM=
Subject key identifier: 1F:BC:B7:87:97:A0:CD:94:6A:FC:37:11:31:7C:67:1D:E3:E9:12:AA
Certificate issuer: /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial: 019425FC0691CD86CD7956D827C634C2F89C
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/H7y3h5egzZRq_DcRMXxnHePpEqo.roa
Signing time: Thu 02 Jan 2025 07:47:41 +0000
ROA not before: Thu 02 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 185.162.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:06:91:cd:86:cd:79:56:d8:27:c6:34:c2:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Validity
Not Before: Jan 2 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fbcb78797a0cd946afc3711317c671de3e912aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:7f:9b:94:35:84:9e:ac:57:cb:45:49:15:
39:2a:12:35:88:59:ef:d1:65:fb:48:eb:b7:67:61:
df:e1:b2:d5:ba:24:6f:63:ee:ee:06:0e:89:19:86:
96:bf:ee:5e:14:96:39:58:e2:c3:83:3d:2a:b4:00:
b1:aa:42:37:0d:90:0e:3c:b9:ab:b1:4f:34:48:cb:
4c:11:44:18:0e:73:7d:8d:ff:1e:53:21:1a:9c:19:
c6:a1:63:4c:7d:d1:89:7b:45:cf:e9:f4:d4:18:cd:
40:e8:9d:e7:be:5c:92:46:4e:93:b0:9e:36:c1:51:
81:1d:88:5a:be:3b:f1:04:03:bb:ef:a5:7e:8f:fe:
e3:7c:2e:bc:0c:c7:11:b9:45:e0:96:0d:61:4d:81:
43:0d:e4:18:66:76:34:e5:36:1d:a0:cf:a4:d5:13:
aa:aa:b2:09:cf:d2:01:8d:63:76:6a:94:b8:80:90:
b3:97:23:35:74:0c:d1:4a:11:bc:9d:9a:d9:f7:da:
db:ca:41:35:28:27:da:42:69:30:65:3b:c0:2f:53:
a0:2a:ff:64:1a:28:1d:48:49:c5:6a:b8:40:ab:58:
0f:f2:78:37:73:29:69:9b:ab:91:7e:24:f9:6d:69:
a6:3b:f5:51:2e:96:2a:97:f8:8c:c4:54:ea:f7:e5:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BC:B7:87:97:A0:CD:94:6A:FC:37:11:31:7C:67:1D:E3:E9:12:AA
X509v3 Authority Key Identifier:
keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/H7y3h5egzZRq_DcRMXxnHePpEqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.103.0/24
Signature Algorithm: sha256WithRSAEncryption
17:48:35:13:88:f3:d0:11:21:33:f4:6c:19:94:32:35:c8:a5:
fd:83:7c:3a:b9:6b:22:85:6b:98:02:bc:52:79:0c:b1:05:76:
18:48:70:dc:e8:b7:b2:2d:19:17:14:1d:84:d6:2a:3d:1f:fd:
e0:67:98:27:0d:4d:91:66:6b:34:bd:e7:d6:76:69:4a:82:16:
7d:11:c6:b6:46:ad:c6:e3:ed:50:9b:e7:4e:da:9c:66:9a:dc:
47:4a:aa:90:0c:3d:18:12:36:b5:1d:83:73:ec:c3:8b:ce:36:
33:02:4d:e6:39:c1:b9:bd:d6:6e:45:ec:a4:89:8c:65:e0:93:
fc:93:04:27:f5:7b:2e:4a:7d:85:6e:68:58:7f:0e:31:03:68:
71:eb:fc:92:c8:c6:4b:74:14:3d:ea:10:17:e2:a0:8d:06:d7:
e3:02:01:6b:b7:ea:4e:b6:61:b2:f1:9a:81:88:58:9f:93:80:
96:3c:13:76:7d:ba:40:1c:43:8a:70:a0:78:3b:77:8a:98:80:
56:5a:af:76:df:64:f5:6d:bd:e3:49:b8:81:0e:eb:6c:a3:1c:
c6:c9:2c:50:14:72:a2:0e:7a:57:70:89:f8:a5:80:2f:d0:5d:
e9:e1:ff:f0:b0:be:b8:60:5c:d4:6d:44:5d:30:31:99:cf:b1:
38:09:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:37 2025 by rpki-client