Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/SFufe6GxPr18jUulsobsVcJNabA.roa
File: SFufe6GxPr18jUulsobsVcJNabA.roa (raw, json)
Hash identifier: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=
Subject key identifier: 48:5B:9F:7B:A1:B1:3E:BD:7C:8D:4B:A5:B2:86:EC:55:C2:4D:69:B0
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 0195B7E5DD80303CCBF327965F055248A94F
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/SFufe6GxPr18jUulsobsVcJNabA.roa
Signing time: Fri 21 Mar 2025 08:50:49 +0000
ROA not before: Fri 21 Mar 2025 08:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209335
IP address blocks: 85.208.24.0/22 maxlen: 22
131.159.0.0/16 maxlen: 16
2a09:80c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:e5:dd:80:30:3c:cb:f3:27:96:5f:05:52:48:a9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Mar 21 08:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485b9f7ba1b13ebd7c8d4ba5b286ec55c24d69b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:3c:26:e2:b8:93:dc:aa:62:6c:39:56:f0:
86:16:c5:d8:20:c9:e4:f5:16:1c:45:be:c4:f7:f2:
32:c3:58:cb:7d:70:2a:62:5a:85:1b:96:33:f7:a8:
d2:4e:8c:42:c6:ee:67:0d:8f:d6:15:07:30:e7:47:
04:15:cd:a0:3f:14:5a:19:e8:03:b7:10:8d:47:21:
3b:bd:68:1f:74:37:58:98:c7:65:8b:c1:88:bd:ed:
97:7f:7e:c3:92:0c:ae:28:7b:d1:1f:21:aa:f0:e7:
05:ba:96:6d:e9:34:5d:cd:ef:3a:d6:37:51:18:cf:
bb:5d:47:8d:68:37:66:90:95:9f:c5:f9:88:2a:27:
d0:83:51:94:b8:75:17:9a:1e:c7:74:80:8e:7f:9a:
f4:c4:07:0e:cb:07:54:f8:ba:e1:87:ca:02:53:27:
16:50:75:f3:d7:78:be:bf:78:d8:db:3e:6c:bd:73:
9d:7c:c3:c3:ac:2a:9a:a2:ae:5d:df:4d:34:ca:43:
12:52:a6:82:a4:31:c9:b5:de:6b:ef:95:a8:1e:ce:
01:31:7f:c3:99:d4:22:92:99:71:50:6e:26:6a:75:
af:5a:f7:16:6c:82:00:8d:33:76:11:01:54:b0:16:
58:0d:94:20:62:23:22:3f:dc:8b:fb:63:77:e1:4c:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5B:9F:7B:A1:B1:3E:BD:7C:8D:4B:A5:B2:86:EC:55:C2:4D:69:B0
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/SFufe6GxPr18jUulsobsVcJNabA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.24.0/22
131.159.0.0/16
IPv6:
2a09:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:dd:59:ad:b2:29:82:9d:32:a3:91:b6:b2:7d:4d:79:15:06:
c7:e9:a5:e6:41:2d:af:54:a8:f7:9d:97:b7:0b:6b:39:1d:f7:
1f:29:1a:8b:ef:da:cd:53:ae:63:66:e4:3b:01:49:d9:55:ce:
a3:27:8d:b2:2f:ef:38:5f:3c:56:0d:eb:e1:f9:2f:55:50:8f:
fa:41:1d:03:47:75:80:ea:40:ab:f5:cb:17:5e:9b:32:26:82:
86:32:58:1d:7c:62:16:03:d4:42:ef:cd:cf:46:d2:1d:61:8e:
d1:39:96:b3:d0:10:29:f6:22:8e:45:4d:c0:a0:0d:31:d1:1a:
5a:06:83:c1:42:10:10:cf:33:de:cc:0e:e5:20:7d:6f:f5:87:
21:1f:d6:e8:ba:1f:b5:73:6e:65:bb:c0:36:94:d9:a3:30:99:
ea:14:9d:b4:9c:9f:8a:d5:30:8b:05:93:51:97:75:41:6d:56:
64:c9:c6:a7:30:44:48:2e:96:b0:75:5b:22:d4:65:af:8d:bb:
bb:b3:93:d8:b2:49:ae:1f:f6:50:d0:d9:8f:0d:cb:1c:98:b6:
b9:09:19:fc:17:83:85:cd:f0:1b:1c:79:d7:d1:8c:7b:2f:7d:
35:99:cf:3a:24:25:d3:05:f0:70:f3:12:41:09:ed:68:6c:64:
12:c7:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:00:17 2025 by rpki-client