Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/_h71B272PJZJXIBvxnSAiFkPc3o.roa
File: _h71B272PJZJXIBvxnSAiFkPc3o.roa (raw, json)
Hash identifier: 8epdxNIo68sqlqhgpXPr6uBYOM7OF4qT5O2HTRBPkF4=
Subject key identifier: FE:1E:F5:07:6E:F6:3C:96:49:5C:80:6F:C6:74:80:88:59:0F:73:7A
Certificate issuer: /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial: 019423D75C9CA8995FA97C0BBC33CAFD05F8
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/_h71B272PJZJXIBvxnSAiFkPc3o.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205718
IP address blocks: 185.205.112.0/22 maxlen: 22
2a09:1780::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5c:9c:a8:99:5f:a9:7c:0b:bc:33:ca:fd:05:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe1ef5076ef63c96495c806fc6748088590f737a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:11:65:f1:d7:b4:4f:18:2a:43:7e:00:ae:ec:
b2:7c:fe:54:ba:46:a7:43:d6:fa:4d:9b:28:d7:10:
50:b4:04:b6:c7:0b:05:97:f9:fd:39:82:09:9b:65:
c9:93:c0:b9:54:3e:41:1a:39:11:5b:b7:32:68:8f:
70:8e:e7:13:68:25:fe:4b:a7:38:22:c0:d4:1c:c1:
1a:37:e3:eb:03:e8:49:2e:3c:e6:2a:90:b6:f3:eb:
53:2d:1e:4d:aa:a3:dc:f9:79:73:3b:24:d6:f7:03:
f0:e4:8f:44:19:da:4b:13:e5:d2:99:bb:04:5f:1f:
26:23:16:39:03:78:6a:48:25:d7:a4:0f:bf:0d:c0:
a7:94:9e:a4:c9:c2:3d:a3:4f:c5:54:88:ec:3d:1a:
81:09:39:55:66:f2:1d:34:a6:58:63:6b:37:4c:48:
98:33:c2:87:63:0f:ca:ce:23:94:b7:2d:36:70:64:
10:42:80:99:77:93:c3:4d:80:fe:cb:aa:a6:50:bd:
78:f1:0f:0d:23:9f:c9:91:a3:9b:de:c6:e3:1e:01:
67:49:74:c7:f1:48:3a:7f:ef:97:4b:f1:02:56:13:
51:e3:21:76:aa:b8:b5:e3:d5:f5:b3:6c:a7:61:87:
fd:0c:8c:c9:4b:f0:1d:29:21:60:fa:c1:a6:38:2a:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1E:F5:07:6E:F6:3C:96:49:5C:80:6F:C6:74:80:88:59:0F:73:7A
X509v3 Authority Key Identifier:
keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/_h71B272PJZJXIBvxnSAiFkPc3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.112.0/22
IPv6:
2a09:1780::/34
Signature Algorithm: sha256WithRSAEncryption
3d:8b:55:4d:52:e8:da:bf:e3:d4:f1:8e:ce:f0:a2:1a:97:8c:
64:b1:be:48:37:3f:32:1a:4c:44:6f:ca:e8:d0:67:39:e4:c2:
7b:f8:8a:ad:aa:e7:10:98:75:cd:72:54:4d:98:d9:72:0f:90:
06:ee:20:14:35:68:db:ac:ef:6c:1d:45:05:41:f1:0d:fa:7b:
0b:61:e2:f3:65:5e:97:7e:6d:f7:7c:49:8a:f5:4b:6f:5f:bc:
31:fc:b8:d5:12:07:7c:11:95:3d:92:8e:05:d4:86:a3:3e:6c:
11:68:b5:1f:67:0d:f9:28:22:cd:c5:f7:17:fa:d6:9f:61:37:
89:08:dd:1e:b1:02:2d:4e:78:83:8b:bf:46:f2:0a:88:0f:a7:
2a:75:4f:3a:b7:e9:e2:5a:01:0c:1b:40:21:78:7d:bc:ce:1c:
76:cc:10:5f:a0:34:0c:cd:86:5c:21:80:d8:47:a1:97:4c:8f:
56:04:c3:b0:fa:21:79:3f:e2:df:d9:93:9f:e8:1d:77:73:77:
7c:11:c3:11:fa:3b:ee:8e:ce:69:c6:90:38:fa:34:35:6c:7c:
08:8c:6a:55:8e:2d:2f:0a:0b:df:22:34:04:10:8b:68:0b:43:
f9:bb:07:b9:2e:97:7d:ff:29:ab:6c:a7:f5:5d:64:65:13:0e:
02:9f:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:42:00 2025 by rpki-client