Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/cAytH-HDjgmoQUIxFhiNXUzaQk0.roa
File: cAytH-HDjgmoQUIxFhiNXUzaQk0.roa (raw, json)
Hash identifier: WrCK/gy3OkunpeHSieq4WLNSBfAWRn5dFSNNGUA3mvQ=
Subject key identifier: 70:0C:AD:1F:E1:C3:8E:09:A8:41:42:31:16:18:8D:5D:4C:DA:42:4D
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 0194258F9A0C31548C3FF2BB9635856002D8
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/cAytH-HDjgmoQUIxFhiNXUzaQk0.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8943
IP address blocks: 185.98.212.0/22 maxlen: 23
2a06:ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:0c:31:54:8c:3f:f2:bb:96:35:85:60:02:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=700cad1fe1c38e09a841423116188d5d4cda424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:fb:64:96:d9:b0:34:de:8f:fe:cd:25:2e:
1a:5d:b9:34:c0:88:23:b5:27:de:ff:90:2a:2c:d4:
35:84:76:20:3c:d1:cc:62:a2:3a:bb:17:94:c5:0e:
2d:15:29:45:54:8e:cf:60:e9:64:b8:e9:ab:38:ef:
c1:cc:19:b6:18:5d:b3:12:41:2d:81:8a:83:d5:dc:
db:ab:48:08:3d:da:06:47:bc:38:13:82:16:a2:2a:
d6:61:5a:c1:52:9b:07:43:f3:bf:2d:61:ec:c9:4c:
82:59:74:9f:38:86:38:b8:a3:bc:b8:d2:4c:10:45:
21:58:d6:95:43:dd:96:64:22:51:28:7c:d5:8a:1f:
73:2f:c9:9c:e4:c9:df:a1:10:ea:7f:11:fe:14:98:
4d:d5:fd:a4:a4:6e:06:fc:42:c1:c5:71:1c:f1:e5:
bf:e8:47:04:36:ba:a8:a6:cc:bf:06:4b:6c:ef:a5:
6a:8a:f2:64:1b:9c:05:73:91:2c:65:ae:b4:42:00:
ec:ef:a5:32:85:b5:b1:94:c1:79:e0:98:56:b1:e1:
55:1c:6e:e8:9d:f6:67:ef:14:23:91:e1:f8:79:59:
ed:58:6a:fe:55:f8:6c:90:e0:01:fb:0b:d3:28:7d:
61:2e:4f:0c:7c:bc:fe:cf:14:79:ce:0d:fb:33:62:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0C:AD:1F:E1:C3:8E:09:A8:41:42:31:16:18:8D:5D:4C:DA:42:4D
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/cAytH-HDjgmoQUIxFhiNXUzaQk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.212.0/22
IPv6:
2a06:ec0::/32
Signature Algorithm: sha256WithRSAEncryption
59:dd:86:bb:1c:e1:1a:d2:3d:63:79:c6:2f:22:b6:ee:7e:44:
5c:24:56:e3:90:73:b7:ca:c6:27:0e:15:a2:b9:83:e2:c5:22:
45:b3:64:a5:36:f7:84:5e:73:22:dd:a9:27:f3:f0:1d:a3:87:
4b:1d:f7:3a:11:c6:f3:50:26:2a:f6:ab:e4:1d:69:61:1a:f9:
c3:d0:fd:4e:c9:75:12:e9:18:5f:0c:62:ae:4c:fa:1f:79:4a:
09:50:e2:be:a5:dc:0e:3d:82:ae:1a:27:43:6c:f9:7a:0a:5c:
c3:d4:8f:5e:4d:cd:2b:84:9a:3e:32:a6:1e:e2:5e:bb:78:60:
ed:5a:b4:aa:a7:6e:18:ef:6a:0d:03:0d:e0:b2:9b:17:fd:6a:
99:b0:d2:1e:29:6f:38:4c:00:95:d0:4e:20:84:34:41:66:5f:
86:ea:2b:75:94:46:65:4e:39:ba:40:08:5d:f5:aa:f9:9e:46:
08:2e:9a:61:6e:d8:3b:11:ce:e0:5c:83:b5:6a:78:2b:58:ba:
65:7f:c7:62:91:81:30:f6:d4:98:8b:64:57:1b:01:98:92:5d:
e8:bd:96:e3:17:c0:6a:2f:c4:fc:95:87:53:3a:fb:7f:e8:2e:
16:dd:39:20:9f:8a:35:0c:25:a4:67:d9:ce:fe:de:43:e4:29:
06:b5:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:12 2025 by rpki-client