Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kF7HVw66LPwHT-xvjvTHHR-cTCM.roa
File: kF7HVw66LPwHT-xvjvTHHR-cTCM.roa (raw, json)
Hash identifier: mlJySX28+L4iUGXl3LhigdHuit0z7K4w23wH8mEQfBQ=
Subject key identifier: 90:5E:C7:57:0E:BA:2C:FC:07:4F:EC:6F:8E:F4:C7:1D:1F:9C:4C:23
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC0F76B571EDFE5175EAFF47A5C40A
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kF7HVw66LPwHT-xvjvTHHR-cTCM.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50138
IP address blocks: 185.212.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0f:76:b5:71:ed:fe:51:75:ea:ff:47:a5:c4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=905ec7570eba2cfc074fec6f8ef4c71d1f9c4c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:a8:1c:66:c8:fd:a1:55:04:dc:06:d4:e3:
8d:4c:f7:28:b1:55:be:fb:a8:d5:ef:3a:8d:73:59:
a3:37:19:25:91:9c:52:f7:f4:e2:92:24:ef:8d:e9:
42:9c:6e:57:27:ef:40:8e:6f:41:d2:11:60:39:e2:
31:64:ed:28:5c:05:b1:c0:00:b0:2f:da:b1:92:68:
2d:d9:ae:0f:c8:33:7a:dc:80:b2:87:f2:07:de:6b:
10:97:ac:bb:c3:d3:4e:b4:ec:c9:f6:cf:97:21:f4:
32:4b:56:cb:c1:5f:a3:f2:21:9e:79:d4:5c:74:b3:
25:3a:7d:44:5d:75:72:14:56:fc:3e:c2:6a:9a:7a:
17:57:07:37:6b:a9:18:98:b8:76:35:76:bf:4d:06:
65:b3:d0:59:7c:d2:8c:82:61:58:31:e8:9e:ec:30:
57:41:35:31:d8:22:73:39:e5:a0:92:fd:46:05:8b:
c7:59:81:04:a4:86:fb:bd:33:6f:4a:59:92:e4:16:
3d:78:e4:7d:2d:1c:ed:fa:9d:42:55:a7:a7:0a:b7:
e1:65:f6:38:b3:11:46:bd:19:d3:f0:d3:02:98:18:
ab:30:d6:22:60:7d:d3:5f:74:ac:7a:63:f6:f3:e5:
96:f6:5f:ce:b7:de:de:10:8c:a3:34:19:c9:10:c4:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:C7:57:0E:BA:2C:FC:07:4F:EC:6F:8E:F4:C7:1D:1F:9C:4C:23
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kF7HVw66LPwHT-xvjvTHHR-cTCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.9.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3f:43:4a:b3:87:fb:d5:77:7f:c8:9a:13:68:de:7e:dc:d2:
98:18:24:f0:97:91:fb:0a:43:54:1f:76:0c:c0:e5:43:11:d9:
b0:94:d1:5d:f1:b8:6c:89:84:e2:21:6b:21:b0:6a:fc:93:ee:
9f:f0:9a:a4:8b:96:a6:c4:e2:08:d3:c2:72:ac:08:bd:73:2d:
53:73:39:3e:7b:12:2a:c5:74:9c:19:38:74:7e:31:a1:84:cc:
47:37:a4:2a:92:71:82:10:e2:56:ca:74:8f:2f:f4:af:f4:6e:
a6:ae:fe:56:00:6b:bf:41:7d:83:6d:75:cd:cc:9b:4a:f6:40:
e9:b2:51:db:0e:c9:fe:a8:8e:f5:29:61:36:89:e7:23:65:04:
e3:38:0e:44:84:ef:ea:dd:e1:4a:8b:36:a4:4e:08:ac:6f:2b:
3d:cf:f0:81:d1:df:66:7f:0d:cb:fd:84:ac:72:f4:7e:92:6a:
6c:5b:0d:77:e0:d1:19:9a:78:e9:30:c3:bd:b7:4a:34:dd:79:
39:3d:6b:68:1d:d0:f1:f7:25:83:b7:c9:fd:42:52:19:d7:d1:
54:e5:70:7e:d7:a7:17:80:c2:7b:20:83:5f:e4:a8:44:ad:39:
e2:45:89:89:69:18:ad:80:70:06:c8:e8:7b:d0:c6:4e:3b:d6:
d2:ee:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:51 2025 by rpki-client