Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/f22Rg9MgZynKKLpI74qpWeFqUQg.roa
File: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (raw, json)
Hash identifier: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=
Subject key identifier: 7F:6D:91:83:D3:20:67:29:CA:28:BA:48:EF:8A:A9:59:E1:6A:51:08
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E092978B7F1E04D7A95977BDDA26E
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/f22Rg9MgZynKKLpI74qpWeFqUQg.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50889
IP address blocks: 85.29.14.0/24 maxlen: 24
85.29.18.0/24 maxlen: 24
85.29.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:09:29:78:b7:f1:e0:4d:7a:95:97:7b:dd:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f6d9183d3206729ca28ba48ef8aa959e16a5108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:af:5c:ec:e0:20:54:80:c9:e2:83:63:ad:
7c:67:d3:a0:7a:59:48:21:44:9e:27:5d:d8:67:73:
2d:99:f4:3a:70:27:3f:1e:1f:3f:9a:36:2d:ff:fd:
b9:7b:93:f0:51:28:c4:c8:d3:2f:18:a4:72:00:ae:
50:7d:c6:5c:2f:75:c6:9a:47:4f:e0:9e:ea:55:62:
9b:41:b4:45:59:85:d6:fb:3f:cd:2c:39:67:6e:2f:
cd:1a:32:51:66:74:57:da:c9:59:42:48:b2:43:2d:
6a:d4:fd:94:6e:87:f3:a9:aa:e1:a9:65:09:b7:55:
6a:cd:bb:ff:8b:40:dd:83:fc:81:ad:84:8e:96:3c:
b1:ea:5b:91:ff:62:a1:3e:13:90:b3:15:a7:26:79:
1d:3c:d4:3a:2a:0f:1c:4a:7f:57:ce:27:5d:e5:5e:
87:85:21:2c:5b:a0:bf:21:05:db:73:73:84:83:b6:
63:9f:ff:d5:94:57:77:26:0d:57:6c:31:25:4e:9a:
79:54:79:4f:1c:d3:24:32:17:e3:91:ff:fd:d3:bb:
98:c1:ea:15:11:07:e4:b6:e3:28:5f:af:65:53:89:
ef:a8:d8:c9:b2:f5:c3:bc:3b:52:83:64:7e:33:a6:
a3:f3:69:21:93:51:c4:18:c8:6e:1f:e7:6f:58:ee:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6D:91:83:D3:20:67:29:CA:28:BA:48:EF:8A:A9:59:E1:6A:51:08
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/f22Rg9MgZynKKLpI74qpWeFqUQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.29.14.0/24
85.29.18.0/24
85.29.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:05:3c:4c:42:c2:6c:2f:48:17:dc:25:7a:1c:19:c0:e3:df:
69:ad:a7:b3:ed:b0:b4:4d:fe:a1:ac:99:bc:c6:4b:87:78:ac:
91:b1:7b:d3:07:d5:6a:ca:26:43:71:d9:82:6d:b7:f6:6a:20:
b9:48:8e:d0:d9:ee:53:c1:c1:9f:79:27:d7:d5:7b:e8:d4:ec:
f6:a7:51:44:1f:86:09:c3:92:5f:1a:6b:b0:81:a2:12:13:01:
b8:46:16:0e:c7:0c:05:26:58:3e:ba:73:93:d4:fb:94:30:33:
65:dc:b4:37:93:a1:6d:b5:d5:0c:58:51:d4:94:90:ba:fc:b2:
00:94:5f:48:f3:2d:df:d4:09:a9:d3:f7:18:8e:57:29:2e:00:
cc:7e:ed:23:17:55:45:89:e4:f9:cb:32:4f:ac:78:96:c3:f2:
c8:e5:8b:4f:3a:6e:d2:35:2c:19:7e:ae:78:c0:49:ba:85:76:
3f:78:01:52:b9:fa:18:b1:eb:e9:e3:d0:f7:d6:0f:b7:80:17:
fe:1e:88:db:1a:61:92:a8:a2:f1:f1:fc:6d:57:ba:96:9f:d4:
98:33:4a:d5:f9:80:05:0d:55:6f:bf:67:4c:24:71:48:e3:ef:
02:b8:f9:0f:a2:c1:d7:82:a1:a9:d8:f6:00:59:38:53:61:ac:
10:bf:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:43:46 2025 by rpki-client