Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/7QVUt99h4511Posn9SqYvc2xLnE.roa
File: 7QVUt99h4511Posn9SqYvc2xLnE.roa (raw, json)
Hash identifier: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=
Subject key identifier: ED:05:54:B7:DF:61:E3:9D:75:3E:8B:27:F5:2A:98:BD:CD:B1:2E:71
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 019420D63F4BC6322BBF0F20EF3F233E4BAA
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/7QVUt99h4511Posn9SqYvc2xLnE.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.235.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3f:4b:c6:32:2b:bf:0f:20:ef:3f:23:3e:4b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed0554b7df61e39d753e8b27f52a98bdcdb12e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:7c:c0:4d:4a:2f:ed:c7:ae:ce:6e:15:dd:
f1:81:19:3f:93:07:8b:96:98:b5:48:2a:55:7c:cf:
15:32:03:d0:ee:ee:7f:53:e3:3b:43:57:3f:be:5b:
ac:3e:76:c4:e0:79:57:7f:d6:4f:09:d6:11:9e:6d:
23:ad:e3:00:75:90:44:4d:b9:e3:bb:53:d5:5c:85:
55:64:ee:d4:3e:50:2d:76:2c:80:53:bb:e0:30:01:
aa:05:2c:74:e7:17:41:6f:5a:25:5b:6b:d1:61:a9:
77:92:22:2a:32:60:fd:c5:59:8a:a2:41:f9:7f:8e:
77:c7:de:34:d4:2a:5e:9b:d6:8c:f8:d1:31:1f:cf:
44:0a:ef:34:dd:c2:aa:a1:3e:a8:93:a2:fa:4d:64:
0f:16:54:a0:40:0a:07:3e:ce:c3:b9:25:2e:a2:29:
db:5e:b6:a4:50:11:a2:49:60:7a:0c:6d:76:bd:af:
4d:82:47:48:0a:26:28:4d:f4:dc:26:1a:0c:5a:50:
c0:6c:fc:66:5d:58:9e:57:40:19:92:1e:a2:bc:a2:
64:7b:fd:8c:ba:f7:64:81:e5:10:2a:0d:bc:fc:91:
72:20:71:10:02:f4:55:aa:04:ce:b8:15:d6:3f:4f:
0b:36:91:31:8c:42:08:95:25:50:a9:3a:03:eb:15:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:54:B7:DF:61:E3:9D:75:3E:8B:27:F5:2A:98:BD:CD:B1:2E:71
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/7QVUt99h4511Posn9SqYvc2xLnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
Signature Algorithm: sha256WithRSAEncryption
97:2f:fe:06:99:cd:4a:4c:6b:26:0a:88:58:1c:0f:34:5e:0d:
31:32:de:29:c0:01:67:7a:f9:a6:5f:97:c0:a6:35:8d:cd:0d:
82:42:25:b8:99:6d:c6:e2:43:cb:9d:6a:df:51:11:e3:8e:c9:
22:d1:ab:31:44:18:d7:e0:0c:c0:3c:f4:e7:8a:71:e4:c0:3f:
37:3f:ac:eb:11:0e:e8:74:53:62:af:f9:64:44:23:86:44:50:
56:9c:4c:68:5b:9e:95:b4:1d:ff:a2:3c:5f:cb:80:d9:12:26:
ed:9c:f1:18:7a:ad:43:c8:68:f0:71:f9:fe:be:3d:a2:c2:96:
22:33:d6:75:53:a5:8a:a1:d9:55:6f:4f:22:9e:bf:ce:a6:1b:
b8:7b:fe:a3:96:36:62:8d:43:82:93:12:6f:15:0b:af:3b:c0:
45:0a:e7:a2:68:5d:53:82:bc:38:79:51:71:54:f6:7d:ec:02:
9b:ae:6e:7c:59:d8:6d:a8:f7:c4:a5:c2:c8:56:97:b0:3b:c7:
39:d7:bc:80:88:43:55:c7:d9:8a:5f:ca:4b:50:d9:b0:9f:ff:
b4:30:47:01:af:ce:a2:62:4e:2c:e6:d1:7a:52:2b:c8:15:fc:
e1:ae:a3:04:eb:a4:f6:a4:59:7f:ad:31:fd:9c:f0:a0:d1:f2:
b8:2c:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:48:02 2025 by rpki-client