Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/1-47yB099htuBv2m-mnsxmo5hMaE.roa
File: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (raw, json)
Hash identifier: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=
Subject key identifier: FB:8E:F2:07:4F:7D:86:DB:81:BF:69:BE:9A:7B:31:9A:8E:61:31:A1
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 019426D9667C01F27A374FE35597DED31E38
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/1-47yB099htuBv2m-mnsxmo5hMaE.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204300
IP address blocks: 185.21.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:66:7c:01:f2:7a:37:4f:e3:55:97:de:d3:1e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb8ef2074f7d86db81bf69be9a7b319a8e6131a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:03:40:59:cc:60:d4:e3:71:2f:47:06:46:97:
76:3c:4e:ef:3b:27:3c:03:16:63:c3:97:08:1e:9a:
17:fc:e2:48:9d:64:62:f7:7c:59:59:31:97:0e:3c:
54:ef:c5:9a:72:d2:71:f7:f8:15:9a:fa:01:80:a9:
7b:2b:2e:29:f8:41:15:c1:1b:f3:e0:66:9a:b6:ba:
23:74:56:9b:fa:9f:1c:8f:d7:ea:ab:0a:fa:d5:c7:
92:d9:bf:4c:14:17:b5:54:67:51:4d:ae:ca:5c:82:
e5:b4:c0:5b:e3:bc:3b:1a:6c:71:37:ef:02:ca:dc:
49:5f:35:e7:c3:bb:7a:f8:b5:1d:44:c5:3d:03:f0:
7b:2e:19:0b:54:ea:45:8a:b2:a6:ee:b3:56:44:77:
73:6b:8f:5a:3d:23:e8:a0:c5:f7:44:d7:21:bf:43:
0d:11:29:dd:e5:7a:3a:01:28:57:01:69:d8:02:bd:
7f:87:76:83:34:d5:e2:8f:3e:b2:fe:cd:06:b5:99:
17:74:ac:c4:50:cf:b6:16:5f:57:77:7b:92:a4:0b:
bd:fd:e4:bc:3e:76:95:eb:f6:d6:d1:d5:ca:c1:0a:
06:b0:27:e6:91:47:34:e9:13:e8:87:35:14:15:43:
5f:26:a0:ba:93:9a:9c:ed:c8:1b:03:f4:7e:bb:e8:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8E:F2:07:4F:7D:86:DB:81:BF:69:BE:9A:7B:31:9A:8E:61:31:A1
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/1-47yB099htuBv2m-mnsxmo5hMaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:5d:d8:13:86:18:e1:4d:72:11:bf:10:4d:73:48:13:eb:fc:
58:70:b6:dd:7e:26:7f:48:e4:16:57:4c:9b:d3:1e:01:ca:86:
bd:e3:18:df:f4:b8:3c:d5:9e:e6:c2:02:de:a9:8d:a7:8e:a3:
a0:f5:21:ab:1e:33:c9:78:63:fa:3f:42:71:f5:be:95:1f:a2:
3a:62:52:b8:07:24:ba:c4:98:bd:0c:d9:6c:04:e0:66:71:92:
ca:ac:7d:7a:32:89:55:a5:5c:d5:35:81:2f:57:d4:fc:85:e8:
5f:e5:18:2e:b6:7b:97:75:49:ff:4e:72:86:32:f2:34:4b:ea:
42:3d:25:2e:87:c8:44:8c:1b:a0:16:a3:9e:7a:af:e4:2c:4f:
59:81:3f:b0:0c:a9:c6:00:e2:79:5e:e7:8a:71:0c:f3:32:bf:
8e:2d:de:f3:13:8e:43:25:75:6e:e6:81:23:01:7e:3d:c3:0d:
55:52:61:51:84:3e:d8:c2:ed:40:c3:db:58:4d:bd:72:5d:74:
1d:90:48:d0:16:28:ad:37:32:1c:a8:4b:27:57:6c:dc:a9:47:
ea:e7:22:31:cb:20:5c:f8:45:bc:54:f4:b0:81:82:e8:d7:ee:
8a:6f:8b:6e:ad:4f:cb:e9:74:be:e0:c0:44:b7:b3:74:44:d7:
f2:57:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 05:49:50 2025 by rpki-client