Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa
File: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (raw, json)
Hash identifier: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=
Subject key identifier: F7:0E:D9:E6:E5:06:02:23:3E:FC:37:F5:BE:88:93:E0:DF:80:22:04
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 01964CBE6DE4121F78AE051BCAB126C666D5
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa
Signing time: Sat 19 Apr 2025 06:31:10 +0000
ROA not before: Sat 19 Apr 2025 06:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34766
IP address blocks: 185.214.24.0/22 maxlen: 22
185.214.24.0/24 maxlen: 24
185.214.26.0/24 maxlen: 24
2a0b:9440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:be:6d:e4:12:1f:78:ae:05:1b:ca:b1:26:c6:66:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Apr 19 06:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f70ed9e6e50602233efc37f5be8893e0df802204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:2f:84:4f:17:01:78:62:c7:41:2e:ca:c0:
b7:c1:d7:0f:6f:59:4a:05:e8:75:58:6e:8d:23:71:
dd:a0:8b:3f:58:6c:d8:53:33:04:5b:ff:5f:ee:e4:
9a:41:c2:ee:b3:c0:06:10:52:ab:38:3e:44:a9:3a:
fa:22:3a:94:18:46:44:49:db:f8:35:2c:09:bc:6d:
1b:e9:4a:13:be:95:d7:d2:11:35:0c:2f:cb:9e:1a:
0b:a0:c9:7d:f8:37:b7:24:05:d9:2f:3f:24:1a:69:
a4:99:b1:b4:1a:c0:7e:0f:14:e6:38:14:88:b6:a9:
52:a9:51:30:2b:d4:05:fa:9b:f5:76:7a:b5:af:dc:
2c:d0:78:88:67:11:77:8a:9d:ba:79:a1:53:b6:16:
20:5d:55:8f:72:fb:8e:24:70:ee:73:43:54:4e:c9:
0d:b3:d9:ed:fe:d3:40:76:fc:c5:32:82:08:dc:4e:
09:c6:99:8d:d4:9c:12:ea:40:27:f4:f7:cb:39:69:
aa:25:d9:1f:fc:98:a5:68:12:6b:ae:44:4a:e5:f9:
e0:78:80:90:be:d8:8f:f3:fa:ce:19:0b:84:5e:84:
c3:7e:ca:d6:d7:f9:5d:6a:61:c0:4f:86:f4:6b:7a:
b3:f1:30:c7:dd:be:fc:bf:3e:9c:20:61:27:af:37:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:D9:E6:E5:06:02:23:3E:FC:37:F5:BE:88:93:E0:DF:80:22:04
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.24.0/22
IPv6:
2a0b:9440::/29
Signature Algorithm: sha256WithRSAEncryption
b6:09:ea:96:70:6a:e6:0e:31:c5:9e:c4:db:33:97:6b:89:2a:
75:80:c9:b8:4d:59:6f:e0:87:74:c6:29:55:83:41:55:1a:00:
36:db:e9:bc:eb:11:35:a1:06:e4:f7:10:eb:db:c6:64:ac:d5:
72:f3:13:83:11:83:55:7e:50:6b:50:f4:db:a7:cf:9f:d4:c5:
51:6c:61:4d:8e:4a:6f:d5:0a:79:e1:a4:bb:12:3e:e2:e8:0a:
10:4e:ed:77:27:e8:ff:ee:c0:97:95:d3:5f:ca:e9:df:68:2a:
49:fc:1b:d9:77:72:cb:49:e1:32:c8:0f:17:f1:29:c5:a4:5d:
e5:2c:ae:e6:6b:44:4e:50:c7:b6:f2:6f:20:31:ef:aa:6d:79:
89:b4:64:03:0a:2b:4c:76:be:d2:29:17:44:e6:54:68:8e:e9:
2b:0c:89:02:1f:80:c6:14:9e:6d:a7:cf:e4:a9:0e:d1:46:9b:
76:3c:3d:3b:3a:9a:84:93:1f:87:73:a1:27:46:60:ca:36:44:
53:fc:d9:b8:23:5b:97:59:e8:25:a0:eb:8c:37:d2:01:0c:38:
b2:c2:46:df:b1:15:da:9c:e1:85:1a:6c:37:4f:64:84:b7:ae:
09:96:b6:1d:61:04:23:23:68:97:07:57:08:d4:f2:f9:8d:10:
0e:79:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:36 2025 by rpki-client