Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/x7qF1swc6KDeUuxg1VrqWurToxo.roa
File: x7qF1swc6KDeUuxg1VrqWurToxo.roa (raw, json)
Hash identifier: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=
Subject key identifier: C7:BA:85:D6:CC:1C:E8:A0:DE:52:EC:60:D5:5A:EA:5A:EA:D3:A3:1A
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 019422FC2150379DD72933A1F42D8D5F3163
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/x7qF1swc6KDeUuxg1VrqWurToxo.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50597
IP address blocks: 185.254.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:21:50:37:9d:d7:29:33:a1:f4:2d:8d:5f:31:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ba85d6cc1ce8a0de52ec60d55aea5aead3a31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:d1:dc:83:bd:f3:25:13:d4:17:ac:3c:cb:
81:5a:3e:92:9d:d9:b4:6f:59:88:77:5a:47:25:56:
8e:c2:08:b5:c3:ec:2a:27:19:0c:f9:35:95:bd:b6:
4f:fb:19:a9:d9:7a:5e:48:b0:a9:4d:dd:f2:1e:63:
5a:7a:63:28:c2:4e:64:02:b0:2a:16:47:26:cc:4c:
3d:5a:dd:06:35:c2:1a:62:0b:c6:5e:67:5e:da:f1:
2d:a5:6a:e1:0c:7c:dc:93:d2:95:d9:f6:e5:c1:76:
b1:44:b0:c2:24:99:c0:5f:1e:5b:b6:1e:61:59:94:
18:4a:11:ff:57:a3:bd:57:f2:c4:8b:37:df:0d:34:
4e:8c:86:fb:92:56:96:65:80:c8:3a:ae:3a:de:06:
ed:1b:43:ea:df:b8:7a:c1:10:21:03:40:ce:01:67:
ac:36:b6:c1:68:5b:89:43:7a:71:69:3d:40:20:ed:
73:6c:ea:78:be:bc:79:05:69:52:a1:da:a3:1f:5b:
b0:dd:ec:9b:60:dc:e2:e6:b8:39:2f:02:af:bf:dd:
34:0a:87:e6:55:5e:d4:bd:7a:d6:87:b4:54:01:95:
29:b8:69:2e:ec:12:71:d2:39:8c:99:13:0a:e9:58:
c1:eb:51:b3:30:32:b5:f6:8d:b3:bd:9b:2d:9d:68:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BA:85:D6:CC:1C:E8:A0:DE:52:EC:60:D5:5A:EA:5A:EA:D3:A3:1A
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/x7qF1swc6KDeUuxg1VrqWurToxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.87.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4f:ae:85:7b:c1:82:19:45:0d:3f:90:44:5c:21:dd:ba:43:
26:38:00:5c:35:36:75:9c:14:ef:37:9f:48:d4:c3:32:30:0f:
79:6a:43:32:25:6f:14:ff:f5:b7:6e:04:30:56:4a:b4:4f:9d:
f4:4a:4c:ad:df:8b:9f:63:cf:ab:04:a1:7a:ac:48:f6:b8:9b:
f7:7c:aa:1a:00:46:52:aa:f4:e8:3d:73:6e:5f:89:4f:17:f8:
ad:51:0a:41:97:f7:e5:0d:14:b4:38:27:91:04:ef:28:0f:13:
d7:5e:ac:8b:78:34:5b:c1:b2:9c:e9:1d:3b:35:93:16:4d:91:
4f:7a:63:c1:80:fb:d8:6a:59:1a:36:e8:7b:e3:8d:67:ed:25:
f6:b4:2c:d7:3e:04:63:50:8e:df:3b:a2:3a:c2:42:75:97:47:
2d:00:8b:49:a0:0f:e3:22:e3:01:62:d9:11:cc:4b:6e:69:89:
b5:54:00:3f:17:5d:b9:b1:16:e8:4e:a4:16:d4:b4:a0:79:3d:
a7:ad:09:5c:f3:59:e9:2c:18:ae:01:60:ae:2c:d5:d2:86:6d:
92:fa:9b:a9:6f:06:32:ec:0e:25:26:dc:1a:9a:b9:c3:34:8d:
57:10:8f:f7:ea:00:79:8a:f9:4a:10:db:4a:88:c2:a4:4d:c2:
e5:d0:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:49:09 2025 by rpki-client