Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/H35Cm8Po0LU1BOfN5tJ4BT4fPEo.roa
File: H35Cm8Po0LU1BOfN5tJ4BT4fPEo.roa (raw, json)
Hash identifier: F+upw1/HpLM3WaLlt0Qi9SCbAq0VRTzqm01IyvK059A=
Subject key identifier: 1F:7E:42:9B:C3:E8:D0:B5:35:04:E7:CD:E6:D2:78:05:3E:1F:3C:4A
Certificate issuer: /CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Certificate serial: 01942521327EB654FC3B3455CEC327347E81
Authority key identifier: 15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/H35Cm8Po0LU1BOfN5tJ4BT4fPEo.roa
Signing time: Thu 02 Jan 2025 03:48:39 +0000
ROA not before: Thu 02 Jan 2025 03:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207097
IP address blocks: 185.166.24.0/24 maxlen: 24
185.166.25.0/24 maxlen: 24
185.166.26.0/24 maxlen: 24
185.166.27.0/24 maxlen: 24
2a0a:6a00::/32 maxlen: 32
2a0a:6a01::/32 maxlen: 32
2a0a:6a02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:32:7e:b6:54:fc:3b:34:55:ce:c3:27:34:7e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151e6c3dc5d6754fe4f60a82b1cc551ab780df8b
Validity
Not Before: Jan 2 03:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f7e429bc3e8d0b53504e7cde6d278053e1f3c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:d5:18:c9:31:2d:30:ab:6f:91:78:e2:ef:
a0:94:41:bd:05:ac:43:3d:82:3f:84:f6:29:b9:1a:
d5:51:c0:fd:8a:1f:0c:52:f1:aa:e0:97:90:1e:5e:
d1:f0:6a:f1:10:2b:04:3a:68:a2:84:0c:4c:fa:40:
e2:4d:57:98:de:38:d1:e6:e7:6b:c3:4b:83:7f:34:
0b:d0:3d:34:ac:c7:8f:c5:df:d2:34:aa:07:6c:d3:
bf:c2:5c:6f:b0:95:6a:24:2d:4b:ab:e9:52:3d:0e:
8c:d6:db:e0:15:11:07:d1:59:f9:65:7c:78:4e:88:
2e:02:54:7d:e6:7c:80:d4:ea:5a:aa:1e:ba:e7:a2:
26:49:d5:80:30:90:a3:5c:6e:a7:5b:c8:7e:29:d0:
69:6c:2a:d3:c1:51:2e:c6:3e:ff:3d:e4:0f:ef:f9:
cf:12:62:7c:26:8a:15:3a:56:ca:04:60:3c:00:bd:
c4:a4:b2:d2:ab:ad:26:90:54:48:39:e9:6d:00:90:
7b:4b:41:ee:43:f8:26:be:8a:13:85:3d:b7:45:b2:
7b:50:83:46:6e:0c:66:c3:2b:53:f5:b3:c6:41:dd:
5c:94:9c:8d:11:64:5c:e4:e2:11:9d:8c:97:d4:17:
7b:dd:99:55:50:6a:af:5e:5f:04:0a:95:88:ce:41:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7E:42:9B:C3:E8:D0:B5:35:04:E7:CD:E6:D2:78:05:3E:1F:3C:4A
X509v3 Authority Key Identifier:
keyid:15:1E:6C:3D:C5:D6:75:4F:E4:F6:0A:82:B1:CC:55:1A:B7:80:DF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FR5sPcXWdU_k9gqCscxVGreA34s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/H35Cm8Po0LU1BOfN5tJ4BT4fPEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4ffe77-6f3d-41ca-8d8b-4a2aad796fc1/1/FR5sPcXWdU_k9gqCscxVGreA34s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.24.0/22
IPv6:
2a0a:6a00::-2a0a:6a02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
53:7b:95:da:7d:52:ac:2c:00:31:fe:3c:37:60:88:c4:f5:05:
f2:16:f9:73:98:6a:0c:9d:08:5f:a5:d8:8d:19:4f:d9:54:ff:
01:3f:01:ee:34:21:da:87:59:c8:cb:ab:8e:99:f7:45:9e:ef:
56:e5:41:5c:f2:a4:17:77:6c:9e:40:3a:a4:a3:77:0d:03:f1:
49:4e:19:0a:8d:e5:12:74:24:9e:e3:c7:64:3e:2f:9e:de:3b:
69:2c:a0:22:69:a3:0b:04:98:ae:e7:b7:72:8e:cd:fe:90:18:
87:17:00:19:76:f9:df:0e:33:76:ea:39:00:33:bc:50:dd:5a:
4a:17:d8:3d:26:63:bf:f2:04:02:33:98:27:1b:ff:f2:99:9d:
dd:c5:17:7e:01:c7:e1:85:f3:4a:95:0a:bf:13:1e:8a:80:e6:
35:90:24:43:1c:82:b7:f6:5e:dc:bf:a8:a6:18:cd:30:fb:03:
f9:d9:16:aa:a5:21:5a:70:ec:b2:17:d3:97:a0:1c:9f:e7:27:
8a:1b:f1:7e:b0:da:dd:2b:94:b9:fb:c7:f0:35:b8:0b:8a:8f:
7e:df:ce:09:49:d7:c2:af:6d:fe:de:a8:b5:34:bc:9b:95:24:
67:80:85:91:a6:8c:fd:6a:23:7e:48:27:09:db:9c:f3:b9:66:
e8:40:42:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:03:46 2025 by rpki-client