Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/f2XJfv98xMfqrpaFL1qLYMfVin0.roa
File: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (raw, json)
Hash identifier: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=
Subject key identifier: 7F:65:C9:7E:FF:7C:C4:C7:EA:AE:96:85:2F:5A:8B:60:C7:D5:8A:7D
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 019427B54745AD8A4C22CCC5C4CEBC5377C9
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/f2XJfv98xMfqrpaFL1qLYMfVin0.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61044
IP address blocks: 37.148.192.0/21 maxlen: 21
37.148.196.0/24 maxlen: 24
185.40.92.0/22 maxlen: 22
2a03:10c0::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:47:45:ad:8a:4c:22:cc:c5:c4:ce:bc:53:77:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f65c97eff7cc4c7eaae96852f5a8b60c7d58a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:3c:ea:73:b8:ab:ef:bb:18:d1:7b:d5:d6:
c7:f4:85:c0:71:69:4c:1a:9d:1c:62:e6:cc:bc:ac:
4c:e1:4d:b5:86:3c:aa:d8:29:99:6a:77:4a:63:73:
ee:cd:36:8a:ec:14:16:11:dc:29:43:38:4b:54:ca:
b9:94:33:3d:18:2b:57:e4:54:74:aa:7e:31:23:be:
42:a0:e7:80:58:43:da:be:7c:d2:15:d0:c7:da:ab:
55:b5:d4:50:f7:fb:ba:b4:d6:58:a8:ba:3d:b7:ff:
4f:75:b6:b3:35:8d:ec:0e:aa:bb:02:c5:86:93:70:
4e:3f:37:73:ce:3a:fc:ee:08:2c:53:10:0f:1a:e7:
3a:0f:b3:13:20:ee:e0:f1:23:f8:c0:04:14:dd:af:
9a:69:6d:c6:a8:b2:55:4e:13:b5:18:fe:53:cd:4d:
c9:08:d5:c2:2d:55:1d:97:bc:18:d8:5c:67:95:7e:
92:8c:5f:aa:7b:a2:9e:ea:52:d5:d3:2c:b2:c4:ed:
44:07:52:53:44:94:3b:ec:bd:57:27:8a:4b:17:01:
6d:b9:26:52:f4:3e:08:53:51:a5:90:e8:ef:df:93:
23:a7:98:05:e6:3f:9f:96:77:70:52:5f:57:16:93:
71:32:b9:b0:b8:00:e7:f3:f1:d2:2f:eb:37:5f:57:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:C9:7E:FF:7C:C4:C7:EA:AE:96:85:2F:5A:8B:60:C7:D5:8A:7D
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/f2XJfv98xMfqrpaFL1qLYMfVin0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.192.0/21
185.40.92.0/22
IPv6:
2a03:10c0::/30
Signature Algorithm: sha256WithRSAEncryption
83:dc:80:41:35:cd:94:17:7e:24:64:6f:5e:76:cf:ce:d5:57:
55:23:b2:3f:0b:d2:3d:3a:4d:c6:79:85:ef:38:6d:a2:1d:99:
20:9d:7a:a4:a3:c9:1f:78:f2:21:1f:90:48:96:c3:ca:16:a6:
df:fe:82:cb:f7:18:d4:ff:24:48:f6:45:f7:63:6f:75:6d:86:
e2:22:95:ce:22:b8:d4:be:b9:5b:18:29:c6:58:ac:92:20:8c:
f8:7d:90:3c:1f:53:fd:b0:db:72:2c:99:00:5c:02:66:2c:0f:
35:29:fd:72:62:7f:49:07:f6:49:75:23:72:2e:c6:5a:da:55:
bf:b7:61:8e:23:0d:10:61:b6:59:8a:6d:50:54:57:b5:a3:ae:
35:94:27:d9:18:d2:15:ef:65:e6:0b:ba:67:c2:32:61:bf:db:
41:76:45:53:ad:4a:e1:21:8c:5a:58:ef:9e:e5:80:27:96:b8:
3b:e0:fc:8e:ef:5c:5c:80:8b:eb:e7:c3:10:f2:7d:cd:91:3e:
01:b1:ee:19:95:7a:d2:d1:6f:a9:29:84:33:ea:24:d3:dc:b9:
ec:e9:27:60:97:68:bd:a4:a7:54:d5:77:fd:e2:9b:92:8e:8c:
77:a3:ae:2a:b2:bb:9e:62:22:9b:e9:bd:ca:b9:ce:e4:d3:d7:
67:32:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:09 2025 by rpki-client