Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/B0cXI8R5Jkebb1b4_AZX0QkItTI.roa
File: B0cXI8R5Jkebb1b4_AZX0QkItTI.roa (raw, json)
Hash identifier: qU3eVg9ZrPWSREJWyOFSPkiCSojLDzpwNgzDMrBwxd0=
Subject key identifier: 07:47:17:23:C4:79:26:47:9B:6F:56:F8:FC:06:57:D1:09:08:B5:32
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 01953C4AB15EB3416FB6DA4E08B4188A148D
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/B0cXI8R5Jkebb1b4_AZX0QkItTI.roa
Signing time: Tue 25 Feb 2025 08:48:02 +0000
ROA not before: Tue 25 Feb 2025 08:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208719
IP address blocks: 185.127.240.0/22 maxlen: 23
2a03:9960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:4a:b1:5e:b3:41:6f:b6:da:4e:08:b4:18:8a:14:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Feb 25 08:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07471723c47926479b6f56f8fc0657d10908b532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:e4:af:60:10:04:dc:cc:22:df:05:8c:b6:
10:af:fd:0e:77:7d:dd:04:dd:df:7c:ca:54:f9:fc:
6f:8a:f1:83:68:62:3b:3f:75:71:77:39:83:22:8a:
59:8a:72:53:4b:a0:1a:10:80:5a:8a:84:48:c5:c3:
6b:c2:de:47:21:5e:e6:59:9e:75:f2:ce:30:7a:e9:
42:2b:c3:e7:3a:a1:50:dc:68:c2:8e:2a:6c:83:e3:
58:0d:f3:f2:04:21:60:43:43:ad:76:8f:45:42:2e:
e1:a4:66:8b:04:4e:18:d5:f1:fc:62:8c:3f:c1:d8:
6c:17:5a:a0:0f:9c:29:76:a1:8d:0a:e1:45:9a:1f:
fe:1c:f7:59:79:55:78:20:33:ca:b1:93:f6:bb:d9:
02:fd:ef:30:67:04:7b:f8:2d:0b:c0:9f:46:9a:b9:
9b:dc:ea:16:93:d9:7c:1b:0e:4a:b1:66:58:ba:e8:
e3:40:e1:fb:61:37:52:c6:32:80:1d:40:a1:22:5d:
12:e4:4e:f6:d1:01:61:fa:b1:1e:d1:9a:9c:21:2f:
20:68:a5:62:1d:52:53:dd:a9:0a:84:4c:de:3d:bd:
6c:85:96:61:8b:22:7c:f4:dc:97:2c:1b:aa:56:0e:
10:24:1c:fa:69:18:2b:48:74:b0:84:b8:ed:79:0a:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:17:23:C4:79:26:47:9B:6F:56:F8:FC:06:57:D1:09:08:B5:32
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/B0cXI8R5Jkebb1b4_AZX0QkItTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.240.0/22
IPv6:
2a03:9960::/32
Signature Algorithm: sha256WithRSAEncryption
67:c5:9a:61:e9:44:18:13:c8:f8:0f:a4:9e:df:fe:f9:1d:83:
0f:39:8b:fb:a9:38:3e:c7:80:3a:13:b1:6c:f6:de:de:2a:47:
8d:7e:61:9b:a0:ae:3d:59:c3:2e:3b:e4:e2:4e:0c:0d:77:51:
23:f0:a7:24:13:4e:1d:5a:3a:a6:08:7b:ba:73:63:7f:d2:37:
eb:9e:ab:f7:dc:e7:ed:0a:c4:86:2e:04:5e:d4:0f:50:bb:c4:
20:32:f2:c6:60:cd:14:ba:7e:f8:e0:b5:63:8e:29:ba:7c:15:
e5:77:6b:d3:24:f4:59:7e:5e:01:15:08:ac:dc:24:d7:6d:53:
e7:d9:e1:65:31:b2:85:d6:34:f3:ba:c1:6b:f9:cd:2b:b3:55:
eb:a6:0b:74:08:e8:1e:42:94:7d:92:67:34:71:0c:27:cd:80:
7d:bd:0c:74:4c:5d:02:b2:82:41:81:70:9f:b9:58:e0:3b:53:
9f:7e:66:c0:e6:1d:ed:fe:48:6c:22:47:ad:83:09:aa:17:d9:
a2:bf:36:62:7d:98:35:88:0b:96:a7:a4:66:69:2c:47:9a:7b:
ae:ab:9f:2a:2c:cf:dc:6d:24:f3:ce:c3:bb:d4:da:1e:63:9a:
01:f9:da:6b:54:ef:dd:8e:a6:50:e9:75:e5:f3:cf:8b:ca:da:
3e:3a:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:06 2025 by rpki-client