Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa
File: 7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa (raw, json)
Hash identifier: 3q07zOwK9FpR/xxKetT0w53QAdYnEKsI1+bhtbTPVBE=
Subject key identifier: EE:D7:11:99:45:D4:F5:0D:D3:CD:25:37:13:C5:D4:7B:2A:D8:9E:22
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 019427B49296C814E874106B399B74657356
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa
Signing time: Thu 02 Jan 2025 15:48:52 +0000
ROA not before: Thu 02 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62303
IP address blocks: 185.235.81.0/24 maxlen: 24
185.235.82.0/24 maxlen: 24
185.235.83.0/24 maxlen: 24
2a0d:4d00:81::/48 maxlen: 48
2a0d:4d00:82::/48 maxlen: 48
2a0d:4d00:83::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:92:96:c8:14:e8:74:10:6b:39:9b:74:65:73:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jan 2 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eed7119945d4f50dd3cd253713c5d47b2ad89e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:3b:91:d0:8c:cc:1b:61:ca:ab:1c:14:66:
92:3a:93:11:dd:52:16:ff:82:3c:a7:ff:a2:df:cf:
25:67:c9:f7:96:e5:93:d5:fc:51:f4:05:f9:f6:02:
cc:69:64:17:04:8b:e4:aa:68:e4:f3:3c:63:0e:d4:
c7:ef:f5:70:d0:9a:b6:39:f4:3d:7c:97:2d:62:f7:
4a:74:1f:b3:42:bc:20:57:c8:dd:aa:d4:a8:ad:d8:
5b:17:0b:1a:9f:9b:7c:24:e1:39:4f:10:96:69:2c:
45:7b:f5:34:91:ed:0a:c3:01:c5:88:2b:1f:8e:5e:
3e:af:b0:11:ff:2d:a6:e9:2d:80:1a:32:3c:6c:c4:
79:9d:71:e6:7a:6b:78:82:93:45:c7:18:f5:b9:15:
28:70:b8:9a:3d:5f:13:ca:58:90:71:46:79:64:79:
16:86:13:69:bb:dd:59:7e:2a:df:00:66:8a:5a:31:
f2:44:70:3d:46:c9:b2:a6:a0:76:4c:f6:89:15:08:
c7:1f:47:d3:63:43:ec:f3:6f:7c:9a:e8:28:11:3d:
6b:cc:05:8e:4c:fc:2a:89:ce:2f:db:3e:b9:aa:3c:
89:a1:65:8d:9f:d4:bb:6e:46:46:d8:9a:10:08:72:
54:92:76:a1:36:17:28:b5:fa:96:ff:40:37:a7:31:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:11:99:45:D4:F5:0D:D3:CD:25:37:13:C5:D4:7B:2A:D8:9E:22
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/7tcRmUXU9Q3TzSU3E8XUeyrYniI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.81.0-185.235.83.255
IPv6:
2a0d:4d00:81::-2a0d:4d00:83:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:d4:69:c9:fc:57:f2:88:34:5a:39:43:eb:f6:b7:8f:97:07:
f4:90:72:7d:80:6d:38:e9:b3:93:ca:56:95:7e:8a:4d:9f:f5:
92:03:ea:d1:59:f6:3f:5d:0d:97:56:9c:b7:26:50:48:25:da:
00:c4:ad:7f:d1:08:d8:fe:59:31:53:8c:ed:0c:90:80:57:06:
3f:ca:02:c5:a9:9f:8b:da:44:a0:76:f8:8f:fd:82:a6:1b:db:
27:6e:62:6b:1f:cd:cc:63:fd:f2:ce:4e:0d:1b:a7:b1:42:35:
17:f3:78:25:ee:7c:4f:bf:63:0f:84:b1:39:ed:b2:8e:64:59:
ea:4f:df:42:fe:22:30:4f:11:f1:d2:d4:29:f2:93:5c:33:53:
6b:58:ad:94:ec:c9:a7:09:30:f4:bf:cc:1e:84:b1:c6:55:48:
f9:9f:ce:db:c2:15:bc:95:5a:b2:1e:97:78:df:64:32:61:bd:
6a:59:19:1b:9a:de:c9:52:33:cd:fb:bb:64:21:b3:4d:77:27:
a1:cc:7f:89:5c:36:a1:9e:c5:e5:fc:ae:a2:3e:5c:48:f9:68:
03:37:3e:c8:11:d2:75:e8:70:a8:0b:8b:04:d6:d0:a2:35:4c:
a5:99:13:6e:ff:23:21:ff:a5:28:5c:f9:bd:63:88:dc:36:66:
dc:fa:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:12 2025 by rpki-client