Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa
File: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (raw, json)
Hash identifier: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=
Subject key identifier: 8E:EE:CE:2F:05:8E:BE:82:E7:94:01:E2:B8:EE:24:05:31:55:CF:06
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01941FFA79BB4A100A9E1C146747B33168D0
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207003
IP address blocks: 185.218.192.0/22 maxlen: 22
185.218.194.0/24 maxlen: 24
185.218.195.0/24 maxlen: 24
193.163.5.0/24 maxlen: 24
2a0b:a700::/29 maxlen: 29
2a0b:dbc0::/29 maxlen: 29
2a10:f2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:79:bb:4a:10:0a:9e:1c:14:67:47:b3:31:68:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eeece2f058ebe82e79401e2b8ee24053155cf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:5f:78:72:82:5d:84:70:9c:5f:96:04:22:
9a:2d:16:b0:a4:2d:49:13:58:00:a5:42:43:2d:52:
e0:d8:a8:1d:03:dd:51:a3:a9:b1:97:e8:86:9a:c8:
b1:2f:86:bf:17:91:ab:24:f7:13:7e:02:ec:a6:f2:
a2:95:c7:07:78:ae:15:d5:cc:3b:13:8a:d7:5b:c2:
46:d0:e5:71:a1:23:7b:30:58:73:ed:b4:f2:85:25:
30:be:a8:b4:90:61:c1:79:b2:01:7d:fd:b2:a9:0a:
f8:65:4e:26:cf:31:b5:90:79:d6:bf:81:97:67:75:
03:2f:cf:fb:32:0a:84:1b:4e:db:46:8c:43:2e:f5:
e7:b2:a0:fd:24:3f:a9:18:0a:6f:3a:b8:7e:f6:42:
00:05:10:7f:b5:be:ca:f0:7a:5f:fc:5a:c9:1c:af:
55:9d:34:e9:bd:74:f3:2b:14:30:c4:eb:97:a4:8d:
2f:bf:86:58:b4:05:d1:32:76:a2:e4:6c:6b:b2:dd:
08:2c:f4:50:0e:41:29:a5:ea:0a:ce:75:17:d7:b7:
d7:3c:8f:80:07:be:77:25:49:63:77:41:c6:48:90:
47:4a:f2:d2:df:a0:28:4f:a6:23:8d:47:c4:53:22:
95:ca:b6:11:f6:e4:b1:b3:4c:65:32:c9:11:b2:5c:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:CE:2F:05:8E:BE:82:E7:94:01:E2:B8:EE:24:05:31:55:CF:06
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.192.0/22
193.163.5.0/24
IPv6:
2a0b:a700::/29
2a0b:dbc0::/29
2a10:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
67:95:e3:fa:d0:ca:b1:d6:39:4e:f1:96:a1:03:51:ce:78:48:
a5:f5:b5:2a:1c:65:cf:31:fb:8a:56:6a:d7:19:f0:bf:1d:4e:
f7:54:f9:1c:c7:59:41:0b:89:43:6d:e6:02:0d:f3:85:dc:69:
8d:99:c9:7b:33:b2:dd:3a:15:8a:78:36:f3:ea:bc:19:2d:61:
fa:9c:a6:79:7f:63:bf:b0:45:4b:bf:28:4b:ab:0d:ae:1b:2d:
9e:a9:1f:9b:16:2f:93:2d:c5:56:70:fa:ab:d5:30:81:6e:6d:
ca:1a:2f:b8:a5:8d:aa:39:2d:0d:76:d8:61:cc:61:23:a6:5e:
54:da:2e:d3:7e:66:bb:54:8f:c1:eb:71:b9:8f:93:87:60:b3:
e8:a9:83:6d:68:b8:d7:2b:e4:6f:34:77:e7:7e:03:bc:bc:7b:
f3:dc:34:f9:ad:ed:16:ae:02:06:6e:af:43:d3:ac:c2:b7:70:
7c:12:06:d3:12:48:3c:f2:56:36:ff:7d:62:b7:6e:1c:33:44:
76:c7:d1:58:7d:3e:fa:34:dc:c1:5f:1a:34:3d:96:0c:dd:0e:
be:4a:0a:51:ef:38:2b:be:a5:d0:64:8a:94:6d:6e:e7:39:31:
93:4d:99:d7:7f:c3:6f:a9:dc:b0:23:3e:53:37:f1:63:b9:35:
5f:47:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:56:43 2025 by rpki-client