Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/czNaDWuYjzTZx7LkZS7eIlcpKMU.roa
File: czNaDWuYjzTZx7LkZS7eIlcpKMU.roa (raw, json)
Hash identifier: Vfa1us57THPTLnyawlE0nbf1N2zUdUGw07peaBbkZjU=
Subject key identifier: 73:33:5A:0D:6B:98:8F:34:D9:C7:B2:E4:65:2E:DE:22:57:29:28:C5
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019426D98CFE05634EBAD200F21B9EA403AD
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/czNaDWuYjzTZx7LkZS7eIlcpKMU.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205673
IP address blocks: 185.210.84.0/22 maxlen: 23
185.235.132.0/22 maxlen: 23
185.244.168.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8c:fe:05:63:4e:ba:d2:00:f2:1b:9e:a4:03:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73335a0d6b988f34d9c7b2e4652ede22572928c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:e8:fb:e4:f9:5b:83:7a:0f:6d:6c:18:0e:
25:31:94:df:1d:05:c9:cd:ff:ef:80:b5:7a:50:d9:
fa:3c:14:c7:59:22:99:7b:c1:98:17:a6:12:99:44:
18:bf:3e:0d:47:ee:90:48:2e:e3:db:8e:9f:fe:08:
b4:50:66:db:44:56:64:57:c9:42:88:1f:2b:63:a5:
97:cd:e1:da:97:35:02:aa:02:d6:8b:b4:2a:36:4d:
56:a0:c8:38:89:e2:b2:db:ae:87:34:b5:72:e7:93:
b8:44:f9:42:73:c9:05:fa:0f:34:d7:ff:a2:65:ae:
1f:8a:66:25:e5:15:69:b5:ff:0e:bd:b6:b0:79:f7:
ba:e5:55:52:27:44:8d:8d:c5:ba:a6:96:22:cd:c4:
36:17:ec:b9:62:30:d0:0c:89:03:31:12:7f:69:97:
f4:0c:34:aa:7a:bd:e2:36:a7:30:b6:34:f2:48:a9:
a2:cc:7e:2a:6e:74:41:09:ed:2a:cd:85:78:bf:a3:
6d:e5:66:5c:32:b3:6e:d8:fc:e1:1d:b5:1f:91:df:
05:cf:4c:9e:52:6b:8c:cb:84:c5:aa:85:b9:68:10:
18:3d:80:d8:f4:81:f1:5c:08:5d:3f:0e:52:3e:a0:
b9:02:c0:2f:a3:df:a0:55:fd:d2:4d:11:a6:8f:a9:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:33:5A:0D:6B:98:8F:34:D9:C7:B2:E4:65:2E:DE:22:57:29:28:C5
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/czNaDWuYjzTZx7LkZS7eIlcpKMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.84.0/22
185.235.132.0/22
185.244.168.0/22
Signature Algorithm: sha256WithRSAEncryption
34:16:48:a4:42:bf:3a:13:ca:3b:d0:e4:2b:c2:b9:95:65:3c:
e0:39:6f:c8:f9:5d:83:11:13:da:f5:35:3a:b0:11:10:42:f7:
1b:38:85:06:75:42:9a:55:36:20:44:84:89:fd:3b:94:14:0e:
42:b8:53:f9:10:f8:6f:f5:bb:2b:de:af:86:ad:c3:60:75:06:
fe:77:d3:cd:2e:da:5a:14:f3:ed:d8:21:ba:13:70:60:3f:a9:
2e:1c:cb:ef:fc:7f:5b:b9:77:55:41:57:4a:59:3d:f1:42:12:
ad:d7:13:72:04:ae:89:5c:e5:98:e1:0e:78:d0:6b:f9:b0:4c:
44:c8:70:33:58:78:4a:83:56:21:ba:b5:d2:81:42:8d:4d:c6:
52:16:5c:24:2c:45:2e:a4:06:77:0b:6b:94:c0:38:ea:62:36:
22:90:15:59:fe:a6:2d:07:70:fe:4d:59:28:d0:f7:5a:95:04:
56:ec:83:d3:4c:af:8b:2c:07:3d:be:fe:c4:ed:67:e2:ae:e3:
1e:4e:97:22:b8:9e:7c:51:55:d8:3b:87:0b:25:db:2f:f3:f2:
ab:ef:07:7b:29:bc:c0:dd:79:21:11:cc:e5:c2:21:8e:d4:93:
08:b8:0d:91:24:2a:1d:4a:88:20:02:12:6b:4b:14:9e:28:9c:
75:30:02:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:47 2025 by rpki-client