Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/30Dio0Gszjx6FTAe-4VlPrqwyTc.roa
File: 30Dio0Gszjx6FTAe-4VlPrqwyTc.roa (raw, json)
Hash identifier: psw6/BxDCb7H27J6+J3WPOwk2OKgWYIKlnVQ23OKdwQ=
Subject key identifier: DF:40:E2:A3:41:AC:CE:3C:7A:15:30:1E:FB:85:65:3E:BA:B0:C9:37
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 019422FB4B8C1C39654E34319F64EC6A7AD9
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/30Dio0Gszjx6FTAe-4VlPrqwyTc.roa
Signing time: Wed 01 Jan 2025 17:48:01 +0000
ROA not before: Wed 01 Jan 2025 17:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206364
IP address blocks: 185.163.13.0/24 maxlen: 24
2a00:1197::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4b:8c:1c:39:65:4e:34:31:9f:64:ec:6a:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Jan 1 17:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df40e2a341acce3c7a15301efb85653ebab0c937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:74:e2:d8:f6:6d:b8:01:15:7c:e7:1a:c7:
fe:0e:fb:9c:0e:78:54:a5:40:02:d5:8b:55:7b:8c:
f6:be:a8:e3:c6:80:75:bf:3b:ce:94:7e:f2:b8:d3:
44:ec:f6:05:cf:ab:2e:35:65:2b:65:31:d4:77:ff:
75:ee:c5:66:c3:dc:1a:6c:5e:1b:86:5f:a8:d3:91:
6b:51:13:ba:87:49:8a:db:21:99:45:87:24:8e:da:
73:fa:52:4d:41:75:64:4d:76:c6:78:f8:25:69:ad:
75:e8:71:45:db:4b:f5:5f:9f:85:68:cb:97:89:9f:
57:23:24:c3:88:03:44:d8:f8:a9:26:45:af:70:04:
6b:6c:87:97:7d:30:00:8a:9b:88:d0:61:f4:c6:fa:
d8:79:c9:20:01:5e:cb:46:49:8e:b1:ac:45:e4:9a:
f4:be:43:18:f0:bf:dc:1c:83:0c:31:6c:dc:e6:c8:
5e:6a:9c:43:c0:50:20:76:98:90:48:f3:20:8a:4b:
8e:87:ef:0b:9d:9b:12:61:5f:56:0c:7d:5b:84:ac:
e3:df:d5:3c:0a:05:a8:c1:d9:8c:f9:35:aa:0d:cc:
46:96:83:e4:32:12:a5:01:e2:a3:35:b0:7b:96:88:
69:17:cb:54:86:55:9a:58:41:70:fb:b0:8e:28:30:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:40:E2:A3:41:AC:CE:3C:7A:15:30:1E:FB:85:65:3E:BA:B0:C9:37
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/30Dio0Gszjx6FTAe-4VlPrqwyTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.13.0/24
IPv6:
2a00:1197::/32
Signature Algorithm: sha256WithRSAEncryption
43:5f:78:af:d6:62:71:a4:8c:4e:ff:96:a6:60:e6:a6:5f:c8:
85:63:70:ba:8e:79:8d:c7:1a:7d:38:39:33:43:49:a5:80:5d:
f5:7b:ba:98:d0:56:0b:1d:0a:8b:8d:71:d2:b7:6e:79:58:92:
08:ac:e2:81:0e:4f:be:11:62:24:0b:18:9a:80:9b:80:e3:1f:
af:1a:ab:b8:13:58:37:94:bf:3e:5f:fa:d2:0b:28:bb:68:3e:
c8:6d:99:4e:e6:b0:0e:1f:0c:33:ef:5b:39:ee:ef:be:ec:55:
c1:f1:d3:5d:da:6f:a0:35:04:fa:a8:c1:6e:a5:bb:52:8a:45:
84:d0:9b:97:c1:e1:74:ac:4d:90:2f:f7:1d:09:e5:89:46:d4:
e8:60:99:a5:5b:33:b7:c7:8d:3b:28:c3:83:01:8b:ab:c4:ae:
32:ec:97:f8:8b:21:a3:92:06:d8:94:d8:2b:12:78:3c:c8:0d:
0a:76:b4:ef:26:9e:9a:50:25:c4:36:bf:8b:55:a9:4d:2a:8f:
41:d2:07:1b:c7:e0:9d:05:0a:bd:8d:5d:7b:fa:be:97:2e:45:
c4:cd:4f:37:e3:30:1d:a9:fa:f9:30:27:e3:8f:3b:0b:1d:27:
68:80:8e:5e:02:bb:38:fb:df:3c:c4:05:01:c1:b4:a6:06:a7:
32:70:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:45:50 2025 by rpki-client