Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/dt7OMFAxYi9mfSy74b5_x7Lhpto.roa
File: dt7OMFAxYi9mfSy74b5_x7Lhpto.roa (raw, json)
Hash identifier: 4uikV6DgluHoEAMF2XeMMDlFi1mz2gwrijFHfMDuXc8=
Subject key identifier: 76:DE:CE:30:50:31:62:2F:66:7D:2C:BB:E1:BE:7F:C7:B2:E1:A6:DA
Certificate issuer: /CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
Certificate serial: 019425FD4B05590248B9D4E674886D21E254
Authority key identifier: 1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/dt7OMFAxYi9mfSy74b5_x7Lhpto.roa
Signing time: Thu 02 Jan 2025 07:49:04 +0000
ROA not before: Thu 02 Jan 2025 07:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.177.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4b:05:59:02:48:b9:d4:e6:74:88:6d:21:e2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
Validity
Not Before: Jan 2 07:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76dece305031622f667d2cbbe1be7fc7b2e1a6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:de:e4:fd:60:30:2e:34:ff:46:a8:7e:9e:
8d:1e:76:7c:9e:be:c5:44:cf:a8:cd:c4:f4:49:25:
a0:d5:52:e8:7c:21:cc:5f:fd:d1:f9:90:3a:82:75:
0c:28:33:13:4d:e7:70:6c:03:9e:3d:83:eb:92:73:
55:d2:6e:05:7f:6b:b5:a8:ba:63:b5:d7:92:91:23:
4c:4b:d0:95:b7:95:4e:38:2f:4a:40:91:bc:95:e3:
d9:47:57:2e:65:b4:c3:4f:5b:c1:61:72:e8:0c:d1:
a7:27:14:d1:cc:f7:e1:3e:16:de:1a:c5:4e:a3:e9:
20:31:a6:c5:d9:bf:7e:5a:f8:64:fa:ff:81:f5:dc:
04:55:8c:e8:6c:4b:d5:0a:f2:65:26:af:20:70:f3:
51:d8:7c:5b:74:5f:2a:c6:55:83:87:01:53:e5:c9:
3d:8c:05:cc:c4:92:44:8f:92:da:29:c3:27:9e:a7:
11:3f:cd:73:6c:c9:96:90:e0:48:c6:2a:b2:27:e0:
47:ca:b5:2c:0f:37:e4:8b:81:6c:cc:6d:cc:86:6f:
87:cc:28:11:b5:28:1d:03:90:16:de:5f:a3:17:e8:
df:4e:f0:c2:30:6e:60:16:df:44:6c:2e:3d:c0:52:
92:39:6b:1b:33:ef:6e:68:26:33:4a:31:64:73:45:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:CE:30:50:31:62:2F:66:7D:2C:BB:E1:BE:7F:C7:B2:E1:A6:DA
X509v3 Authority Key Identifier:
keyid:1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/dt7OMFAxYi9mfSy74b5_x7Lhpto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:32:25:b4:93:9e:b0:9a:8d:db:f5:21:37:27:bd:74:16:60:
fd:61:66:14:5a:37:ca:44:7b:bc:63:43:77:eb:3b:f1:fc:8c:
5c:52:2a:fb:ad:ed:f1:5e:3e:5f:27:a0:11:6c:2d:45:3f:f1:
18:13:a1:d9:ab:6e:d8:2e:21:85:76:3d:c8:ae:ef:ba:ab:7f:
e3:0b:d1:ef:fe:5f:61:47:dd:e5:1e:b9:18:d2:26:97:72:8d:
dd:0f:ba:f6:a0:77:10:c8:e2:d6:28:73:e7:e2:3a:0c:e5:03:
f0:aa:e4:14:c1:8c:1d:c6:de:58:3e:40:f6:44:cc:86:e6:4d:
f6:34:9e:e9:8a:8d:83:cd:f3:a0:5b:b4:32:6c:0d:9d:35:c8:
54:b5:b7:97:e2:82:5b:a4:69:bb:57:86:fa:f9:6d:db:55:6d:
3d:a2:23:11:6b:8c:cc:a1:8e:4b:4e:a0:19:51:c4:b0:0e:01:
9c:1d:99:e6:b0:99:46:ef:18:f7:41:bd:94:04:91:c2:4a:a5:
5d:95:14:2d:dc:9b:5d:bb:91:e3:75:08:0b:89:66:f2:b5:bc:
19:b2:c0:94:40:97:bd:2f:7b:5e:3b:ab:11:18:a2:f4:8a:cf:
25:9e:39:30:01:bd:c4:a7:ab:d7:e8:9a:8b:25:5f:fc:0e:45:
69:3b:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:03 2025 by rpki-client