Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa
File: 97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa (raw, json)
Hash identifier: oUOsuSRnUrU8knVeKfFc9QKPrgL79MjXgwUrkum1/pg=
Subject key identifier: F7:B0:5D:73:AD:6A:6E:0A:9D:02:F8:C1:99:89:1F:14:ED:32:D5:6C
Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Certificate serial: 0194A1A842ABE1ADA723D7D28B0CF23E8109
Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa
Signing time: Sun 26 Jan 2025 08:09:06 +0000
ROA not before: Sun 26 Jan 2025 08:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60567
IP address blocks: 185.29.8.0/24 maxlen: 24
185.29.9.0/24 maxlen: 24
185.29.10.0/24 maxlen: 24
2a02:4840:200::/48 maxlen: 48
2a02:4840:201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a1:a8:42:ab:e1:ad:a7:23:d7:d2:8b:0c:f2:3e:81:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Validity
Not Before: Jan 26 08:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7b05d73ad6a6e0a9d02f8c199891f14ed32d56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:ee:ce:9b:90:95:cb:00:78:e3:c0:4b:39:
e9:33:98:39:b9:4f:e9:52:d6:bf:83:1b:11:43:5f:
e1:f5:43:18:d8:c2:3c:ac:2a:ac:9c:eb:8d:1a:a2:
4f:ee:2c:18:70:b5:cb:83:a0:59:90:d9:27:3a:b9:
2b:cf:db:79:84:72:fc:dc:c1:f3:a4:04:38:d8:92:
10:8b:30:3e:2c:2a:e2:6d:e7:8f:66:bb:2c:0d:c4:
23:7a:ac:03:9b:49:7f:16:0b:aa:64:93:87:a2:02:
08:13:2e:10:c9:fe:19:53:9b:d6:d6:b6:2f:ed:6d:
4b:64:d5:c8:d0:8d:05:85:64:fa:51:fb:b6:4f:c5:
f9:ad:6a:52:8e:40:9a:97:2c:4b:bd:58:63:ad:d5:
1f:67:f0:04:a1:ae:b3:b6:1b:1b:a2:23:17:51:22:
c1:72:32:ff:28:da:a0:61:ec:91:25:37:51:5b:40:
88:e9:27:d2:5b:af:c2:22:ce:80:ec:b2:01:75:d2:
78:b9:c3:d7:f9:56:73:2b:9e:34:1f:51:09:de:95:
bd:c6:fa:43:56:5f:11:11:9d:27:aa:01:62:21:bf:
f7:f2:ea:4c:bd:b9:09:19:9a:91:e8:6b:75:1a:2e:
aa:ae:5f:59:89:f9:6f:d2:0d:ec:b4:39:ad:d0:de:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:5D:73:AD:6A:6E:0A:9D:02:F8:C1:99:89:1F:14:ED:32:D5:6C
X509v3 Authority Key Identifier:
keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.8.0-185.29.10.255
IPv6:
2a02:4840:200::/47
Signature Algorithm: sha256WithRSAEncryption
31:fe:e8:f6:5a:03:34:07:6d:b4:aa:f0:ce:fd:d5:26:85:3b:
1d:3a:1b:bf:7d:c0:08:df:12:aa:e5:14:60:40:07:a9:b7:d2:
c8:41:94:9b:f7:a1:f6:bd:f1:01:d5:3c:be:7e:a1:cd:63:77:
73:e1:a6:6c:5c:0e:d7:16:f1:41:50:b7:9b:9c:fe:df:40:9c:
63:fa:f1:ca:98:9d:87:cf:12:54:fd:c4:7c:66:58:79:97:3e:
86:57:ad:d3:70:7a:67:c7:90:e5:75:cb:a2:21:8a:b1:e7:96:
34:4b:9e:d9:58:7c:42:cf:72:c0:08:ef:39:da:fd:c4:8a:c3:
34:26:5a:30:ea:56:a2:66:8d:cc:04:ff:e1:78:51:ea:94:8b:
cd:08:89:17:38:6a:65:81:67:81:4b:43:67:f3:8c:bb:38:10:
87:21:f0:15:53:81:d1:3c:f2:81:49:0f:6f:d6:a6:d7:fa:39:
0a:48:2a:bb:c6:c3:90:7f:13:b7:08:a1:00:5f:ee:22:40:b5:
46:6e:4a:ac:06:b5:81:60:69:b8:08:39:46:77:dd:ea:c9:3d:
37:c3:bb:a2:be:b9:52:de:c1:11:6d:3d:35:79:5d:ed:9e:20:
0c:b5:fd:49:d8:a9:20:12:1c:ab:77:0f:37:bd:0b:d5:8e:7f:
6a:fc:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:49:47 2025 by rpki-client