Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/PrNsEHrQUTWeS8bV_A8Fg8DVjqo.roa
File: PrNsEHrQUTWeS8bV_A8Fg8DVjqo.roa (raw, json)
Hash identifier: usR3Xps8iALKamgQOqDuPMkcsTbDs9FVlCIAfdu28Yg=
Subject key identifier: 3E:B3:6C:10:7A:D0:51:35:9E:4B:C6:D5:FC:0F:05:83:C0:D5:8E:AA
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 01942220068CBDBFA408144F987A2496BC04
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/PrNsEHrQUTWeS8bV_A8Fg8DVjqo.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59816
IP address blocks: 185.213.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:06:8c:bd:bf:a4:08:14:4f:98:7a:24:96:bc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb36c107ad051359e4bc6d5fc0f0583c0d58eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:49:6e:a3:b5:8b:1c:45:58:f8:6d:64:07:
f8:d1:38:37:02:25:7a:a2:28:be:be:6d:6b:8b:5f:
24:6b:c3:6f:72:57:45:e3:48:30:18:f6:8b:40:d0:
2e:82:26:9f:16:58:ef:a3:97:f8:1d:e6:09:49:10:
b3:1b:73:b1:07:fb:2f:54:fd:0f:8b:f3:56:e6:ac:
50:ee:13:51:a7:92:6e:74:79:bb:b5:c1:2d:3d:be:
e2:71:20:98:01:cc:93:39:27:15:34:11:a9:a4:cc:
40:90:62:02:3f:35:93:43:1b:d7:b9:23:dd:5a:e7:
db:11:c6:eb:62:f4:a7:bb:c1:75:8f:83:e1:7b:13:
3d:62:2c:a2:32:4d:e9:d5:96:2d:77:35:be:77:0d:
a0:7b:3c:4c:d6:1e:de:71:21:21:bf:39:ad:46:40:
68:71:72:b3:be:90:f5:2b:6a:f9:25:f9:ad:b1:d4:
4a:9a:14:e0:7a:a7:7b:e9:98:86:28:09:19:59:01:
02:b1:fb:91:82:43:25:fe:b2:4d:6b:91:6b:37:01:
60:b5:2b:31:3b:04:54:ce:dd:38:99:84:e8:3e:ed:
ed:40:0a:2d:ba:38:76:f4:a2:2e:5d:0b:81:9a:86:
4d:56:61:27:91:d4:79:d5:fe:fe:52:32:7f:9d:83:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:6C:10:7A:D0:51:35:9E:4B:C6:D5:FC:0F:05:83:C0:D5:8E:AA
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/PrNsEHrQUTWeS8bV_A8Fg8DVjqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:61:f5:da:24:09:8b:8d:d2:a7:02:bf:1c:80:3a:d7:e7:24:
cf:84:a1:34:78:4d:56:df:d5:7b:89:77:4e:84:88:63:23:68:
e3:e0:7c:1b:0a:37:34:a2:11:dd:3d:15:b5:24:ac:fc:20:57:
af:d9:c8:75:8d:ec:50:74:9f:29:58:64:ca:49:6c:a7:79:11:
fd:d5:a2:4d:0e:f5:88:5c:e8:8e:47:2b:e2:00:ab:e8:f9:ac:
19:22:18:9d:58:01:92:75:ff:a8:62:67:51:f8:07:b2:57:e2:
df:dc:12:eb:b7:fd:ae:01:86:04:69:64:6e:cf:65:11:a8:64:
5d:e5:31:bd:ff:f5:dd:94:5e:f0:31:d3:22:3c:bb:ba:ab:65:
d0:e9:e6:3d:d7:5f:54:97:79:a3:04:7a:30:b1:ed:53:31:e8:
2b:24:ed:d4:73:de:97:77:74:fa:e8:ac:20:c0:e2:19:06:1b:
36:7a:aa:5a:fa:9f:79:42:10:8c:67:e9:52:59:00:6a:c7:c7:
ac:aa:71:ec:5d:f9:07:6c:bd:0c:4c:f8:f5:d3:d4:cf:64:aa:
2e:c3:10:84:c8:4e:a7:fd:a6:96:4a:e7:e4:db:3a:aa:99:4d:
b7:45:f2:4c:35:6a:8c:ed:d2:1f:2b:19:47:92:75:01:88:29:
95:5a:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:16:46 2025 by rpki-client