Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/3H7i_vFx5kv1rmREwXCmTM5oMqw.roa
File: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (raw, json)
Hash identifier: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=
Subject key identifier: DC:7E:E2:FE:F1:71:E6:4B:F5:AE:64:44:C1:70:A6:4C:CE:68:32:AC
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019424B3C6F79303ECF744FE265B3BC1FE09
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/3H7i_vFx5kv1rmREwXCmTM5oMqw.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 185.55.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c6:f7:93:03:ec:f7:44:fe:26:5b:3b:c1:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc7ee2fef171e64bf5ae6444c170a64cce6832ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:40:18:c3:53:77:f8:c0:fb:da:26:ec:a6:
6c:ca:31:86:9e:9e:ed:6d:8e:09:47:21:07:43:46:
13:bd:51:26:db:7f:d3:8a:09:09:3a:d4:9d:4f:9b:
eb:f8:ff:e1:0a:2f:62:ad:36:56:6a:6b:31:05:bd:
c4:bf:eb:ce:10:97:d8:6d:4b:b3:36:32:8e:b9:84:
a8:e3:5e:35:d3:5a:3f:7c:1d:78:76:35:55:5e:6b:
7e:c6:ec:ef:da:a0:a5:6d:88:f5:02:b1:05:f9:df:
ae:87:64:56:3e:4f:81:c3:69:66:fb:d9:23:a9:3f:
98:66:34:0b:32:51:5d:93:aa:13:6d:bd:f8:64:7e:
42:90:25:9a:05:ac:64:38:8c:87:d3:70:54:71:f3:
d1:a3:c8:96:64:e5:38:c7:72:bf:fe:7e:ec:f9:e9:
65:0c:db:11:de:0f:30:41:c3:54:3a:34:7b:18:6b:
07:49:d8:45:78:3e:76:a5:be:dc:0c:22:c3:9c:e6:
3b:23:19:0c:32:05:52:a6:b1:2b:eb:27:24:90:d3:
31:63:a8:af:f4:54:07:fe:1d:ad:ab:17:60:7e:62:
fb:63:ff:86:37:27:ee:10:4b:ee:0c:6b:a5:9f:e0:
7c:3f:47:6f:e7:68:58:24:45:c7:b7:e8:ac:05:d0:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7E:E2:FE:F1:71:E6:4B:F5:AE:64:44:C1:70:A6:4C:CE:68:32:AC
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/3H7i_vFx5kv1rmREwXCmTM5oMqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:f3:10:9b:d5:21:98:92:ef:28:65:24:d7:0e:b3:6a:33:9d:
48:f3:5a:90:c9:36:9d:5b:71:b6:aa:26:b4:cf:44:24:54:ba:
71:f1:d6:91:a2:8c:49:93:ed:f4:f1:af:5d:8b:68:1b:bf:3b:
13:80:a0:bd:33:e7:78:0a:69:70:69:e4:e5:18:fb:5a:84:41:
2e:6f:dc:21:76:13:71:99:e2:c1:a6:e5:11:6a:2a:81:cc:61:
73:a8:81:38:7e:e1:46:03:60:cf:23:ac:ea:ed:14:2b:24:aa:
8c:96:d5:a8:08:b8:fa:e4:f9:5d:90:e2:cf:74:10:d4:9f:e6:
3d:f0:5e:ea:99:f7:3d:26:e6:6f:a4:b8:75:55:f2:01:1b:20:
90:84:f1:3a:4c:ef:67:48:33:b2:c0:d8:ac:0c:17:3d:9c:5c:
42:8b:e9:3d:bf:7a:30:93:06:cc:e1:f3:6b:ad:b3:3f:37:fc:
6a:94:c3:2d:b0:14:8d:3a:32:a3:c6:8d:2a:a7:3a:58:af:93:
f9:a8:96:8f:c5:3b:1d:60:95:b3:fc:2e:f4:0a:c7:0d:e6:42:
dd:0a:1d:25:dd:de:b9:9d:43:59:d2:42:b2:e3:34:67:ea:5d:
51:43:a7:9b:0b:49:48:59:5d:c8:67:2d:3d:7a:29:9d:b6:58:
92:1e:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:42:55 2025 by rpki-client