Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa
File: FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa (raw, json)
Hash identifier: 1BVoM3pIwN+Dth/AavDroFy4/aBiv0LMqKNh/mLZqqI=
Subject key identifier: 14:81:C3:AC:E6:5D:3C:8B:49:D6:0E:FE:56:B0:24:FE:EA:10:9D:2A
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 01942143C2F2B61163167AA18C4E8E890E1F
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 37.9.176.0/21 maxlen: 24
185.20.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c2:f2:b6:11:63:16:7a:a1:8c:4e:8e:89:0e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1481c3ace65d3c8b49d60efe56b024feea109d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:b8:88:70:31:72:37:11:0b:fd:65:f0:83:
fb:1e:85:78:25:78:69:e8:91:cf:74:2e:91:f0:0e:
bb:3c:59:66:e6:d1:f7:01:8b:c0:fb:a6:51:6f:94:
81:c5:8e:73:6c:fb:69:31:4b:e3:75:07:0b:45:a2:
38:9b:a4:ca:92:6b:7a:c2:54:3a:51:8b:2a:7e:5b:
a8:bb:9e:85:73:0c:94:87:97:d8:32:a5:69:29:73:
68:34:b5:d0:af:49:15:ce:13:e2:28:30:de:93:8b:
d7:27:3c:ed:bb:61:7c:66:93:8e:17:27:dc:24:67:
48:29:11:c3:9a:5a:28:d0:f4:77:6e:28:bf:65:bf:
a9:55:5b:d3:c4:51:02:7f:f2:fe:9d:2d:be:ba:af:
c2:77:c9:cc:77:ba:85:65:f3:e7:c7:84:64:08:9e:
60:74:39:d3:71:15:f9:d2:cc:a3:03:bd:61:a2:c5:
53:0f:07:6b:60:a3:3e:48:23:ef:22:79:2d:e3:ee:
79:ec:1a:1c:51:e6:17:b9:04:74:d8:9a:cd:76:1c:
12:dc:31:57:f6:2e:fd:86:70:88:a3:b9:bf:5c:10:
e0:b2:52:38:e1:0e:77:71:c9:92:71:96:e6:a1:84:
80:ed:8b:b7:54:2c:59:68:3f:b8:85:59:82:e5:43:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:C3:AC:E6:5D:3C:8B:49:D6:0E:FE:56:B0:24:FE:EA:10:9D:2A
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.176.0/21
185.20.212.0/22
Signature Algorithm: sha256WithRSAEncryption
76:de:03:1c:32:5e:60:2f:ff:17:aa:72:5b:e1:9d:48:48:63:
8a:4e:8f:98:15:a7:64:9e:c2:a9:3e:51:f3:ef:bb:88:af:ab:
a5:b3:82:26:14:8d:46:2a:38:7e:97:c5:fb:38:c4:01:06:b0:
cf:d8:00:e6:7b:4a:06:df:a7:0f:31:9a:bb:d7:2d:92:18:2a:
6a:3b:c5:66:78:4a:1f:73:98:11:6b:e7:9c:2b:fa:f4:c0:3f:
42:32:15:d7:9e:87:c6:92:d8:3a:54:f9:5f:7e:4b:42:bc:64:
fd:71:4c:94:0e:87:6d:6d:c8:2b:66:c0:e5:aa:e7:f7:41:1a:
90:4f:31:86:cc:a2:87:12:d6:36:e6:73:b5:78:de:00:fd:a0:
f6:c8:e4:c2:7f:40:6f:78:b1:6a:64:2d:73:be:d6:5d:65:f0:
21:39:46:f5:4d:32:56:e8:6a:29:b2:bd:f1:c2:70:0f:12:d9:
b6:0e:97:f5:90:b7:04:58:39:33:5d:c0:85:c4:ab:32:e2:86:
a8:ff:cb:72:38:83:98:82:8a:d4:42:54:ca:e7:b9:bc:54:ad:
0c:a9:27:5a:ac:40:49:77:f3:af:a2:0a:85:c5:11:b6:07:c3:
15:7e:04:23:fa:ed:a8:90:3c:e0:02:6b:b8:24:45:c4:b0:3d:
ef:1c:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:47:24 2025 by rpki-client