Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cED4rrKmSCvGfS67cpWVFvr3cHQ.roa
File: cED4rrKmSCvGfS67cpWVFvr3cHQ.roa (raw, json)
Hash identifier: y22hsDEN/Sto2EwHMHl8+2qE8moFlDYks2CyeDAa8Eo=
Subject key identifier: 70:40:F8:AE:B2:A6:48:2B:C6:7D:2E:BB:72:95:95:16:FA:F7:70:74
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019422200443FF57DA39A82E0D8BF2AC6003
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cED4rrKmSCvGfS67cpWVFvr3cHQ.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202723
IP address blocks: 185.75.134.0/24 maxlen: 24
185.79.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:04:43:ff:57:da:39:a8:2e:0d:8b:f2:ac:60:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7040f8aeb2a6482bc67d2ebb72959516faf77074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:4b:fb:07:b1:51:d7:94:7b:73:6c:87:2d:
e1:e4:ba:65:e2:e4:0a:f5:fe:df:e4:69:ee:9f:c3:
e4:ec:95:ea:2c:0f:70:27:be:b3:ed:d8:cd:f9:ff:
67:f5:76:12:67:af:02:3b:e8:f6:08:fa:f8:4d:2b:
2a:91:5b:d7:4b:91:26:01:1f:1a:83:46:e8:16:7f:
45:e6:a2:b5:c1:12:16:e4:0e:02:dd:21:26:88:43:
e8:c7:c0:5a:8e:6a:0a:20:66:ba:d7:ac:e2:ef:be:
0e:22:6c:35:81:0d:ba:16:82:c1:9e:ca:08:3c:c9:
8e:22:90:99:e2:dc:60:74:4c:96:c7:00:f1:6a:b6:
53:04:a8:62:9e:7b:10:ca:01:9a:c7:44:ca:f8:84:
e5:dd:95:9c:67:76:92:a9:35:f5:e1:e4:32:8f:26:
b7:12:d4:78:5a:b0:82:bc:73:79:a7:e3:f8:05:7f:
73:03:a7:16:63:14:1e:d0:e4:ea:82:3a:bd:0c:c0:
66:4a:e7:d1:09:3c:8a:a7:25:b8:bb:97:d3:52:0d:
12:4f:58:6d:8e:c0:02:ef:48:f8:f5:e0:0b:4c:73:
42:e6:a8:fa:79:5b:3f:da:5a:e6:8b:7e:b0:06:91:
90:cc:f1:b0:bd:1b:3d:4a:dc:f4:e2:44:3b:b4:b1:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:F8:AE:B2:A6:48:2B:C6:7D:2E:BB:72:95:95:16:FA:F7:70:74
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/cED4rrKmSCvGfS67cpWVFvr3cHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.134.0/24
185.79.138.0/24
Signature Algorithm: sha256WithRSAEncryption
35:bc:d8:8d:73:48:9a:c2:0b:ad:92:76:45:52:ba:c3:a0:80:
d2:5f:92:7f:ca:bf:68:fc:b5:36:f2:fa:c5:d3:bd:0b:15:fb:
b2:97:27:e6:43:99:13:26:22:4f:d9:5b:80:4a:37:27:dc:19:
3f:5b:0a:e8:78:ed:c2:11:b0:d5:4e:63:1e:01:bf:66:96:b3:
5f:f4:81:1a:1b:df:1c:ac:85:87:a3:23:99:2a:a7:32:67:7a:
c9:d2:6b:b7:52:75:12:52:77:0e:50:15:94:4c:dc:fc:ca:fa:
99:f2:98:a1:df:44:b9:d2:5e:8f:de:34:8c:c3:ff:a9:24:50:
c2:ec:20:2a:80:8b:61:75:37:cf:60:a4:61:59:15:d4:c8:d7:
29:7b:b0:01:5e:c0:3c:59:7f:ee:c8:98:5d:e6:40:9a:a7:7a:
ab:ad:0e:9c:5c:af:93:17:3a:3f:7a:da:84:67:7e:11:2e:c5:
80:d1:5c:74:e8:5e:05:98:57:b2:ba:a0:fa:b7:cb:dd:00:4b:
c4:37:38:60:e6:8a:92:d6:d9:63:ad:f4:24:b1:0a:2e:70:4b:
19:e5:7c:dd:8b:37:17:d0:72:02:56:d4:52:0c:48:a4:3c:fc:
ac:12:c8:25:41:8f:dc:b9:3b:16:dd:1a:ac:d2:4c:b1:e9:d7:
97:fe:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:33 2025 by rpki-client