Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa
File: I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa (raw, json)
Hash identifier: 0bp5i/w7MdfWSRoD3vMh3eYqQ/2+5IAaWheLS0shHT0=
Subject key identifier: 23:BA:EE:1D:9E:C8:FE:DE:45:6A:69:12:3F:55:15:1C:AF:83:D5:A4
Certificate issuer: /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Certificate serial: 01941FFA7ECE8A8A4573C69DA8E7C3C1505F
Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209529
IP address blocks: 185.228.220.0/22 maxlen: 22
185.228.220.0/24 maxlen: 24
185.228.221.0/24 maxlen: 24
185.228.222.0/24 maxlen: 24
185.228.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7e:ce:8a:8a:45:73:c6:9d:a8:e7:c3:c1:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23baee1d9ec8fede456a69123f55151caf83d5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:64:ee:9d:62:13:05:59:7c:6a:26:14:04:
32:bb:9b:bf:a6:f2:04:57:45:ad:30:3f:21:87:ce:
da:2e:07:23:8f:6f:cb:77:19:9a:cf:7b:63:bd:eb:
1d:fb:55:f8:2d:d6:8d:44:0f:85:6b:fb:74:86:88:
45:a6:c8:0d:a1:2f:cc:84:1a:68:b3:34:e4:79:0b:
66:f2:85:32:bf:c1:c6:d4:8d:d7:22:58:a7:92:47:
35:e9:3e:e9:88:1f:d0:b8:02:16:37:11:e6:a4:6a:
fd:f3:7c:4a:22:a9:74:6c:f1:9a:16:61:51:78:17:
ad:6b:31:99:ae:db:3a:03:87:62:9b:ea:82:e8:c2:
94:ec:fc:d1:e0:29:05:97:01:77:a0:11:ae:28:df:
a9:ec:85:30:84:de:26:0c:a9:01:a3:5f:a9:90:7e:
ff:e5:53:d4:bf:1d:77:b7:71:5f:8c:35:ee:57:0d:
7b:c8:1d:ff:8c:a8:3d:29:23:c2:f7:83:8d:88:6c:
45:6e:2d:79:9c:c3:22:51:e0:cb:6e:f1:4c:ea:e6:
63:42:70:31:33:44:69:4a:b9:7c:82:f0:ef:74:e7:
d4:20:63:ea:83:de:4f:dd:ee:bf:b1:eb:52:d4:f7:
5f:4c:c7:dc:30:c8:f8:50:9b:62:e7:5b:11:c7:99:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:EE:1D:9E:C8:FE:DE:45:6A:69:12:3F:55:15:1C:AF:83:D5:A4
X509v3 Authority Key Identifier:
keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
38:53:26:20:f1:6a:04:3a:ae:bb:d3:ea:dc:e8:70:04:2d:23:
37:d9:03:0d:93:aa:85:fb:a7:f5:de:d0:ec:72:a5:f1:82:00:
7d:78:05:b0:52:08:4d:7d:28:c1:6e:bd:2d:84:02:f7:e0:1c:
39:ee:35:18:eb:c0:19:01:e2:e1:73:0d:7b:70:dc:88:42:2f:
9e:93:6b:18:6b:e6:eb:f4:d6:68:a1:59:0e:28:96:b1:0d:f9:
37:97:8f:0b:57:80:c9:94:f5:25:ec:75:e5:41:32:ae:5f:53:
7b:07:c9:55:85:d2:1e:17:fc:cb:d2:81:7c:1c:ed:bf:e1:76:
a2:51:45:cb:61:6a:eb:f4:4a:54:30:31:86:df:0c:38:18:46:
d4:e8:30:38:f8:8c:2e:c0:e7:46:a9:97:68:4e:02:20:89:75:
60:ac:02:18:cc:0b:ca:c3:03:2c:b8:84:cc:ab:c9:69:a0:42:
a0:9d:ad:76:2d:12:09:67:24:cc:d7:4c:5f:25:c7:c0:bb:b2:
60:2a:58:db:82:de:4a:67:50:b4:e6:6e:2d:e9:29:6c:28:08:
9e:80:68:b2:c7:7f:8c:48:f8:8b:15:fb:bc:99:d7:0d:4e:37:
02:50:76:76:0c:d3:5f:0a:63:47:e9:50:10:87:16:66:c3:89:
00:5d:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:23:06 2025 by rpki-client