Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/21cAYiN5jMpqkJRdEkHSMeQVgkY.roa
File: 21cAYiN5jMpqkJRdEkHSMeQVgkY.roa (raw, json)
Hash identifier: KwzUXQv1pIgCUyqyYd3vxndo9n20A9iWRxEC49c1pqI=
Subject key identifier: DB:57:00:62:23:79:8C:CA:6A:90:94:5D:12:41:D2:31:E4:15:82:46
Certificate issuer: /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial: 01942368FD04EC7690E45794F352647486EE
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/21cAYiN5jMpqkJRdEkHSMeQVgkY.roa
Signing time: Wed 01 Jan 2025 19:47:50 +0000
ROA not before: Wed 01 Jan 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205863
IP address blocks: 185.203.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:fd:04:ec:76:90:e4:57:94:f3:52:64:74:86:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Validity
Not Before: Jan 1 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db57006223798cca6a90945d1241d231e4158246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:bb:c2:94:d1:62:50:73:c5:a7:15:d1:e3:
d2:5b:34:ab:12:5d:73:c1:6e:4a:a6:84:f0:31:70:
56:8a:cb:1d:bc:2d:0f:63:cf:10:66:93:90:0f:6f:
e0:3a:fe:86:67:4c:ba:f1:f3:fc:9c:37:33:a6:b5:
c4:8d:e6:52:89:16:cf:87:da:ea:fa:d4:4d:bf:33:
7d:08:aa:9b:ec:e9:15:e8:45:d0:ef:88:cb:57:98:
44:d5:75:bf:92:28:69:0d:2e:a2:a2:fb:0d:8f:c3:
57:8e:89:ed:cc:0e:92:55:07:ab:51:7d:94:b3:cf:
5e:28:b3:61:8e:12:72:09:b1:81:b6:cc:0b:5d:ec:
48:bf:9c:62:b6:bc:28:c4:41:0d:49:e8:74:86:7d:
f2:62:c6:41:44:58:4a:70:31:70:9a:dd:10:e0:53:
6e:ea:c9:d9:0b:00:7f:6f:fa:f6:d6:85:31:42:0a:
1f:eb:6b:c2:1f:75:75:a2:27:82:5d:3c:21:3e:70:
0d:c3:e6:d3:84:81:92:b7:e4:9e:4b:be:82:bf:4f:
f5:f8:57:0d:a5:60:83:22:90:f6:66:06:54:21:f8:
3c:4c:f8:b9:c4:12:77:60:7a:04:79:6f:98:db:cf:
ad:03:37:a5:fe:53:c6:01:de:76:79:40:2f:87:db:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:57:00:62:23:79:8C:CA:6A:90:94:5D:12:41:D2:31:E4:15:82:46
X509v3 Authority Key Identifier:
keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/21cAYiN5jMpqkJRdEkHSMeQVgkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.156.0/22
Signature Algorithm: sha256WithRSAEncryption
59:5b:1c:c5:06:82:df:11:ce:26:39:36:8a:9a:26:32:2a:00:
a8:ad:ae:61:21:71:92:6e:40:af:6f:a3:38:fb:ff:0a:15:85:
80:d8:30:a4:cb:39:d9:39:55:4c:78:09:42:d5:4e:71:e7:ec:
ed:f8:a5:fb:75:51:fb:65:57:47:91:8e:f5:2f:0f:a1:0d:83:
71:17:23:b3:2c:ae:25:79:1b:a3:60:81:7e:ef:37:7e:e1:35:
bd:a7:08:30:fb:0b:4d:ce:11:e6:8b:64:96:c7:5d:b0:b5:b2:
d7:5b:b0:d5:3d:30:f5:ed:09:67:6a:d2:2b:db:56:99:42:09:
86:1f:2c:77:eb:30:b1:7e:2d:c1:93:5c:ca:13:7f:44:2b:8c:
e5:02:e8:91:84:a9:0f:03:dc:66:09:87:41:75:49:cc:97:6b:
b1:aa:32:78:7a:4c:6c:2e:49:fb:51:43:9e:27:bb:5a:a0:d5:
ad:22:65:2b:85:29:2e:f8:ff:e5:8d:bd:8f:9c:ec:a7:b2:9b:
57:e0:01:1b:74:de:54:d9:e4:11:e6:31:f0:29:2d:33:02:a3:
ad:24:bb:56:13:5b:7d:44:ed:5e:96:48:d0:36:b1:87:b4:fd:
9a:ae:d9:83:ee:ee:59:25:a3:cf:8f:90:47:e0:5d:fd:1c:47:
0d:ed:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:31:06 2025 by rpki-client