Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1_W8qiKJiEbG2Hr0EjLTn6x21Jc.roa
File: 1_W8qiKJiEbG2Hr0EjLTn6x21Jc.roa (raw, json)
Hash identifier: TrA5TW7Hjp+rRecBtOMG+1S8gA3ZNbnju8XpdKcb75I=
Subject key identifier: D7:F5:BC:AA:22:89:88:46:C6:D8:7A:F4:12:32:D3:9F:AC:76:D4:97
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194244493F8C01607C831955E5C7CE129FD
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1_W8qiKJiEbG2Hr0EjLTn6x21Jc.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60144
IP address blocks: 185.222.219.0/24 maxlen: 24
2a09:0:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:93:f8:c0:16:07:c8:31:95:5e:5c:7c:e1:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7f5bcaa22898846c6d87af41232d39fac76d497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:d0:da:b2:2f:81:54:3d:a4:e1:ec:89:c1:
be:d6:a6:b0:0a:ff:e2:c2:80:94:78:40:07:11:f3:
51:3b:29:4d:b0:e7:e7:47:bf:ec:21:ec:e4:52:a6:
c1:51:f0:24:46:c7:35:18:9c:4c:44:ab:cb:09:39:
57:35:9b:8e:6b:c2:c9:6e:ca:49:be:86:45:7f:d8:
6c:a8:03:92:6a:6f:63:2f:b0:a8:d7:4d:a1:a0:74:
5a:93:80:6c:cb:5e:97:36:b1:ed:09:cb:d5:cf:f4:
4a:6a:a2:f4:74:76:f8:bb:c4:9a:8f:43:df:21:d8:
d4:e8:b4:2f:7d:07:a9:38:9e:39:30:de:d8:9c:f3:
75:60:03:9c:34:17:31:59:72:bd:e5:45:fc:b2:95:
fd:b3:b4:41:b2:99:6f:f2:8c:88:d6:01:ce:49:a1:
34:7e:01:08:61:04:07:25:32:46:b8:52:3f:d7:c9:
5c:c3:71:04:be:11:ee:b3:ee:ec:b3:cc:7e:ad:bc:
bf:f2:21:a6:98:85:c4:73:57:da:4e:e8:cc:4e:bd:
49:c8:74:5a:67:f1:24:1c:1f:e0:48:1c:c5:d6:14:
22:94:47:ca:f1:70:29:d2:79:ce:e3:4c:a8:7e:4d:
8e:05:7b:3c:2b:ff:4d:10:3b:93:96:33:c4:2b:78:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:BC:AA:22:89:88:46:C6:D8:7A:F4:12:32:D3:9F:AC:76:D4:97
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1_W8qiKJiEbG2Hr0EjLTn6x21Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.219.0/24
IPv6:
2a09:0:12::/48
Signature Algorithm: sha256WithRSAEncryption
2f:0b:86:0f:b5:70:85:f0:76:c9:16:1d:89:9c:b0:90:a9:15:
d3:cc:db:97:5d:65:c9:6e:43:94:dd:ce:48:86:15:c9:4b:a5:
69:6e:1b:7c:49:32:ca:db:85:f1:4f:95:2a:5a:39:6b:e5:46:
7c:63:27:08:bb:69:3c:24:17:bc:61:22:c9:14:4f:62:e4:cb:
06:dc:00:53:23:8b:a9:dc:bb:75:bc:ba:9f:20:e1:68:e5:17:
b3:b8:b6:11:f6:9c:7e:56:17:f5:3f:17:6e:60:fa:ca:cb:5a:
41:4c:69:7d:41:24:b7:8b:2b:4c:63:3b:7e:0b:de:df:a8:d9:
22:f1:16:92:f2:34:54:09:4e:bb:51:8b:81:b9:78:1d:ee:04:
53:8b:fe:6c:19:8c:92:23:81:20:16:48:d9:5f:02:75:2d:e7:
ff:39:3b:f2:f1:21:09:cf:1d:d6:71:95:5f:f2:9e:d4:72:74:
fd:88:11:66:e1:70:52:3d:57:3f:be:96:a9:e3:27:84:be:dd:
e6:63:dc:42:90:6f:7d:d0:fe:96:8a:a5:30:5c:76:12:8b:6b:
b5:ee:6b:97:4f:95:38:ad:02:db:4c:d8:10:54:b5:0c:f7:72:
82:36:40:aa:82:24:20:af:bb:eb:92:f7:33:0f:06:bd:2c:3f:
51:11:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:29:48 2025 by rpki-client