Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa
File: F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa (raw, json)
Hash identifier: 8zleOD6aN/r+slAEa8mt1l5gM5SF8gtFDMiJe9eHZeU=
Subject key identifier: 17:B3:09:DF:A2:74:BA:20:CA:CB:E3:3F:BD:78:E6:25:D6:CF:E1:FB
Certificate issuer: /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial: 019424B3C18C76A9CAE23F8B72217B84C7FD
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39702
IP address blocks: 185.133.12.0/22 maxlen: 22
2a05:fe80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c1:8c:76:a9:ca:e2:3f:8b:72:21:7b:84:c7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17b309dfa274ba20cacbe33fbd78e625d6cfe1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:e1:12:37:61:14:02:bb:2f:4e:17:d7:90:
28:ec:62:6f:11:9a:39:62:55:1e:9e:f4:80:4b:53:
9a:97:b3:67:9e:ee:89:c9:67:84:55:5c:62:94:3b:
13:58:a3:36:78:9b:72:9a:18:42:16:1a:73:8d:63:
13:9c:cc:79:cf:5b:d3:91:91:2b:1d:64:60:68:50:
0b:04:9b:fc:08:41:5c:0a:13:38:7e:e9:83:d2:11:
e4:d3:0e:a0:b0:7b:f7:ec:35:9d:f6:57:96:21:b3:
52:1d:96:59:d8:5b:92:8c:41:b4:f8:9b:50:1c:b8:
c8:7f:88:24:4e:9b:4b:36:01:e4:39:2a:6e:02:52:
d1:7b:0a:fb:ed:25:39:50:70:d6:07:97:34:66:68:
d9:3b:36:1f:a3:34:ea:5f:a1:17:ed:80:28:5e:a4:
6b:87:f0:bb:43:0d:0f:c4:e8:88:c2:cd:67:24:6d:
aa:3c:17:13:e2:58:26:22:94:12:dc:6d:b1:76:91:
4a:a6:66:42:8c:29:99:6c:c2:0e:2e:fd:f6:23:d1:
9e:94:88:02:39:75:3f:84:8d:42:9f:81:f4:1a:49:
da:9b:77:45:50:d3:eb:41:d6:78:ce:7b:92:2c:e4:
b1:f9:1d:49:f5:ab:c2:54:d7:50:9a:9a:91:71:6e:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:09:DF:A2:74:BA:20:CA:CB:E3:3F:BD:78:E6:25:D6:CF:E1:FB
X509v3 Authority Key Identifier:
keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.12.0/22
IPv6:
2a05:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
6a:7b:8c:57:c6:28:d0:6c:df:8b:84:68:61:90:c5:13:b6:17:
52:c2:e4:57:c5:f2:37:fb:ea:4b:95:6d:22:c9:e5:35:88:14:
5a:a3:22:0f:be:b1:79:b4:b4:c7:af:93:0a:23:f7:de:fe:35:
2b:6d:58:6c:3a:9c:b4:da:a6:5d:be:be:2c:34:8c:16:16:2b:
98:94:c9:32:e0:b2:89:cc:63:75:5d:92:7b:25:4c:26:3a:e5:
a3:1b:79:1b:a3:86:8f:f9:f6:45:d1:cd:ee:17:be:ad:c2:f6:
13:74:d9:af:9f:1b:14:29:5f:0d:23:19:86:29:b7:37:7e:7f:
60:68:59:05:e9:bf:51:be:09:26:17:44:97:21:bc:f2:00:32:
8c:34:e7:8d:05:7f:5f:3e:2c:85:ea:9a:39:90:f7:b5:45:4e:
01:ff:9e:91:6f:b7:41:8d:70:88:a7:c0:1a:7d:20:1b:d6:47:
dc:c8:1a:ff:ec:36:28:18:84:41:cc:77:f7:ad:e8:e3:aa:a5:
aa:21:65:1c:21:89:2b:19:a4:90:64:54:2e:26:b7:29:38:6c:
f3:99:01:83:ef:01:62:09:df:0e:52:42:d3:53:67:2c:a4:6c:
c1:35:8b:2f:4c:a2:51:8c:a3:ad:56:50:6a:f6:4c:c3:61:99:
b5:4d:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:29 2025 by rpki-client