Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa
File: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (raw, json)
Hash identifier: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=
Subject key identifier: 25:DD:5E:20:31:89:97:54:03:87:97:EC:95:58:2F:AF:E3:F7:69:BE
Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial: 0194236A17D1C88FAD8A537032BBD6EF3859
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 185.214.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:17:d1:c8:8f:ad:8a:53:70:32:bb:d6:ef:38:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25dd5e2031899754038797ec95582fafe3f769be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:10:a0:5c:05:2e:77:12:17:94:1e:a7:52:
a4:e9:20:fb:9a:29:6f:e9:11:b1:3e:f9:55:ac:75:
89:1d:65:34:77:ba:c1:e1:54:44:99:60:c5:a3:c2:
d5:f8:fc:4a:29:ab:1e:01:c2:1d:1c:3b:d4:16:47:
76:6f:81:ff:a9:1e:0c:5f:c1:7e:ed:a0:ff:e0:bb:
73:b3:bf:81:d0:32:5f:5c:d0:77:c9:94:f6:5f:4f:
43:5c:91:b0:7f:3f:14:25:e0:10:51:0c:a5:79:1f:
b8:5b:df:f2:d5:ec:4a:b2:54:24:c9:6b:37:64:53:
49:e9:08:ed:0b:d2:57:0b:8c:ec:bf:a8:00:a8:7e:
fe:c0:09:67:6a:47:a4:85:11:5e:6e:c0:9b:57:ba:
45:48:0b:57:de:e8:d2:2f:4a:54:16:9a:41:fe:9e:
1a:62:f3:48:76:80:06:26:6b:98:37:b4:f6:cb:fe:
3a:1b:47:0e:0c:48:e3:7f:93:d7:cd:21:6c:0e:bb:
a7:8f:44:ba:8c:f5:a9:94:7f:62:af:73:10:56:05:
b6:99:7d:81:3c:2e:bf:e6:2e:52:6d:78:8f:6f:70:
0c:0a:05:02:91:6a:06:fc:ce:36:4d:ab:44:2e:98:
31:df:fe:15:7a:16:cb:10:54:c1:12:b3:07:13:4e:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DD:5E:20:31:89:97:54:03:87:97:EC:95:58:2F:AF:E3:F7:69:BE
X509v3 Authority Key Identifier:
keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:70:69:dd:e0:8c:32:55:45:7b:5e:a3:8f:37:a2:a4:26:57:
c1:8f:33:e6:ef:b8:01:25:e9:04:06:64:50:c8:f0:33:f7:e2:
fc:55:e6:a7:d2:9d:48:9c:e5:a3:2b:69:de:d2:e7:ed:86:cf:
9e:f0:0e:90:87:99:0b:b6:d9:ef:46:84:d8:aa:8c:2f:01:f8:
55:37:e8:78:f6:f2:88:46:63:72:c1:59:c3:a2:78:a7:0b:e1:
43:9b:6d:78:f3:62:8b:94:2e:4b:46:95:9a:a5:2b:02:ba:b8:
20:12:69:ae:c4:8b:b1:47:0c:f8:1e:48:35:37:08:4e:95:bf:
78:d5:39:58:71:3d:0c:6f:d3:98:0b:46:76:7b:8e:92:eb:7f:
7c:ab:81:aa:13:4e:5e:58:7a:de:0c:82:c8:bc:11:67:97:b1:
cf:9f:4a:80:a4:c0:6b:43:c9:ad:f8:24:9a:22:e4:f4:eb:fc:
5f:ab:ee:4f:46:fb:ce:6c:16:69:e0:2d:23:2a:6a:a1:8f:84:
11:be:3b:92:3a:21:25:cb:96:cc:b8:55:f3:cd:18:a1:ab:d6:
2d:a1:9c:00:52:96:25:4c:87:b8:46:74:ad:ac:42:1d:ea:80:
db:1f:8a:06:c2:ea:75:be:01:2b:01:9c:65:a1:05:26:20:f8:
99:5d:1a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:32 2025 by rpki-client