Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/f_0cBwbRlTos3u7H8bwrPKcXUN8.roa
File: f_0cBwbRlTos3u7H8bwrPKcXUN8.roa (raw, json)
Hash identifier: xaHHsjfR8A17jN6pVVS9xdai2iZp05T7G1TibqlcLQs=
Subject key identifier: 7F:FD:1C:07:06:D1:95:3A:2C:DE:EE:C7:F1:BC:2B:3C:A7:17:50:DF
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0195F80C985C3756D729721729B0ABB1527B
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/f_0cBwbRlTos3u7H8bwrPKcXUN8.roa
Signing time: Wed 02 Apr 2025 19:48:49 +0000
ROA not before: Wed 02 Apr 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205958
IP address blocks: 185.30.168.0/23 maxlen: 23
185.30.170.0/23 maxlen: 23
185.194.102.0/23 maxlen: 23
2a0a:49c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:0c:98:5c:37:56:d7:29:72:17:29:b0:ab:b1:52:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Apr 2 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ffd1c0706d1953a2cdeeec7f1bc2b3ca71750df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:34:32:af:3c:56:2f:4b:4c:4b:2f:e8:20:
dc:f2:53:a9:c0:b2:f9:d2:91:7e:5b:9f:14:78:17:
e0:e9:79:28:9c:a2:29:53:41:9c:6d:9f:37:4a:de:
dc:28:a5:ee:9b:f4:14:fd:cc:03:b6:41:dc:a0:fd:
b8:f6:25:56:97:39:1a:7f:4f:a8:3c:4a:19:0d:27:
99:99:ec:d1:32:2a:3c:c0:9e:b1:ef:50:8e:2d:eb:
18:cf:2b:23:82:2d:7a:38:eb:cf:14:cb:9b:c0:db:
e6:20:36:61:68:61:22:0c:4f:27:66:99:b4:7e:59:
b2:bf:1b:1d:4f:db:2b:60:c9:d8:bc:f7:e3:6f:16:
14:57:2a:7e:22:69:50:3f:82:91:f4:7c:dd:26:8c:
be:67:33:8f:d8:00:ee:b0:82:09:e3:99:09:e6:0f:
47:c8:53:37:9d:b9:78:0e:87:5a:db:3b:94:69:f9:
79:a5:0e:f4:e6:df:b9:3f:3a:e4:ed:83:f8:52:9e:
a9:2f:b6:82:dc:8c:c5:32:87:19:4f:64:8f:fe:b0:
81:03:c0:ac:bb:5d:40:bc:58:54:17:09:6b:09:8b:
d6:87:32:a9:05:ae:46:40:b0:76:b1:e0:dc:38:c9:
01:5d:be:95:5a:92:a5:ac:8f:9e:f4:66:1b:62:e7:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:1C:07:06:D1:95:3A:2C:DE:EE:C7:F1:BC:2B:3C:A7:17:50:DF
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/f_0cBwbRlTos3u7H8bwrPKcXUN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.168.0/22
185.194.102.0/23
IPv6:
2a0a:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
bc:be:ef:a8:de:2a:19:d6:57:67:24:f5:50:b0:c9:a6:0f:a3:
f8:68:34:b5:41:5e:1c:80:a5:36:a4:0d:61:7d:26:1a:5b:4e:
4d:1b:6d:cb:29:b9:f7:ac:f4:9b:be:51:3e:56:4c:cc:33:56:
1b:23:6f:78:62:b3:17:aa:a1:d7:e1:10:a2:7d:4c:fa:1f:f1:
ae:fe:f8:dc:b0:02:e7:32:9d:9f:2d:9f:36:bb:26:99:39:9e:
e2:e4:53:57:8e:2a:37:46:ea:36:f7:ff:3c:aa:2d:b1:ac:6a:
42:c6:fb:a2:a1:50:84:9e:0a:87:c6:d3:35:c6:00:de:8a:9c:
8e:98:22:29:3b:68:8c:c7:92:28:8c:82:ae:e6:d8:6f:ec:13:
0d:6f:c6:1d:f8:bd:ec:46:3f:88:07:72:99:4a:c8:24:b1:e4:
bc:1f:1d:1c:db:f4:78:92:f0:dc:9f:52:a1:70:86:ed:c4:ff:
42:af:44:a2:ec:d1:28:f1:7f:a2:24:5a:84:a3:0f:85:7d:60:
ae:2d:09:c1:b5:1a:8f:59:24:bf:f2:70:cd:36:c7:69:5d:cd:
62:bc:ff:91:fb:35:ab:8e:b8:79:a0:4f:5c:9d:18:29:28:38:
f1:42:1b:63:7b:b1:bd:82:8f:d7:a6:90:68:59:aa:c6:ce:3c:
23:0b:53:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:57:51 2025 by rpki-client