Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa
File: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (raw, json)
Hash identifier: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=
Subject key identifier: D4:F4:2F:62:F4:CC:FB:49:91:DA:E8:51:AD:37:EA:CD:1C:CC:09:94
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D6269FAC3A3E8707487F5B7EB30F29
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44024
IP address blocks: 185.225.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:26:9f:ac:3a:3e:87:07:48:7f:5b:7e:b3:0f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4f42f62f4ccfb4991dae851ad37eacd1ccc0994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:cf:c5:cb:54:a5:be:c5:49:b1:dc:98:45:
c8:02:e6:37:e0:02:08:ec:05:93:f2:8c:da:3b:1c:
9e:f6:d3:d4:14:ea:8d:3b:bc:9b:34:fe:50:26:e9:
1a:f0:ac:2c:1d:bb:b4:f4:07:ec:80:cb:4a:cf:b5:
69:1e:f5:e8:c4:03:7f:82:63:8e:a4:e0:34:8c:f0:
a2:5b:af:db:87:29:bd:d7:99:27:1f:21:f3:62:3c:
5a:19:27:da:df:a3:5b:54:10:6c:85:c1:6a:24:7c:
b1:27:01:df:51:ee:7c:d9:2c:73:c8:8e:a8:e0:8f:
65:6f:89:09:af:a2:70:2b:0c:e7:6b:f0:c2:33:7d:
b8:68:17:21:64:56:db:d6:27:a8:17:dc:03:69:69:
7d:c6:e2:e9:f2:75:fd:6c:80:e7:d7:e4:e8:b2:3f:
9c:31:eb:ac:85:d9:3c:2f:75:27:66:6c:98:07:61:
79:26:b2:48:df:da:54:fc:12:c8:26:dd:cb:1f:71:
b0:1a:91:db:95:cd:63:34:53:a9:25:0f:04:d8:20:
90:f8:58:ce:cb:27:68:6e:d3:79:44:54:dd:bb:b1:
a4:7a:9d:d3:ee:52:0b:5c:7a:41:cd:71:f3:e1:68:
ef:2f:1a:c3:4e:ec:81:8b:3f:a8:70:77:ee:f1:f3:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:2F:62:F4:CC:FB:49:91:DA:E8:51:AD:37:EA:CD:1C:CC:09:94
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a1:f7:cf:3e:08:fe:18:4d:5c:28:84:6e:77:89:5a:03:16:
2f:85:2f:fb:32:1c:26:b5:ad:08:f8:03:fa:0a:a4:e8:29:da:
97:3c:90:17:65:1a:ac:05:d2:04:2e:c7:ed:e6:0f:6b:27:c6:
0c:8f:61:42:22:1b:5d:a2:05:40:50:72:b8:62:ad:71:f6:8f:
92:b4:69:d6:9f:03:d3:7b:64:ae:b1:96:88:7f:93:83:ea:06:
41:50:21:6a:8a:f7:11:ad:98:29:67:6a:e8:68:10:4a:cc:d4:
06:d7:ac:2d:f8:5d:23:9e:6b:23:97:03:a1:d6:ba:78:44:c2:
58:4e:05:29:a7:2d:26:9d:30:80:bc:e0:ba:62:dd:8c:7f:9b:
19:1a:f6:83:9c:3b:e3:c0:ee:7c:23:03:9b:46:7a:dd:33:a4:
45:92:9e:e5:52:fa:15:11:2f:e0:3c:89:f9:67:53:82:10:78:
91:8c:51:a4:14:5d:ca:27:66:d0:2e:f7:d6:9b:67:4c:a9:80:
36:e2:92:25:07:c6:13:37:10:d5:12:05:cc:50:32:5b:f6:9f:
2b:ba:16:53:2d:a5:27:9a:95:ca:e4:ae:5d:6a:fb:6a:8c:92:
55:0e:d1:f0:82:8d:af:07:7d:21:fa:c4:70:52:3f:b0:bd:61:
e8:7b:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:25:45 2025 by rpki-client