Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa
File: ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa (raw, json)
Hash identifier: ephpJ4ipHMwrJD7Bz3rKfNSaDOgLcj3aX7bFbiCir/4=
Subject key identifier: A6:94:B1:9A:3A:16:23:49:65:B3:0F:D8:F1:C8:B0:EA:2F:48:7B:1A
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 01942368C711104E9B04DC20754E1D96B8E9
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa
Signing time: Wed 01 Jan 2025 19:47:36 +0000
ROA not before: Wed 01 Jan 2025 19:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 185.187.122.0/24 maxlen: 24
2a0b:9e80:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c7:11:10:4e:9b:04:dc:20:75:4e:1d:96:b8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Jan 1 19:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a694b19a3a16234965b30fd8f1c8b0ea2f487b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:ab:7d:79:b8:a5:7c:76:09:6d:f9:d7:31:
19:a1:bd:4a:e4:db:ce:83:a3:5d:b8:b4:dc:c0:64:
c1:1a:30:96:2e:80:94:ad:93:35:3a:79:21:a9:14:
28:ab:47:fe:ac:4b:a4:37:75:c6:33:cb:ff:24:77:
81:15:30:c7:de:67:a6:51:98:55:d5:e6:2b:43:3f:
eb:ca:98:70:18:7b:23:1a:c9:95:28:9b:f3:4c:4f:
4b:08:96:1b:16:83:89:6e:8e:26:c1:7c:b2:88:21:
8d:df:be:fa:32:80:f7:b7:09:00:ec:32:c7:67:56:
8a:3e:9d:b7:8d:e8:3c:25:89:ca:ae:92:b3:5c:3e:
f5:ea:ce:d6:39:00:22:0f:32:f6:c9:e4:81:fe:70:
0f:66:90:d8:7b:13:12:d0:d6:23:9d:b7:79:b0:88:
65:7b:dd:c5:9e:31:30:6a:87:fe:fe:a5:47:8e:1b:
1c:00:40:77:cb:06:30:8f:50:6c:3b:7a:9f:ce:c0:
c1:58:74:3b:4a:35:00:51:3f:9d:2e:b5:90:7a:45:
95:8d:fa:a2:76:c9:ad:6e:fa:5d:ad:7b:2f:12:2f:
d2:de:9c:2c:54:9f:75:f3:89:71:f6:7e:1b:00:7a:
ed:6a:18:c5:57:42:bb:37:e5:13:b6:a4:88:0a:41:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:B1:9A:3A:16:23:49:65:B3:0F:D8:F1:C8:B0:EA:2F:48:7B:1A
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/ppSxmjoWI0llsw_Y8ciw6i9Iexo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.122.0/24
IPv6:
2a0b:9e80:1000::/36
Signature Algorithm: sha256WithRSAEncryption
ac:5d:48:3f:ff:65:f1:53:57:78:24:64:31:ae:59:8f:d6:dd:
6f:bd:65:46:ba:62:db:a4:17:6b:66:2c:89:5c:65:c6:2f:8f:
8d:fc:09:7c:99:7c:24:e8:d7:e8:fe:d1:f6:44:ac:7d:c0:77:
65:04:ef:42:69:48:1b:de:b8:f8:7d:ba:c8:79:22:51:89:1c:
60:10:c6:6c:d4:73:55:f9:dd:69:03:73:15:f7:ac:8c:82:bb:
87:95:43:7a:fc:f9:bd:93:df:59:f3:87:0d:75:d3:77:eb:fd:
6a:5f:21:f9:b0:a8:68:09:45:0e:f8:a0:5d:25:4e:d7:67:f2:
22:8d:27:3a:12:90:99:b1:e0:c7:9a:e6:63:c2:cd:80:11:e2:
c7:52:14:c7:be:ba:4f:3e:0a:44:bc:0f:67:d6:33:74:74:6e:
0a:ab:e0:d2:57:f7:cf:f0:bc:c0:27:3d:bf:54:c9:c2:40:28:
bc:aa:4c:a0:cc:48:c9:b7:cc:0f:50:cb:f5:21:62:ad:07:e8:
53:1d:bf:69:52:19:b2:be:ef:29:77:a5:20:1a:b1:33:5b:fe:
50:d1:2b:21:a6:5c:65:49:b3:40:11:03:ec:a4:e5:70:ec:9d:
3c:66:29:2d:56:6c:84:80:10:12:49:60:a8:92:85:3e:3f:0a:
2b:ac:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:41:58 2025 by rpki-client