Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/e90cxo87hLtPikJ7EUM35fW2rww.roa
File: e90cxo87hLtPikJ7EUM35fW2rww.roa (raw, json)
Hash identifier: JhixRA2lXqpDABrDkWORv4xIbcBM9+VsOAlKJ/8HeYw=
Subject key identifier: 7B:DD:1C:C6:8F:3B:84:BB:4F:8A:42:7B:11:43:37:E5:F5:B6:AF:0C
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019619F55BA238935773CE164CD57C7070CB
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/e90cxo87hLtPikJ7EUM35fW2rww.roa
Signing time: Wed 09 Apr 2025 09:50:32 +0000
ROA not before: Wed 09 Apr 2025 09:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210447
IP address blocks: 85.142.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:f5:5b:a2:38:93:57:73:ce:16:4c:d5:7c:70:70:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 9 09:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bdd1cc68f3b84bb4f8a427b114337e5f5b6af0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:c1:a2:93:d5:f7:80:e6:48:47:fb:e3:53:
b2:82:28:a7:8c:28:4a:33:26:46:ce:de:e8:a2:dd:
72:e3:1b:b2:83:fc:41:c5:7c:16:da:b0:11:2b:e0:
8c:bf:5c:b7:2b:9d:6b:db:00:27:b7:71:16:ee:82:
a7:ba:b5:64:d0:09:ee:cd:6e:cc:88:51:e3:56:14:
9b:66:4c:89:9f:af:44:eb:ce:56:95:e1:17:29:a6:
fa:30:2a:f0:0a:8e:f5:ba:03:95:61:a2:b9:50:e1:
b6:14:34:e5:1d:7c:15:09:8b:c7:44:be:12:b9:0b:
2d:77:80:82:da:6d:0c:c3:9e:37:b8:7b:98:b6:39:
69:57:3b:12:da:ed:44:90:e5:81:03:73:4e:d2:d6:
c7:ed:31:10:d1:b7:87:0f:18:a2:75:a3:3b:59:e2:
c6:86:76:c6:82:9c:dd:60:71:6e:30:ec:f7:0f:17:
ee:fe:19:86:94:4d:38:38:00:64:15:d9:32:5f:e3:
1f:81:ce:1a:36:35:85:60:02:46:38:19:23:34:10:
00:95:46:cd:e7:bc:8e:ad:ea:d0:b2:9b:b4:11:4c:
49:f9:df:01:48:d8:be:3d:ad:bf:63:f6:fd:27:c0:
ed:9f:e0:db:83:25:b1:d8:f8:46:77:ac:ea:65:ba:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:1C:C6:8F:3B:84:BB:4F:8A:42:7B:11:43:37:E5:F5:B6:AF:0C
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/e90cxo87hLtPikJ7EUM35fW2rww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.114.0/24
Signature Algorithm: sha256WithRSAEncryption
96:78:20:3e:e4:9d:81:61:ad:66:58:22:b3:e4:e7:37:21:96:
80:ff:d8:37:f2:78:55:77:9f:49:3e:e1:75:39:be:4b:3b:1b:
9b:85:9e:01:ef:9b:a8:f9:70:dd:fb:5b:07:24:b4:4b:af:24:
6a:5d:f8:63:11:24:1f:a8:e5:22:b5:78:b2:1f:ba:a4:cf:48:
28:42:71:7d:f8:24:10:1a:93:a4:dd:4f:53:d7:e5:cd:a4:6a:
c9:9a:c4:71:6e:f0:a2:a7:07:55:d2:2c:63:88:70:32:41:56:
36:04:ee:70:5a:2c:c2:09:e1:41:5e:c0:4b:24:4b:6e:e7:8e:
bf:dd:d7:5d:9d:ff:2d:58:14:b5:3a:fb:34:22:0e:5b:14:f1:
1c:e4:7f:61:7a:d8:d8:3b:0b:2b:0e:5a:50:34:62:2a:7f:32:
55:3e:fc:20:f0:f0:5b:65:8a:7f:54:3e:a3:a1:f3:3c:da:91:
e2:5c:9a:2a:2b:ea:f5:72:a1:a3:5c:40:50:bb:fd:1d:92:36:
56:41:02:20:19:37:d5:06:8a:a5:98:e0:a0:51:a6:7b:94:18:
09:b3:48:4f:cc:69:dc:52:84:90:fb:c1:6b:2c:10:82:4c:5a:
b1:94:47:10:69:6d:b4:f1:ea:47:de:83:c6:b2:62:6b:3d:e6:
0c:e5:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:32:51 2025 by rpki-client