Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa
File: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (raw, json)
Hash identifier: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=
Subject key identifier: EC:8F:B8:12:D9:FF:F8:04:EC:E6:47:B6:93:B0:BF:46:2E:70:38:61
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 0194228D72D945FBE2C8EB3BE831FD4B0B2D
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa
Signing time: Wed 01 Jan 2025 15:48:02 +0000
ROA not before: Wed 01 Jan 2025 15:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42864
IP address blocks: 185.198.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:72:d9:45:fb:e2:c8:eb:3b:e8:31:fd:4b:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Jan 1 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec8fb812d9fff804ece647b693b0bf462e703861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:90:fe:27:24:2b:76:dc:ea:0a:c9:26:23:
dc:48:ce:6d:84:36:cf:23:2d:93:1c:4b:fa:cc:ef:
f4:84:90:1e:02:b1:22:05:ab:dd:b7:0b:5f:00:cb:
07:07:e2:33:65:f5:31:8b:a3:0e:37:7d:ee:f1:c7:
0c:66:53:38:64:2c:e1:d7:95:b6:8b:32:6f:ac:6f:
9e:d3:83:b6:95:20:cf:65:a4:7b:9e:85:3f:28:4e:
68:e1:08:a3:04:09:f8:f0:15:d2:ed:f2:ae:0c:d0:
b2:1d:63:7a:1b:1a:0c:79:4b:11:d9:00:13:3d:3a:
82:db:cd:75:c9:67:c6:9a:67:c4:f7:48:60:15:b9:
50:a3:76:58:00:32:5e:16:29:64:7f:f4:ba:a9:b9:
a6:d1:b6:9b:17:c3:34:97:b4:0c:9c:3b:dc:0f:da:
49:5c:82:e8:31:8f:8f:bd:88:86:98:a5:89:c5:7f:
7f:97:e5:01:c2:74:84:a6:38:43:b3:8a:e3:54:bd:
50:5a:90:93:8d:18:5f:7f:29:15:9f:91:53:19:f2:
7c:cd:ad:32:de:e0:e5:41:26:79:75:b5:88:8c:26:
ac:5c:25:13:47:cb:3e:c7:b8:47:d5:fc:96:59:8d:
9c:2d:2e:b7:a9:28:58:ce:39:62:28:ab:b6:f2:97:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8F:B8:12:D9:FF:F8:04:EC:E6:47:B6:93:B0:BF:46:2E:70:38:61
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.168.0/22
Signature Algorithm: sha256WithRSAEncryption
88:e6:3e:30:e6:2d:e6:a1:f1:bc:50:c6:d5:ae:b7:9a:56:10:
ed:b5:0b:95:ab:ae:b8:3e:9a:e7:88:ef:76:f0:14:36:5b:df:
7a:0e:21:c6:09:ae:03:31:87:d3:b7:9a:93:a2:77:d0:3a:18:
4c:94:12:c7:ea:1c:f5:de:e9:21:92:9e:a2:99:64:98:aa:b9:
3f:1a:23:99:96:30:78:90:ab:70:3b:66:f6:a5:f3:ed:fd:6e:
30:cb:89:f3:41:70:c5:f5:b4:5e:c7:f2:a8:51:a9:48:99:4f:
8b:55:2f:9a:81:20:22:1f:83:98:94:96:34:da:9b:61:5a:aa:
d9:49:62:fc:50:c2:d4:64:c2:d2:eb:51:92:8c:86:46:6e:0b:
9e:ae:50:72:c9:a8:38:04:28:d2:c2:c8:6a:96:d3:be:d4:8b:
e7:73:5a:e1:4b:5f:4e:c7:21:0d:40:59:aa:9a:45:b6:db:fb:
ad:31:e0:19:b2:16:7d:5b:32:91:da:c3:4f:62:17:ea:b4:c3:
36:90:b9:57:12:bb:2f:b0:2b:ab:91:9f:cb:17:ac:6f:96:bb:
f0:bc:71:68:e5:fb:ff:50:5b:ca:35:aa:23:c4:fb:42:f1:1e:
32:de:ad:88:cf:5c:87:98:a0:2e:f6:94:17:f6:b5:06:86:8e:
d6:2f:be:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:49 2025 by rpki-client