Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/fgM561fL_3Rx-_1J5CJxxdceK50.roa
File: fgM561fL_3Rx-_1J5CJxxdceK50.roa (raw, json)
Hash identifier: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=
Subject key identifier: 7E:03:39:EB:57:CB:FF:74:71:FB:FD:49:E4:22:71:C5:D7:1E:2B:9D
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 019424B3D339C93383F3FBEF89CB833DF6B4
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/fgM561fL_3Rx-_1J5CJxxdceK50.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206476
IP address blocks: 185.137.224.0/22 maxlen: 24
185.255.184.0/22 maxlen: 24
194.113.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d3:39:c9:33:83:f3:fb:ef:89:cb:83:3d:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e0339eb57cbff7471fbfd49e42271c5d71e2b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:9e:95:28:00:dc:aa:36:79:70:f7:dd:45:
be:86:e6:cd:c6:3a:76:63:b9:38:9a:fd:91:a5:c8:
9e:d9:6d:6c:d9:7e:a2:25:68:de:f5:f0:b8:92:a5:
be:23:0d:ac:a5:27:2e:95:d1:24:b8:ea:f5:ca:c5:
5a:b7:e5:54:26:2c:36:ad:f2:28:b7:95:eb:66:09:
f1:fc:fb:70:34:94:39:9f:fe:4f:32:b0:b0:1e:1f:
11:ab:f5:c0:df:2a:5c:b2:a0:7c:2f:a2:56:47:83:
47:da:46:7c:7d:0e:7e:34:f1:03:dd:52:1e:ff:b1:
59:10:7b:d8:20:ad:6a:5c:c0:47:dd:82:51:bd:ca:
97:85:7a:7f:59:9a:6a:51:7b:0e:bd:f1:08:ea:ea:
1c:82:ab:be:47:a0:53:2c:a6:12:cd:db:9b:3b:0e:
af:e9:bc:16:8a:6b:a4:cc:54:4a:6d:3a:1d:41:86:
05:f3:b2:bd:84:52:ca:f9:89:5a:23:89:bd:8a:93:
94:f8:91:1f:09:90:c3:31:86:0d:2f:6e:32:1a:2a:
89:37:73:43:cb:27:f4:06:0b:02:5a:a2:88:c3:49:
8a:f3:10:15:9f:10:b9:9e:3b:c9:9b:c5:e1:6e:30:
a1:1c:a1:b1:b7:22:16:84:4a:67:58:f0:e7:63:8a:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:03:39:EB:57:CB:FF:74:71:FB:FD:49:E4:22:71:C5:D7:1E:2B:9D
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/fgM561fL_3Rx-_1J5CJxxdceK50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.224.0/22
185.255.184.0/22
194.113.88.0/22
Signature Algorithm: sha256WithRSAEncryption
56:de:6b:c5:6d:68:23:56:68:da:37:37:4b:4e:5f:62:98:1f:
9e:78:c0:03:42:da:a7:89:20:52:72:c4:4f:28:e7:76:c0:cb:
e3:bf:a0:45:33:a6:ed:39:50:d9:67:61:e6:a2:0e:53:2d:d5:
a0:92:e3:d8:64:b7:22:fd:44:54:55:47:c9:a8:2e:88:fa:ca:
02:91:9f:40:98:6a:fa:b3:38:be:55:63:97:8b:0b:42:6d:2b:
1e:d8:12:b4:ad:75:8d:4e:27:7f:7f:b8:b2:f1:f4:54:4a:32:
93:3c:9f:a5:31:03:bb:2b:2e:53:df:ad:b0:39:48:4f:71:1a:
1f:e2:e6:13:8c:1f:48:ef:42:80:04:65:d9:ee:3e:19:26:bb:
e4:2b:4d:9f:df:72:62:25:69:99:b0:8c:16:d9:80:a1:d7:bb:
81:ac:0e:73:00:ad:1e:36:e8:2c:0b:b1:6f:18:c9:1d:16:f8:
29:43:28:ab:a4:bc:b1:7a:21:77:e6:d1:64:91:9a:a1:13:ff:
f7:d9:cf:b7:6e:dc:b3:57:62:4d:b6:78:b4:90:8f:c8:05:17:
88:74:3a:dc:8f:5c:32:ee:8d:f1:97:e0:10:ac:73:b7:81:3c:
e7:70:0e:c6:9f:a9:f5:3e:72:76:da:dc:5c:ab:08:6c:f3:d1:
56:8a:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:41 2025 by rpki-client