Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/R7hZWRZrAnJei2iE6wt7eIe4FZk.roa
File: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (raw, json)
Hash identifier: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=
Subject key identifier: 47:B8:59:59:16:6B:02:72:5E:8B:68:84:EB:0B:7B:78:87:B8:15:99
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 0195AD9DBA3D33578AFB5C085BF7785BFEED
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/R7hZWRZrAnJei2iE6wt7eIe4FZk.roa
Signing time: Wed 19 Mar 2025 08:55:49 +0000
ROA not before: Wed 19 Mar 2025 08:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8737
IP address blocks: 194.120.224.0/23 maxlen: 23
194.120.226.0/23 maxlen: 23
194.120.228.0/23 maxlen: 23
194.120.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:9d:ba:3d:33:57:8a:fb:5c:08:5b:f7:78:5b:fe:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Mar 19 08:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47b85959166b02725e8b6884eb0b7b7887b81599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:91:d6:e9:43:27:14:b6:a8:67:19:ea:9d:
29:2c:28:ce:f9:76:d5:e5:db:d3:8a:fd:84:ba:66:
67:8b:c6:ff:73:0d:72:b5:9b:c8:ce:12:a0:de:26:
dd:b5:b7:0c:a2:c1:25:b6:9d:ef:12:9e:b2:54:6f:
db:43:2f:8b:26:79:a9:38:ca:a8:6d:c8:06:7f:cd:
5c:56:1d:79:e5:96:2e:34:29:bd:6b:b7:59:76:09:
29:b4:4e:00:9d:17:22:b8:b5:5c:02:d9:d2:0a:75:
20:e8:10:a0:72:09:22:7f:d4:3e:a6:c5:f5:80:06:
d5:67:a7:22:45:b5:68:7a:06:a6:63:0c:45:8d:43:
67:86:23:3b:60:67:2e:a4:0e:bb:af:ae:7e:d5:62:
2f:87:eb:c2:07:a7:54:99:f3:27:59:ce:ef:b4:c6:
b7:6b:09:e8:7d:7c:ad:17:35:75:9f:ee:c7:99:ec:
a3:52:1f:e3:16:e4:17:54:12:6c:54:ad:56:f3:26:
bc:b7:cf:5c:37:c4:6b:fa:20:51:20:06:70:b7:20:
3e:4f:85:74:37:50:37:63:d3:b7:6f:17:ea:7c:a4:
11:d8:a4:21:c8:67:a2:42:4f:ac:ad:50:8a:58:78:
cb:85:6e:32:ac:e8:b5:9a:69:e2:45:f2:88:e2:a3:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:59:59:16:6B:02:72:5E:8B:68:84:EB:0B:7B:78:87:B8:15:99
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/R7hZWRZrAnJei2iE6wt7eIe4FZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.224.0-194.120.229.255
194.120.250.0/23
Signature Algorithm: sha256WithRSAEncryption
14:66:f0:ed:cb:80:b7:cc:df:32:df:9b:e2:20:9c:2b:ed:39:
54:36:4b:15:10:ea:96:b7:3c:2e:ad:28:57:f6:ea:49:8a:3c:
fb:dd:dd:0e:35:c4:fa:12:04:09:33:6f:52:f3:dd:a4:0d:42:
e5:0d:73:91:ce:92:1d:38:b8:7e:fa:9c:7d:ac:ab:43:d8:2a:
47:ae:cb:62:a7:a2:97:18:6b:10:59:39:3a:73:a2:68:56:d6:
92:72:8c:af:cc:45:7f:24:28:a9:63:b9:ce:7b:a5:41:7d:30:
d5:f0:dd:87:08:c4:3c:14:64:93:fe:71:97:72:58:8c:f5:bc:
45:81:15:21:2e:eb:ea:0c:05:d0:23:64:89:ff:5c:b9:11:81:
cc:ee:6b:4a:3a:65:4c:2b:22:82:e4:4e:6e:e0:2c:b4:8c:56:
5e:ad:17:6b:06:b2:7e:71:a7:c9:12:9d:b2:d9:d7:ed:ab:b8:
62:38:28:9b:ba:38:9e:e3:56:35:6e:d5:c0:aa:10:4d:1d:06:
08:fa:67:85:5c:21:1b:50:d7:e4:fe:f6:8b:83:e2:57:39:11:
20:0e:58:72:b8:30:ba:3c:8a:f1:23:62:87:0e:4c:4a:28:83:
28:65:07:89:54:9b:bd:e6:39:b1:30:fe:3c:e6:ed:e2:8c:67:
bb:7d:f7:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:30 2025 by rpki-client