Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa
File: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (raw, json)
Hash identifier: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=
Subject key identifier: 77:B0:24:EE:E3:5C:EB:38:D9:BA:20:40:4C:67:FE:50:23:F7:C7:C2
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 0194258FC0D97D3E6409DCC71F206B819FCA
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29605
IP address blocks: 185.207.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c0:d9:7d:3e:64:09:dc:c7:1f:20:6b:81:9f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77b024eee35ceb38d9ba20404c67fe5023f7c7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:1f:9c:d6:c3:96:8d:ac:1e:8f:e7:dc:56:
32:5d:37:eb:6b:37:c9:0b:9a:da:9c:67:b2:06:73:
64:cd:84:72:89:3b:09:ce:be:0f:e0:d0:0d:0b:2b:
14:5f:73:4d:77:eb:68:b7:6e:25:8b:6a:a8:a3:1b:
4e:47:e3:fe:41:e2:a6:ce:2d:d4:06:36:c7:3c:b9:
ba:0e:41:01:a5:cb:f3:da:5d:a3:8c:ca:f8:66:55:
4e:3d:53:9c:ee:bd:e7:27:c4:36:13:50:0a:67:e9:
fb:e2:3a:95:a2:8f:92:7d:8a:31:df:6a:2d:b2:8b:
aa:e7:f2:a8:48:86:ad:2f:b9:19:3f:cd:a1:a5:bc:
f5:ba:67:b9:d7:0c:ad:a0:1a:d3:29:09:ed:00:f6:
3b:25:b6:c5:ad:04:b0:08:a5:74:07:b9:7b:53:ad:
f1:52:b6:fc:ed:0f:e4:35:ad:ce:c8:15:c2:82:8f:
1f:d1:15:2c:7a:04:57:a8:e9:31:58:d6:16:2a:da:
44:36:d3:a3:ec:7b:36:bd:d6:b4:58:a0:b1:6e:b4:
6e:bf:a9:3c:4a:ec:c8:c6:d6:00:80:5b:c3:50:2f:
30:01:fe:5a:59:33:9b:73:df:9f:06:1c:b8:a6:96:
00:a9:57:88:d9:a3:1a:22:30:03:52:18:bc:83:7e:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B0:24:EE:E3:5C:EB:38:D9:BA:20:40:4C:67:FE:50:23:F7:C7:C2
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:9e:d8:ae:4b:0c:78:be:34:0d:8b:a4:a0:8a:6d:7e:95:83:
7f:fb:4f:e9:cf:8a:69:65:6e:dc:27:7b:55:9a:e5:26:cd:93:
dc:22:26:b3:96:7f:db:bc:5f:59:01:1e:58:74:c3:bf:ff:23:
db:4e:d5:98:36:8b:eb:7a:b4:03:3f:6f:c7:53:82:30:d4:e7:
a4:80:46:75:0c:e0:8e:de:30:67:36:77:5d:0e:9a:77:e9:65:
e1:be:f1:b1:82:53:ba:b5:ab:f2:1c:7c:3d:d7:84:51:32:87:
56:33:30:c4:11:e0:88:a4:70:09:c2:5b:ad:36:e2:62:bd:bc:
6b:ea:24:26:83:0b:0c:6d:b8:3e:07:c8:09:29:c5:10:6a:b9:
ad:39:1f:2a:e7:7c:51:52:e2:10:a7:5d:33:ec:f1:0b:c2:86:
e7:b5:16:65:b4:04:c6:5f:71:12:b9:15:a2:cb:f5:05:90:d4:
21:1f:22:47:ad:0f:ba:f4:47:53:ff:5f:82:10:a2:3e:6d:b9:
07:99:1a:d0:80:06:87:c6:1c:06:9b:da:68:27:b1:e1:32:0e:
3b:83:c1:3f:78:44:bb:cf:91:24:94:db:a0:64:87:e2:e3:bc:
0b:3f:d0:d4:74:a1:73:c2:f4:27:1e:b4:8a:bd:e4:d8:49:5d:
5a:49:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:04 2025 by rpki-client