Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/E_FLeUrXMn21RZLWjSz7dcbOu0c.roa
File: E_FLeUrXMn21RZLWjSz7dcbOu0c.roa (raw, json)
Hash identifier: 3zR0lzXkBjSMAiMasG367wDbFboqmuRSV3A83qbYITA=
Subject key identifier: 13:F1:4B:79:4A:D7:32:7D:B5:45:92:D6:8D:2C:FB:75:C6:CE:BB:47
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019422FC14AC23B0D849B405E8B54957B931
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/E_FLeUrXMn21RZLWjSz7dcbOu0c.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205939
IP address blocks: 185.145.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:14:ac:23:b0:d8:49:b4:05:e8:b5:49:57:b9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f14b794ad7327db54592d68d2cfb75c6cebb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:b1:da:1e:20:cf:7f:09:4d:02:b7:b4:f4:
cb:b0:f5:27:a8:89:fb:d4:35:11:b2:39:0b:aa:75:
06:09:d6:13:b2:8e:b5:b3:66:59:fd:69:ef:5e:75:
4d:d5:20:a5:ea:3b:60:ad:9d:53:1c:52:c5:9f:b2:
ce:37:a3:be:c8:89:9c:1e:8e:96:8a:93:15:13:50:
f6:83:9e:33:b8:8f:fc:e9:81:c1:64:7f:01:8b:d6:
44:41:f0:91:90:f0:85:37:93:5d:15:43:5f:52:aa:
1e:fa:5d:7c:05:e8:65:f9:9b:72:93:cd:18:98:fd:
7e:63:b6:42:92:67:fa:f6:d3:13:26:50:78:56:f7:
c7:f3:1c:d3:ed:6d:39:6e:92:46:04:81:f2:1e:34:
e1:36:67:37:a6:55:9d:05:f0:ad:92:93:cb:88:37:
19:91:35:4d:3c:01:da:2b:d1:25:2f:18:d5:09:34:
6f:a4:0b:21:11:9b:3a:bc:fd:9b:43:16:47:36:92:
7b:fc:87:51:c9:0c:90:9f:db:31:eb:c1:ec:dc:97:
e2:ac:e5:28:73:eb:67:49:3c:fd:d2:49:67:eb:c7:
78:5b:ed:98:9c:42:ce:31:9a:6f:61:de:18:0f:87:
27:18:6d:e4:8c:18:55:7c:25:e8:ea:6b:52:c8:e6:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F1:4B:79:4A:D7:32:7D:B5:45:92:D6:8D:2C:FB:75:C6:CE:BB:47
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/E_FLeUrXMn21RZLWjSz7dcbOu0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.77.0/24
Signature Algorithm: sha256WithRSAEncryption
49:60:53:f6:9f:bb:52:39:d6:7f:f6:d4:5d:92:2d:f4:cd:cc:
0d:3a:b0:bd:e6:bd:93:ad:d2:41:05:32:b3:6c:42:c5:03:84:
32:e7:c9:70:4b:87:5f:4e:8c:3f:7f:bf:ac:83:72:b2:4f:d6:
1a:d4:93:15:7a:83:e3:45:42:83:2d:fc:82:e0:6f:3b:44:75:
20:bf:c9:2c:bc:18:06:68:b0:e4:96:5b:fb:de:de:d9:2c:9e:
fc:a1:3d:03:fe:89:c1:55:a2:c4:ac:84:3d:06:0d:fb:2d:85:
9b:69:d5:70:82:12:76:49:52:48:62:b3:88:fd:b1:99:e2:08:
d5:08:c1:92:d2:3e:6d:f3:ef:7f:59:e3:86:c9:a8:80:57:8f:
d5:0e:b9:03:87:67:07:44:33:fe:33:ea:55:23:3e:d9:b0:60:
b1:b8:3a:55:12:c5:f6:31:cc:4c:f9:e6:ea:cf:55:a7:d3:97:
5e:83:33:ad:29:8e:a7:c2:b9:29:b4:8e:9a:4e:ab:b2:53:99:
b0:c6:c3:12:ce:9b:bf:db:f6:05:26:7b:20:5d:83:f3:bd:db:
34:43:9a:12:27:1b:30:ad:72:45:01:4a:07:3a:2e:58:76:aa:
63:fc:fd:64:be:63:60:31:3a:88:21:4d:e0:a0:d8:9c:96:8f:
5a:ad:7d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:29 2025 by rpki-client