Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa
File: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (raw, json)
Hash identifier: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=
Subject key identifier: 16:A0:EB:7D:B0:ED:23:81:EC:E7:C7:CC:82:35:2F:F3:50:AE:FF:B8
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 0194B71C84D61FF91197BD8C11C3B2829D11
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa
Signing time: Thu 30 Jan 2025 12:08:06 +0000
ROA not before: Thu 30 Jan 2025 12:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204607
IP address blocks: 85.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:1c:84:d6:1f:f9:11:97:bd:8c:11:c3:b2:82:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Jan 30 12:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16a0eb7db0ed2381ece7c7cc82352ff350aeffb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:73:dc:04:ec:bf:d0:c0:44:69:df:52:7b:
1e:af:5f:d4:da:08:dd:7b:26:2c:f9:5a:db:4a:1a:
a4:d8:53:83:56:e0:0e:63:a7:a5:20:47:a1:8f:70:
7f:c6:97:16:d2:7d:89:1f:bd:25:b0:d8:c4:d2:9f:
24:bb:6e:e2:7d:a5:1c:d0:20:e2:01:0b:c9:80:dc:
ef:e4:4b:f8:ab:97:66:eb:45:a6:6f:62:f4:60:42:
f9:93:ee:3b:89:32:22:11:e2:6b:d1:c2:6b:f0:53:
c6:4e:ea:22:1f:c4:05:6b:d9:f0:ba:33:86:4c:6a:
1c:42:4d:35:52:07:38:6f:e2:13:c9:3e:49:fa:28:
1d:e2:4c:19:9a:5b:5b:f3:cc:50:b2:7a:aa:4e:06:
f3:b7:95:b3:fc:76:ef:84:94:8b:43:97:2d:b7:b0:
41:5e:e8:69:0e:c7:01:b4:b5:e5:5d:a4:ba:cb:1d:
25:80:4a:7b:16:d4:fd:32:d0:6b:10:99:39:89:b5:
e3:cb:29:4b:e1:04:6c:fb:5c:d8:eb:8b:9b:8f:06:
46:a0:21:23:99:01:24:65:3f:76:03:35:2c:a6:5a:
28:62:3c:da:2c:3e:0d:f3:b3:30:fa:df:b3:63:e5:
79:6e:dd:53:16:8c:b6:d1:65:a6:c0:ab:36:06:0a:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:EB:7D:B0:ED:23:81:EC:E7:C7:CC:82:35:2F:F3:50:AE:FF:B8
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b5:3d:08:0c:96:7a:5f:f6:ca:47:11:1b:9e:03:c4:4b:ab:
3b:2d:71:7f:19:c5:60:a1:7a:01:17:5d:c8:e4:30:79:4f:74:
5c:b7:73:85:fc:29:84:1b:37:22:5d:99:62:cc:3c:c3:81:0b:
26:13:75:18:94:eb:fe:93:6e:d6:db:94:e6:f8:c7:10:24:4e:
f2:9e:dd:92:6f:e5:32:ed:e1:32:f7:27:64:b3:49:de:f5:c0:
7d:dc:c0:9f:30:d6:e6:1e:c4:59:6b:58:da:38:a4:6c:b6:a5:
1a:77:f3:e1:aa:d1:70:ac:e0:e0:85:cf:f1:dd:6c:54:23:28:
d8:e6:d5:41:eb:7c:03:74:21:bb:40:3f:04:c3:af:67:1d:a1:
87:e8:46:71:d2:66:e2:23:37:00:04:61:85:f2:42:13:aa:e2:
b2:76:2f:f9:df:86:a7:3a:85:68:33:72:a8:fe:5a:c5:6d:eb:
47:3b:4a:16:4f:5c:4d:d8:a8:c1:d2:a3:6c:c4:75:8d:d7:f0:
cf:08:b1:30:a2:0a:41:7e:00:1c:d9:e5:a2:ef:63:92:3c:5f:
af:17:b6:a8:00:cf:fa:c9:d0:48:47:b5:da:f0:e8:93:45:2a:
aa:d0:16:6b:9e:a3:0c:65:9f:84:3f:b5:d3:2a:3a:ca:fa:5b:
d9:2b:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:27 2025 by rpki-client