Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa
File: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (raw, json)
Hash identifier: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=
Subject key identifier: B4:12:EC:7E:E1:8A:2D:BA:8C:38:5B:89:B1:8F:44:3A:39:56:92:B2
Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Certificate serial: 0194258F801D73EF2BA110C7DAD72B023277
Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20495
IP address blocks: 185.37.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:80:1d:73:ef:2b:a1:10:c7:da:d7:2b:02:32:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b412ec7ee18a2dba8c385b89b18f443a395692b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:a1:a7:31:19:01:8d:43:b6:fc:7c:63:2e:
35:00:cd:e7:ca:54:c6:74:b4:34:f9:7d:1e:06:ba:
8e:7e:ad:8d:55:7a:b5:df:5d:8c:e0:51:de:5e:29:
26:d2:7d:0d:02:62:31:19:91:53:36:78:51:b0:2a:
0d:44:96:17:f8:ae:82:17:cb:60:1c:69:b7:14:1e:
f8:cb:f7:f4:d7:4c:70:4e:56:e5:05:f3:ac:07:25:
04:54:27:22:07:48:22:c1:4f:3b:15:f4:97:4d:f9:
ce:41:42:ab:42:22:cb:ea:b6:05:f3:db:d1:10:fc:
c5:35:08:d9:28:34:5c:d8:6b:9d:ff:1a:c0:f2:52:
f4:02:fc:e5:fb:da:d0:37:af:00:bb:bd:13:9e:4b:
bb:14:8e:ed:96:8f:b1:97:bc:6a:1e:53:58:e5:7d:
75:0d:b4:35:26:83:a7:1c:0c:e5:6c:30:a4:e6:7e:
76:06:ee:c1:fa:d0:0f:a5:a4:ca:52:89:86:f1:cf:
7f:1d:dc:06:70:e5:a6:14:50:b7:eb:4f:3d:fd:c6:
df:49:98:64:9e:ff:86:51:f6:4b:cd:dd:c3:24:50:
62:23:68:2b:25:88:a1:f9:f0:cb:87:a1:0e:3b:41:
6f:ea:c7:d7:f8:30:74:eb:d8:2e:52:05:12:ba:f6:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:12:EC:7E:E1:8A:2D:BA:8C:38:5B:89:B1:8F:44:3A:39:56:92:B2
X509v3 Authority Key Identifier:
keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f5:b1:05:e2:97:ed:8c:84:47:11:1f:d8:c9:58:0a:c0:82:
32:f6:23:da:ae:5c:8b:14:00:3d:51:71:ae:ad:4d:5d:bb:43:
55:a0:2e:43:cd:5e:8a:a1:5a:71:aa:e9:eb:9f:17:ec:e2:d8:
43:93:22:92:57:90:40:af:0b:43:75:df:2f:be:ac:44:38:2c:
74:43:95:b4:61:88:f4:d1:93:96:7a:8b:3c:2d:e9:56:f5:2d:
9f:d5:8b:8e:07:65:af:26:ac:ef:32:35:8a:a7:cf:5c:ee:f1:
46:41:e2:56:bf:da:84:19:9b:c0:88:c5:93:b4:56:84:9f:9f:
5e:7a:84:1d:c2:ab:5c:40:0c:28:80:24:d1:1e:1b:be:05:63:
fa:39:dc:ac:a6:e6:9f:d2:0d:73:d8:47:a3:77:12:5b:70:0d:
ad:88:fd:61:19:00:90:2c:ad:ae:fc:f2:ad:88:20:dd:65:17:
23:4e:43:0a:55:08:a8:5a:b3:13:f0:88:6b:e3:fa:dc:d2:8f:
18:e4:95:d3:b7:2e:f1:15:02:af:b9:d2:05:f8:6d:52:f1:0b:
12:f5:d0:1c:da:ed:ac:c6:a6:3b:30:eb:f5:c4:6b:9d:35:61:
91:02:e8:b4:59:ec:e3:3d:36:1b:58:fa:77:ac:15:74:97:7b:
7d:d8:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:18 2025 by rpki-client