Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/g4pC9jRBBfIWc13VlCX_B3bQyfg.roa
File: g4pC9jRBBfIWc13VlCX_B3bQyfg.roa (raw, json)
Hash identifier: Q3ov4QJul2+evCto/y81LyhWqVJqwo58eprPhIiR4Ao=
Subject key identifier: 83:8A:42:F6:34:41:05:F2:16:73:5D:D5:94:25:FF:07:76:D0:C9:F8
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0195B4E2FDE6AF4820F624845C65E9C84562
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/g4pC9jRBBfIWc13VlCX_B3bQyfg.roa
Signing time: Thu 20 Mar 2025 18:48:49 +0000
ROA not before: Thu 20 Mar 2025 18:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57013
IP address blocks: 185.113.250.0/24 maxlen: 24
185.210.138.0/24 maxlen: 24
193.42.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:e2:fd:e6:af:48:20:f6:24:84:5c:65:e9:c8:45:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Mar 20 18:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=838a42f6344105f216735dd59425ff0776d0c9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:3b:7d:92:80:d6:2a:54:3c:89:56:b6:17:
2b:c6:9e:95:45:88:d7:0e:d6:dc:09:7b:3d:dc:df:
08:df:4d:bb:55:f6:4e:25:6e:12:a7:6d:c4:08:25:
a2:ce:4f:b2:7e:2a:43:03:02:63:63:9c:a2:f0:4b:
ba:58:7e:9f:9b:e0:c1:49:ac:57:10:df:b4:36:b5:
4c:8f:f7:3c:f9:ce:20:d3:5e:fd:c9:31:c8:e9:d3:
93:f0:e3:83:5f:e1:62:59:31:8f:47:dd:8f:0f:b7:
db:65:bf:99:0f:c0:02:97:71:bf:23:87:e7:9e:33:
e6:c7:a4:9d:7b:be:cd:4f:0a:ac:af:2c:4b:84:15:
a6:ff:9f:6a:6d:34:ee:e2:1b:ed:79:30:3b:43:74:
95:dd:f3:a1:de:32:69:c5:b5:c8:8a:af:6e:b5:5a:
aa:cf:e7:87:47:13:bf:99:95:b4:95:70:e4:ed:0c:
17:48:72:e6:23:e8:25:83:87:2c:95:58:72:6f:e4:
8c:72:63:55:10:95:83:21:12:41:9e:52:ed:d9:20:
a3:0f:3f:a3:32:a0:fd:27:87:94:72:4d:3b:6b:c0:
42:5c:7a:49:24:2e:fd:ed:e8:c6:cc:34:8e:8e:e0:
dc:0f:03:9d:a0:5b:25:f0:2b:48:73:e8:5b:90:00:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:42:F6:34:41:05:F2:16:73:5D:D5:94:25:FF:07:76:D0:C9:F8
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/g4pC9jRBBfIWc13VlCX_B3bQyfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.250.0/24
185.210.138.0/24
193.42.122.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d6:ef:67:4b:bc:72:e4:31:c6:f6:a5:22:15:67:b7:16:e7:
c4:d5:ad:22:d5:11:c2:09:b7:a3:6c:67:fc:02:de:f0:a1:2f:
bc:47:1e:c5:1b:d8:bf:0f:76:57:df:4b:ac:6e:42:8a:5e:c7:
2d:00:48:17:1b:f9:82:c7:3a:44:4a:af:1c:06:97:46:fc:0d:
4e:fe:1b:77:d6:2f:ff:6b:60:84:ed:fc:39:44:cb:ed:5c:1f:
52:59:af:1b:fe:3b:26:56:41:f3:46:bc:3d:fb:cd:07:28:aa:
fe:35:50:5c:40:9d:80:b1:04:45:46:46:8b:4d:75:9d:34:36:
21:aa:45:2a:e7:8f:da:88:29:96:14:2f:96:a9:6c:ff:7b:74:
5e:d4:c5:40:07:55:dd:ad:60:4e:ca:64:a3:41:67:24:e8:ab:
17:43:e8:d5:2a:fd:1f:31:44:6b:82:1a:b3:05:31:49:84:b2:
06:02:93:2b:ca:b4:d2:b6:b9:dd:46:c7:36:26:a9:34:23:61:
07:43:73:3d:29:df:72:ba:21:85:b0:cc:36:4c:b9:13:63:92:
ed:8f:fb:0a:60:28:48:03:1b:c3:33:0c:e2:7c:10:6c:00:77:
0c:82:c8:1c:ca:85:e0:1e:3e:aa:ae:df:23:31:3e:5e:5a:da:
d4:2a:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:26:34 2025 by rpki-client