Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/f3ZAgsX9I3hAxsDfGccuc4frEIc.roa
File: f3ZAgsX9I3hAxsDfGccuc4frEIc.roa (raw, json)
Hash identifier: 4M3tVBuY11wpuTelZy7jmaALqx1HzWsWmiuVNlUHSTM=
Subject key identifier: 7F:76:40:82:C5:FD:23:78:40:C6:C0:DF:19:C7:2E:73:87:EB:10:87
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019420D5B06D0D88A372803FEBE092D1A1A1
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/f3ZAgsX9I3hAxsDfGccuc4frEIc.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205609
IP address blocks: 185.133.252.0/22 maxlen: 22
185.133.252.0/23 maxlen: 23
185.133.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b0:6d:0d:88:a3:72:80:3f:eb:e0:92:d1:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f764082c5fd237840c6c0df19c72e7387eb1087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:59:ab:30:7e:1f:3c:9e:c1:76:ca:87:4f:
59:3c:58:20:7e:84:50:68:b5:93:68:40:a8:d6:a0:
1f:ef:83:1d:15:fb:26:96:a3:9f:d4:83:90:0a:cd:
ac:d2:95:2c:79:fd:0d:58:2d:11:5b:a9:9b:e4:39:
79:1f:5b:1e:ef:04:01:b6:cb:32:b7:fd:2e:4e:fa:
3a:18:f5:3b:3d:0e:e7:67:28:58:f1:cf:5b:fa:2f:
6a:49:05:77:b6:1a:e1:7f:95:69:75:75:2d:61:d2:
99:88:3d:f5:32:46:09:35:a0:7d:73:eb:db:ac:1d:
d5:c0:90:f3:44:ed:6e:bd:74:88:93:2d:95:8a:d6:
2a:13:69:8e:07:15:3e:cf:74:73:3d:c1:53:61:08:
e0:57:8e:ff:7a:ab:69:f7:cf:e9:01:fe:41:33:c7:
f7:0c:98:f1:cb:91:d0:a4:99:f5:93:7e:3e:40:4e:
8c:dc:85:a7:83:81:40:f8:d4:95:05:c2:0c:ba:e0:
d8:26:14:f7:db:8b:78:08:f1:15:b9:d1:8c:a6:e3:
c0:9e:7f:64:ca:83:c0:75:ca:49:23:d8:0b:ce:d9:
99:68:4a:79:f4:40:76:d1:30:60:1a:e5:e7:5e:b1:
b3:4c:b2:da:a7:a3:dc:c0:5e:58:14:65:79:db:c1:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:40:82:C5:FD:23:78:40:C6:C0:DF:19:C7:2E:73:87:EB:10:87
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/f3ZAgsX9I3hAxsDfGccuc4frEIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:e4:28:48:62:4b:a1:8a:ce:b6:48:ca:49:6c:d4:02:f6:7b:
c7:db:99:4f:9c:54:58:fa:34:4f:c6:06:a1:42:b0:dc:08:79:
85:ac:b7:c5:fb:e6:f3:07:7e:7d:08:4e:5e:f0:9a:ec:6c:90:
7e:d7:04:19:11:81:02:0b:66:6f:bf:42:7b:a3:42:51:5a:e6:
97:6b:f0:c3:90:13:45:40:23:ca:47:aa:4a:09:6c:ea:7e:50:
98:15:42:19:6f:94:6b:cb:e0:10:00:de:3b:56:a8:f5:f1:f8:
41:41:f7:d2:e5:c1:22:1d:33:aa:0a:cf:79:b7:93:ad:22:26:
ae:ac:49:6b:11:8c:28:53:67:98:8f:25:e7:1b:22:e9:a7:5f:
3b:43:4b:09:a5:5f:1a:d0:2e:e2:4b:37:42:b8:f4:fb:ee:6a:
82:ab:93:af:d6:ad:0f:62:c0:c9:c9:3c:c2:21:88:14:f7:ff:
b0:7c:28:65:f7:52:ad:31:91:8a:ea:5a:7e:75:8f:e7:25:99:
a5:a1:40:68:c0:93:04:8f:78:20:05:34:e0:6a:5f:a3:47:fc:
58:06:69:93:a3:77:84:c3:bd:ea:99:82:d1:0b:6f:d8:3e:81:
c8:1c:6a:04:2c:75:a7:e0:49:e4:45:90:b3:0c:4e:a5:14:4a:
db:db:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:17:39 2025 by rpki-client