Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa
File: p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa (raw, json)
Hash identifier: VxeYJO6+oO8JTtkcjhdpm2dOlDG12rU/cm/baKhjYqs=
Subject key identifier: A7:B0:AB:61:13:EA:8D:FA:A0:E7:E4:A9:38:E5:A0:65:87:07:EE:98
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 019427B51FD347E9276229BCDB2EB7082996
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa
Signing time: Thu 02 Jan 2025 15:49:29 +0000
ROA not before: Thu 02 Jan 2025 15:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202354
IP address blocks: 185.239.178.0/24 maxlen: 24
185.239.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:1f:d3:47:e9:27:62:29:bc:db:2e:b7:08:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 2 15:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7b0ab6113ea8dfaa0e7e4a938e5a0658707ee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:c4:a7:fd:15:be:05:98:7d:19:ef:d8:a4:
15:02:dc:2c:a3:75:49:5d:33:7c:d1:9a:cb:e7:0f:
4a:7c:1d:3f:05:d8:ba:65:b0:07:de:47:53:31:f7:
0f:76:69:fb:15:ff:2e:1b:63:df:fe:2b:60:75:dc:
88:e6:f0:fb:55:28:0e:00:97:ab:39:31:04:6a:3d:
23:fa:9b:b9:9e:ac:66:ba:61:03:04:cd:d9:c7:e3:
b4:fb:fa:5e:60:3c:53:98:95:72:93:5a:ee:9e:99:
84:c5:81:39:a6:23:5a:b1:c3:5f:1a:55:45:09:9e:
2c:38:f6:ca:f9:eb:34:a6:74:d9:12:95:71:24:53:
85:f2:cf:ba:f8:7f:00:6d:39:63:b3:3e:59:81:ba:
2b:c0:f6:c7:91:f3:ac:b9:ad:f8:8e:1f:6e:d6:56:
ea:46:b2:0d:2f:48:1b:8b:3f:1e:38:71:26:86:7a:
cb:5f:5f:3c:e0:a9:ed:94:18:b6:ef:db:1e:cd:ab:
c6:06:d0:aa:d2:44:9b:80:9c:dc:7c:2d:00:12:ab:
0f:0c:47:5a:e8:b4:82:33:4c:fe:7e:9e:c3:14:fd:
02:4e:3b:a5:ec:69:55:be:a3:42:e4:d6:1a:32:f9:
c2:bd:b9:72:6f:25:5c:5f:4c:d0:ea:19:2c:ef:ff:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:AB:61:13:EA:8D:FA:A0:E7:E4:A9:38:E5:A0:65:87:07:EE:98
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.178.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:e9:33:71:c6:84:dd:31:97:c0:e9:f9:59:3f:1f:09:5b:8d:
aa:23:96:20:f7:ea:9d:2d:36:04:a0:41:7c:16:14:74:44:69:
4b:b0:d7:9b:f5:cd:c4:35:1b:e3:d7:cc:ae:07:a3:58:54:9e:
20:1d:15:42:d5:e8:e0:d0:92:79:24:bd:09:6d:5a:89:d7:9d:
40:a0:d4:44:bb:89:43:0a:ee:2c:7f:fd:f4:fe:99:d5:f2:80:
3d:8c:07:94:85:4b:3c:84:44:dd:dc:e2:a4:d0:e0:d0:ef:3b:
55:a1:ab:1d:a9:09:9e:a9:5f:3a:94:95:8a:ee:03:41:f0:dc:
6b:68:9b:0e:ae:09:b5:d0:ed:52:2b:b7:96:f4:a4:81:86:1e:
e5:40:55:24:dd:ed:ba:b3:69:a1:22:17:53:60:54:69:4d:e5:
11:25:28:80:26:1b:45:2b:a3:2a:65:ec:0b:22:1e:53:6d:85:
57:14:96:2f:d8:eb:c1:dc:79:3f:5a:a7:7e:f4:01:bb:50:27:
50:7a:21:4a:0e:3d:78:4b:7e:ed:90:b5:e5:5a:8b:3e:bd:cd:
0f:df:48:ea:d5:31:54:20:44:b7:ef:91:b5:40:7d:69:53:07:
67:44:1e:61:18:40:6a:4f:40:1d:42:f4:63:31:75:1d:6c:84:
53:19:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:15:42 2025 by rpki-client