Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/H_cpBCvCutvAscvnVH0nAJ9bf8E.roa
File: H_cpBCvCutvAscvnVH0nAJ9bf8E.roa (raw, json)
Hash identifier: VsvUJKz6XTa2F/RmbCVnN0kjZP20tMHemCYqI67BJ4Q=
Subject key identifier: 1F:F7:29:04:2B:C2:BA:DB:C0:B1:CB:E7:54:7D:27:00:9F:5B:7F:C1
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 019424B2AF4D64C2C9CF96C49EAD4FDFA85B
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/H_cpBCvCutvAscvnVH0nAJ9bf8E.roa
Signing time: Thu 02 Jan 2025 01:47:57 +0000
ROA not before: Thu 02 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25398
IP address blocks: 185.150.180.0/22 maxlen: 22
185.150.180.0/23 maxlen: 23
185.150.182.0/23 maxlen: 23
193.108.44.0/23 maxlen: 23
193.108.44.0/24 maxlen: 24
193.108.45.0/24 maxlen: 24
2a0d:7ec0::/31 maxlen: 31
2a0d:7ec0::/32 maxlen: 32
2a0d:7ec1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:af:4d:64:c2:c9:cf:96:c4:9e:ad:4f:df:a8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Jan 2 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ff729042bc2badbc0b1cbe7547d27009f5b7fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:1d:95:ec:44:05:c4:8b:28:34:d4:a3:ae:
6d:9b:ef:ca:48:6b:e5:cf:00:a3:74:4f:48:22:09:
06:54:f3:c7:f1:07:c3:5a:4d:25:ab:32:1d:4b:07:
54:d6:d8:c5:a1:8f:2c:0a:86:ee:f7:13:fa:34:3d:
85:a8:d5:4d:86:a9:37:43:e5:d5:e3:84:87:e1:c4:
42:7d:e7:ff:ad:96:1e:78:21:a8:de:69:39:2c:d4:
56:26:f1:e5:d2:71:2d:ea:d7:6b:1b:14:53:dd:df:
86:22:26:95:b9:e7:ee:b9:2e:b5:ee:8f:d8:ba:32:
f2:24:e2:ee:3e:62:21:c8:43:0a:1f:ad:1c:5d:7b:
7c:e9:78:26:01:3a:88:ee:2b:e9:a1:66:b3:42:40:
17:d2:9d:55:b5:95:c4:1e:16:6f:71:74:cd:89:ba:
d7:5b:80:0c:44:fd:39:a9:cb:a9:b6:62:c9:87:22:
bb:c8:04:4f:6d:08:87:1a:b1:20:ef:37:c1:d7:3b:
aa:2e:52:c3:47:15:dd:87:b3:4e:56:ca:aa:90:54:
83:f0:13:62:18:23:27:a9:66:28:47:13:0d:83:24:
8b:99:4d:77:aa:7a:6f:c2:10:74:58:35:3e:49:7e:
03:f6:e1:38:f9:91:3a:35:cb:06:9e:26:50:de:88:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:29:04:2B:C2:BA:DB:C0:B1:CB:E7:54:7D:27:00:9F:5B:7F:C1
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/H_cpBCvCutvAscvnVH0nAJ9bf8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.180.0/22
193.108.44.0/23
IPv6:
2a0d:7ec0::/31
Signature Algorithm: sha256WithRSAEncryption
61:7d:fa:28:30:13:b3:cd:ba:a3:d0:80:ff:40:b3:4c:df:88:
e5:03:f7:17:4f:2e:ad:4f:bf:c4:e0:43:d3:14:af:99:03:5d:
61:5e:02:c1:73:6e:97:c4:40:9b:50:0d:dd:80:b7:ea:0d:20:
a5:1d:8a:07:e4:99:df:93:91:ac:af:34:cc:95:ef:e4:5b:f0:
2d:f1:20:a1:e6:c2:8f:b8:a7:b8:da:1a:b5:5f:92:20:1d:55:
62:ba:bd:49:56:0c:4e:39:90:32:17:66:b4:d7:a6:2e:8f:46:
03:8d:f7:a2:35:d4:2e:60:f3:d2:43:b5:24:1d:6e:38:fc:4e:
f6:7e:98:e5:12:94:7b:10:d3:46:52:c3:9d:11:00:37:fb:6a:
f3:cc:b6:63:7c:68:fc:a6:c4:36:c4:e7:1f:9e:9b:45:23:a0:
97:14:08:63:44:8f:d5:38:da:ff:c6:a1:ab:8e:1d:41:0b:e0:
2a:e7:92:6b:7b:e2:6f:25:6f:8d:41:40:80:ba:a9:fb:00:36:
c0:a4:4d:c8:c9:13:33:5b:71:d9:dc:84:d1:5d:2c:27:cb:1c:
87:8c:03:94:37:be:05:6d:2c:78:19:36:41:8f:31:76:fe:57:
1e:ea:0f:8e:93:8e:9e:a8:a5:9d:78:f8:a2:01:e8:69:4e:99:
21:bb:2f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:47 2025 by rpki-client