Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/_s7rDdjPGkqITnjs4HXWtYEhylg.roa
File: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (raw, json)
Hash identifier: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=
Subject key identifier: FE:CE:EB:0D:D8:CF:1A:4A:88:4E:78:EC:E0:75:D6:B5:81:21:CA:58
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01941FFAB8A28AEDEFCBFB724C6B6A101463
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/_s7rDdjPGkqITnjs4HXWtYEhylg.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 109.95.65.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.68.0/24 maxlen: 24
109.95.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b8:a2:8a:ed:ef:cb:fb:72:4c:6b:6a:10:14:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feceeb0dd8cf1a4a884e78ece075d6b58121ca58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:1d:a3:1c:15:f9:59:5e:f1:b9:0d:4d:95:
99:1f:2b:4b:8b:f3:2c:f2:a0:f3:fe:ab:6f:c2:fc:
96:12:94:57:d7:b1:40:a2:36:3b:9c:ed:43:cd:4a:
84:01:b4:71:15:be:59:e2:0f:e4:a3:48:56:c7:14:
b8:92:7e:fd:b4:73:7b:bb:84:f9:1d:64:8f:c9:39:
4f:b7:90:46:1b:66:3b:ef:0f:c4:e4:05:96:84:81:
b5:3c:3c:76:9c:a3:49:54:6a:d9:2a:28:c6:52:4d:
24:e6:b3:2d:84:08:76:6a:17:9a:07:fc:b7:64:a7:
c9:5e:4c:09:81:aa:d9:57:5e:d2:c7:67:74:87:8c:
59:d9:ae:e3:a1:4f:a9:07:4f:de:aa:88:15:9f:d8:
40:63:ea:61:c1:f4:64:a7:27:a0:83:96:a3:96:3d:
ea:cb:a0:a3:3c:fb:e0:8b:a8:18:34:04:b7:62:c7:
f7:8d:c9:4f:d5:49:17:41:fb:ec:f5:90:ae:b0:02:
fb:7a:27:5a:24:64:43:65:fa:97:47:32:d4:4e:12:
76:a9:59:34:23:eb:56:c1:ae:ab:95:83:5d:22:ba:
e2:c3:3a:fd:d6:05:48:a5:47:7f:c2:c1:01:77:4e:
c0:ab:0b:51:26:78:b1:11:a0:23:23:e8:40:44:7b:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CE:EB:0D:D8:CF:1A:4A:88:4E:78:EC:E0:75:D6:B5:81:21:CA:58
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/_s7rDdjPGkqITnjs4HXWtYEhylg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.65.0-109.95.68.255
109.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:fd:5d:6d:d3:86:55:7b:69:5b:5e:b8:09:80:24:e8:4b:c1:
b5:49:89:de:b8:d0:6c:09:c4:1e:a8:8d:3d:7f:14:a2:62:b5:
0e:45:81:bc:40:43:03:ed:3e:68:3e:92:60:86:c7:91:0b:fe:
7e:30:52:c5:d5:29:be:7a:7c:1b:01:25:33:96:55:b0:51:fc:
49:95:7b:bc:2c:be:05:10:7a:c1:0b:6e:f9:9a:99:50:26:58:
25:83:31:2f:28:a7:fb:68:62:6c:0b:a7:21:30:e9:66:0b:d8:
df:7f:c9:be:e8:b6:c6:13:f7:f2:8e:f7:42:88:df:5b:87:cc:
28:d1:38:8b:d9:31:53:9a:32:d4:1c:71:fe:24:58:2b:48:a4:
25:33:93:8f:1d:89:94:b3:dd:18:c3:b9:a9:ea:60:0d:eb:91:
d9:a2:8c:5b:b3:44:41:65:b3:5e:a4:58:71:92:db:f5:68:f8:
30:ef:d3:3c:f7:25:99:5a:6f:9f:d6:e7:fd:15:d7:a4:e5:37:
2f:5f:af:d0:b6:40:4d:bd:e7:3e:51:c5:97:d0:24:79:f5:0d:
6b:da:e2:99:5c:be:c5:9f:1a:3c:8b:c7:00:f9:78:e9:51:69:
91:e7:aa:78:c0:9d:29:2f:dc:81:b5:90:d4:93:0c:7a:be:ea:
01:73:62:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 17:24:13 2025 by rpki-client