Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/DnIZzoqhty_tg2bYNrh_vDtOBCw.roa
File: DnIZzoqhty_tg2bYNrh_vDtOBCw.roa (raw, json)
Hash identifier: UOVHlVipqtCkCU4NWu9RPIeuEbJNMZ2hNXSGsc+R+F8=
Subject key identifier: 0E:72:19:CE:8A:A1:B7:2F:ED:83:66:D8:36:B8:7F:BC:3B:4E:04:2C
Certificate issuer: /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial: 0194258F1F9AE4AE8B38823E541B1E21AAEC
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/DnIZzoqhty_tg2bYNrh_vDtOBCw.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139242
IP address blocks: 185.212.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1f:9a:e4:ae:8b:38:82:3e:54:1b:1e:21:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e7219ce8aa1b72fed8366d836b87fbc3b4e042c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:fd:55:3d:ab:f9:10:fd:99:6b:64:d4:5d:
7a:f1:71:d3:4e:01:9e:fc:1a:22:4d:f3:26:86:11:
fd:11:c7:78:0d:55:a7:ba:c8:81:0b:84:85:0e:54:
af:dc:1d:22:2f:d5:34:35:8d:01:3f:98:e7:f4:f8:
d7:35:8e:da:1f:05:f4:96:47:d6:81:85:af:03:a8:
3b:01:7f:84:4b:83:3e:53:d8:f2:60:12:41:07:86:
6d:9c:00:07:dc:98:06:ab:9b:14:c5:99:95:22:31:
34:17:34:f3:a3:ee:df:a6:44:07:7e:c7:c5:80:8b:
3b:4a:5d:65:db:83:13:3d:92:f7:e1:84:6d:e8:df:
ef:71:e1:5d:4c:85:ed:df:e9:8b:55:0a:58:c2:7c:
b2:c8:01:a8:d5:9f:bf:12:a3:b8:94:f0:83:f2:5a:
d4:0e:52:04:3c:2c:52:7f:2e:b6:d7:93:d4:74:4a:
73:bf:88:a9:e6:1f:07:a9:80:15:20:07:48:3b:8b:
9e:4f:5d:df:9d:b5:47:7c:40:fe:c6:a2:1b:bf:57:
75:cb:ab:1d:5f:02:50:4b:27:71:fb:28:b9:f5:92:
83:dd:f8:10:42:86:9f:0d:b9:3c:ec:88:07:4f:c0:
3a:1a:4e:63:c0:52:cd:39:73:75:61:b2:b7:6f:49:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:72:19:CE:8A:A1:B7:2F:ED:83:66:D8:36:B8:7F:BC:3B:4E:04:2C
X509v3 Authority Key Identifier:
keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/DnIZzoqhty_tg2bYNrh_vDtOBCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.144.0/24
Signature Algorithm: sha256WithRSAEncryption
19:43:97:31:60:cb:8b:c5:53:8d:b4:cc:9d:85:0f:35:0c:61:
73:0d:1a:75:f0:2b:9a:c4:b7:74:71:c7:33:f8:05:87:d3:50:
77:d0:56:9c:70:5c:9f:77:28:38:35:0c:ea:b9:20:e0:ff:f5:
7d:72:83:a0:e3:90:7e:ca:a6:bc:2d:ea:38:3d:bf:8e:67:38:
9f:5a:fc:95:5c:fe:c2:ca:ef:fd:e2:39:b0:04:d3:5e:1d:04:
71:53:9f:8c:87:34:e4:f7:ce:41:c9:7b:0d:32:a0:35:a2:b6:
11:0b:76:86:77:74:14:24:55:e0:70:a2:11:e7:e4:c3:ca:b5:
f7:5d:b9:d7:95:bb:bd:7a:45:4c:9b:05:55:b9:ea:2d:22:b0:
68:52:17:fe:c1:92:6e:63:bf:54:e0:35:10:c7:13:9d:37:ca:
cc:f0:fb:9e:56:12:9b:ad:b4:3c:75:fe:2a:69:34:b8:65:b4:
aa:d8:75:df:0d:79:b7:f0:67:7c:bf:cc:58:e0:30:a2:e7:4a:
9b:fc:c8:b0:b0:d4:2a:3a:e1:8e:39:47:c4:b4:1d:ec:a2:64:
2f:e9:6b:86:73:7e:7d:b2:62:6d:56:2b:86:b7:0f:73:0f:82:
ca:41:15:8f:6f:8c:a3:14:59:fe:99:de:50:3b:e6:a3:e7:52:
f2:a8:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:08 2025 by rpki-client