Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/_wI9dgfN1p8T3ArXyq7NUMinHsQ.roa
File: _wI9dgfN1p8T3ArXyq7NUMinHsQ.roa (raw, json)
Hash identifier: zHVbZrPjByz7ecEstvck1XG+KadlzRwYPNhhpEtqQfI=
Subject key identifier: FF:02:3D:76:07:CD:D6:9F:13:DC:0A:D7:CA:AE:CD:50:C8:A7:1E:C4
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019424B3674E242604A997FB97D20BE63DE8
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/_wI9dgfN1p8T3ArXyq7NUMinHsQ.roa
Signing time: Thu 02 Jan 2025 01:48:44 +0000
ROA not before: Thu 02 Jan 2025 01:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57809
IP address blocks: 185.222.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 14:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:67:4e:24:26:04:a9:97:fb:97:d2:0b:e6:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff023d7607cdd69f13dc0ad7caaecd50c8a71ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:75:f4:cc:e1:59:5f:49:7c:3f:9c:3d:63:
d5:ac:4b:6f:e7:db:06:9a:3e:dd:fb:f3:47:8e:06:
97:85:4b:63:9d:e0:e0:38:64:d7:0f:ce:4b:2e:a9:
69:b5:08:dd:e8:4c:5f:3c:6e:79:6d:2e:7f:0e:4f:
90:17:69:2b:f1:e2:1e:96:fe:44:9a:dd:bb:3f:c5:
33:53:85:cc:33:b9:96:e1:84:76:56:2a:2e:96:73:
0d:0f:bb:48:dc:22:59:3c:f6:21:a9:06:cc:23:5c:
2e:92:be:b7:60:46:d6:c1:69:07:c1:f6:d2:3f:7c:
9d:11:bf:af:6a:ba:2d:56:02:d6:3d:7b:30:8c:13:
c6:1d:ea:3d:7e:94:9b:c3:fc:9e:cb:9d:1f:9f:3f:
ff:42:7e:df:87:ea:14:da:58:54:7b:50:6a:06:06:
33:a0:6c:3c:24:b9:89:fc:e3:8f:a1:a7:7f:00:38:
1c:c7:2e:95:8e:ec:e8:46:eb:3a:0a:b2:8e:ae:7d:
36:64:fa:56:23:2d:b5:b9:8c:4b:e9:94:b9:fb:25:
1c:42:ec:3b:a7:6a:40:93:96:c5:2f:2a:04:e4:ac:
82:b9:6d:a8:ba:78:ed:d5:14:75:38:04:43:48:3a:
97:5b:65:75:fc:7b:e5:84:48:25:dc:c6:13:43:b2:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:02:3D:76:07:CD:D6:9F:13:DC:0A:D7:CA:AE:CD:50:C8:A7:1E:C4
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/_wI9dgfN1p8T3ArXyq7NUMinHsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.144.0/22
Signature Algorithm: sha256WithRSAEncryption
45:d3:64:e8:30:26:54:81:c0:11:a3:37:4e:22:89:77:8c:af:
31:fd:49:7b:aa:31:26:be:d3:4e:51:d3:35:65:2d:7a:62:66:
d9:58:4d:16:ad:b2:1f:8e:6b:a9:62:18:c2:5f:5c:a6:5e:f5:
8f:c9:a0:ba:9e:af:86:d5:11:f7:07:b0:58:95:49:29:25:eb:
94:2c:29:52:93:2e:1b:4b:62:92:48:11:17:7f:e8:02:4a:c1:
f1:75:8a:bb:a2:e6:9a:32:e3:c1:03:be:5b:9a:3f:0c:dc:94:
9f:c7:8c:d4:da:22:e4:17:c2:4c:82:ba:c9:e2:55:31:a9:b3:
9f:4d:33:ba:03:bf:44:d2:ef:bc:36:f7:2c:2b:3c:ab:62:9b:
da:41:28:5b:e3:ff:7a:d7:c5:d1:c9:46:2f:48:dd:13:ce:3b:
ba:fd:15:81:17:cc:bc:f9:56:f9:cb:50:ac:17:a1:e4:37:dc:
31:a7:3d:a9:13:72:a5:76:4f:66:b9:ed:e2:c1:dd:54:45:b2:
c7:fa:f6:b2:f1:24:65:e3:e1:1c:4c:4e:4c:9d:68:eb:84:63:
67:73:b3:1a:e6:50:40:1b:94:cf:e1:18:2d:e8:2b:af:60:1e:
1e:b9:6a:b4:20:68:c1:7f:40:75:fa:e1:70:fa:be:64:c6:dd:
e2:bb:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:45:19 2025 by rpki-client