Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/_7nFqf5lz5tcDACtAr9RF1OczjU.roa
File: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (raw, json)
Hash identifier: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=
Subject key identifier: FF:B9:C5:A9:FE:65:CF:9B:5C:0C:00:AD:02:BF:51:17:53:9C:CE:35
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 0194258FA908DFD67719AB15E32CBB6DF5DE
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/_7nFqf5lz5tcDACtAr9RF1OczjU.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6663
IP address blocks: 5.154.239.0/24 maxlen: 24
81.24.16.0/20 maxlen: 24
85.204.32.0/22 maxlen: 24
85.204.100.0/22 maxlen: 24
89.238.192.0/18 maxlen: 24
93.113.104.0/22 maxlen: 24
93.114.100.0/22 maxlen: 24
185.63.4.0/22 maxlen: 24
2a02:2720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:08:df:d6:77:19:ab:15:e3:2c:bb:6d:f5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffb9c5a9fe65cf9b5c0c00ad02bf5117539cce35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:7d:a7:ae:60:ff:e3:aa:d2:59:e1:a2:c7:
91:3f:9e:60:d9:ce:c9:d6:7b:09:3a:6c:76:14:af:
cd:59:df:66:51:33:c0:a9:45:fd:c3:89:71:3f:37:
0b:5a:e1:6e:ea:40:96:c6:38:a2:5e:43:3f:a2:36:
1f:a1:43:62:9f:ff:b6:e7:e1:7f:36:3b:22:45:21:
7e:d5:f5:1f:92:79:a1:49:90:a4:f1:15:21:5b:94:
85:35:41:b4:65:3f:da:18:c1:9f:9e:84:78:a4:d5:
22:10:24:b7:aa:63:c7:ea:02:1c:34:b9:61:89:1f:
c2:a1:94:bb:df:7c:f4:68:18:1c:75:7a:09:d0:af:
96:fc:6d:06:c7:71:9c:f5:4a:9e:ff:4a:c7:8d:6a:
ea:88:3f:82:86:df:c6:52:0f:42:2b:c4:df:86:1b:
b4:81:a3:52:d0:3c:a0:bf:88:37:26:95:fb:66:b4:
00:41:07:18:46:5e:a2:58:55:a6:a2:31:9f:73:65:
89:70:c3:5d:0d:11:7e:53:e2:77:a7:5f:7a:08:f1:
da:d7:1b:9f:27:ff:b1:67:4d:c4:f9:b2:eb:35:34:
93:9e:c9:57:9d:e5:ae:73:e7:48:9b:fd:0a:17:5b:
6e:8a:b7:ef:0f:c0:ad:e4:57:ed:7c:24:c2:f6:b4:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:C5:A9:FE:65:CF:9B:5C:0C:00:AD:02:BF:51:17:53:9C:CE:35
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/_7nFqf5lz5tcDACtAr9RF1OczjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.239.0/24
81.24.16.0/20
85.204.32.0/22
85.204.100.0/22
89.238.192.0/18
93.113.104.0/22
93.114.100.0/22
185.63.4.0/22
IPv6:
2a02:2720::/32
Signature Algorithm: sha256WithRSAEncryption
4e:4f:3c:ed:f9:1f:cc:a8:aa:fb:a4:16:3e:a4:20:0a:98:a1:
a3:54:b6:45:e3:6e:4b:6b:2f:ab:3f:29:6b:62:58:5a:44:ba:
eb:73:1d:7a:7e:81:ca:5b:52:51:7b:f4:28:09:5f:4a:38:cf:
f2:0a:bc:7a:07:c9:41:a9:4e:b6:27:c8:c3:e2:f6:70:59:04:
7b:a7:d4:86:15:39:e6:51:99:b7:98:b6:3c:28:8f:0a:bc:a2:
d9:be:74:6f:a4:90:ca:cf:b0:e0:f7:a4:9b:df:c6:37:10:66:
f1:68:28:42:c9:6b:af:55:26:e7:88:6f:3e:07:55:c3:3b:da:
02:06:ec:43:b2:a8:51:fc:90:43:18:be:2b:4b:17:7a:4a:74:
19:f3:dc:d4:33:34:84:e0:66:60:22:a3:d8:3d:7e:dd:c3:e3:
4e:e9:c8:3f:7e:bf:f7:f4:22:9f:1e:03:47:52:e0:d4:dd:89:
9e:01:3a:fb:ed:05:aa:af:29:6b:81:a5:cd:a0:aa:24:ee:8e:
b5:11:25:72:b5:d8:6b:c6:74:ec:47:de:ad:44:2d:a6:75:8c:
df:8e:19:cf:51:45:2a:99:ea:91:8e:1b:5e:21:65:43:81:27:
8d:ec:a7:38:00:3b:da:53:ef:90:b6:7c:84:09:19:d2:87:87:
ec:50:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:28:07 2025 by rpki-client