Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/J7ccboXG_UdW-dO_P9yIGyLOtpI.roa
File: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (raw, json)
Hash identifier: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=
Subject key identifier: 27:B7:1C:6E:85:C6:FD:47:56:F9:D3:BF:3F:DC:88:1B:22:CE:B6:92
Certificate issuer: /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial: 0195B369CB6A2108C71FBD93C464CE6BB68D
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/J7ccboXG_UdW-dO_P9yIGyLOtpI.roa
Signing time: Thu 20 Mar 2025 11:56:49 +0000
ROA not before: Thu 20 Mar 2025 11:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216399
IP address blocks: 178.210.224.0/22 maxlen: 22
178.210.224.0/24 maxlen: 24
178.210.225.0/24 maxlen: 24
178.210.226.0/24 maxlen: 24
178.210.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:69:cb:6a:21:08:c7:1f:bd:93:c4:64:ce:6b:b6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Validity
Not Before: Mar 20 11:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b71c6e85c6fd4756f9d3bf3fdc881b22ceb692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:dd:d7:49:42:7f:67:a9:8c:a6:2e:5b:2c:
1c:71:b3:ae:5b:58:90:34:88:28:26:83:86:d6:67:
1f:bb:72:2e:1e:15:1f:96:c3:6d:69:7c:db:08:e6:
de:08:59:df:9b:18:61:dd:bb:63:9c:cb:09:7c:11:
69:bb:00:e2:bd:91:d3:73:89:0b:bb:74:9c:3b:e3:
f3:85:a8:ca:e3:56:6c:b8:88:8d:87:c4:aa:2a:b6:
38:a3:67:05:f3:3c:bf:bd:34:30:86:10:9c:20:6a:
66:8c:88:3f:31:20:11:ee:9e:c5:8f:15:17:a3:aa:
6b:4e:ea:d9:50:4f:0e:db:68:dc:80:f1:fd:bb:75:
bf:e2:64:88:fd:33:a1:1c:d2:7d:7a:55:b1:8d:37:
5f:de:f9:70:32:d0:c9:43:98:3b:85:d9:68:75:d3:
f9:30:c8:6b:66:01:72:47:ce:9b:35:d6:15:0b:85:
d6:f4:06:59:ba:06:e4:10:a8:b9:e4:98:4e:c4:34:
35:40:a4:b2:c4:14:62:90:44:5e:38:4a:de:55:fa:
56:15:a0:89:50:a9:76:1f:f5:c2:c8:f6:46:1e:79:
52:24:01:89:15:fe:a5:34:61:2a:75:dd:eb:c6:00:
a4:de:53:51:32:47:18:25:d9:eb:72:34:34:ab:57:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B7:1C:6E:85:C6:FD:47:56:F9:D3:BF:3F:DC:88:1B:22:CE:B6:92
X509v3 Authority Key Identifier:
keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/J7ccboXG_UdW-dO_P9yIGyLOtpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.224.0/22
Signature Algorithm: sha256WithRSAEncryption
65:9e:c5:3e:59:24:22:63:3a:05:88:95:48:f0:a5:30:80:72:
8a:07:5a:31:d4:c8:22:b0:8f:ce:b9:71:9d:7b:93:49:be:0a:
51:cb:b4:93:a5:20:ba:04:f3:9f:db:e7:e2:ce:94:92:db:4e:
08:8b:a5:d0:d3:85:d1:ee:2d:1f:58:1a:3e:9e:bc:6e:81:8a:
95:27:e4:f1:65:d5:f4:c0:73:42:1e:b5:cc:a7:75:32:b1:4d:
07:79:d0:16:ac:c2:d5:43:fb:f9:5a:74:4a:ec:89:af:1d:2a:
a1:d1:c9:1a:e3:d1:0b:b9:c2:5c:61:97:87:63:e9:99:f7:5f:
10:7b:40:f1:51:3d:21:e9:20:10:f0:0d:64:b4:f0:92:88:07:
c2:85:6a:eb:7b:a0:40:f2:f0:a4:69:6a:16:aa:fc:8d:9e:f5:
b3:29:fe:9a:81:d0:60:49:8f:a3:fc:58:d2:d0:27:b2:43:a9:
c8:14:66:7e:74:d6:48:7c:7b:0f:d2:5d:f1:d8:7c:d4:20:79:
51:28:17:26:52:98:a4:91:7c:d4:d5:40:d9:3b:dd:78:c9:2a:
36:26:3b:6a:f4:62:18:d7:a4:26:82:e6:ce:b1:cf:f4:e8:46:
42:cf:89:c0:de:87:b1:2f:b9:16:db:5f:68:0a:3d:16:4b:90:
96:a7:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:22 2025 by rpki-client