Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jAP799q0uU2ZPkY682M3_c1diHM.roa
File: jAP799q0uU2ZPkY682M3_c1diHM.roa (raw, json)
Hash identifier: g/KLaBeBS0LHaoaUdkU/5pA6AbH+DfSbm+HgQTftLP0=
Subject key identifier: 8C:03:FB:F7:DA:B4:B9:4D:99:3E:46:3A:F3:63:37:FD:CD:5D:88:73
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CC3FBAC4FC03A953ADE06B6A84068
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jAP799q0uU2ZPkY682M3_c1diHM.roa
Signing time: Wed 01 Jan 2025 01:48:26 +0000
ROA not before: Wed 01 Jan 2025 01:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209034
IP address blocks: 185.240.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:c3:fb:ac:4f:c0:3a:95:3a:de:06:b6:a8:40:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c03fbf7dab4b94d993e463af36337fdcd5d8873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:14:a9:b7:43:ac:dc:ee:e6:c3:3a:a5:38:
d8:ee:47:47:fb:14:90:68:96:be:0e:56:0f:48:46:
78:96:4b:02:cd:23:b8:70:71:9d:6e:52:f5:b1:a1:
25:f7:79:50:54:fc:8a:21:97:c9:62:4f:d7:ba:cc:
fa:ac:cd:18:50:e4:d7:a4:e4:8a:c9:16:7f:4c:33:
fb:6c:28:0c:7f:fb:68:7e:a6:c4:c8:81:19:d6:79:
d4:1a:36:ea:87:61:0b:13:ab:25:0e:d6:e9:eb:83:
69:c1:5f:6c:99:b9:be:c7:eb:5d:ad:db:04:d5:ee:
63:c5:44:a9:2a:11:14:87:fe:fa:ff:6c:29:0b:af:
ec:9a:56:d9:3e:f1:aa:81:52:99:82:9e:9f:87:39:
c4:83:51:ca:44:d5:11:60:21:da:05:12:58:4e:e7:
c2:ec:d1:e6:38:c5:a2:94:30:4c:96:f4:d7:b9:9e:
88:b5:68:79:c3:e3:58:e1:78:14:47:20:d8:ca:b7:
5a:46:8a:6b:88:1d:42:94:b0:2a:0c:6b:f0:36:d9:
41:b8:b5:04:db:f3:f8:82:dd:57:3b:f9:ef:ce:5d:
b9:12:39:10:87:14:d6:86:22:96:81:ef:ac:99:02:
d4:2d:95:6e:53:42:b6:ff:83:f3:fd:96:7b:6d:32:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:FB:F7:DA:B4:B9:4D:99:3E:46:3A:F3:63:37:FD:CD:5D:88:73
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jAP799q0uU2ZPkY682M3_c1diHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:47:d3:8b:56:95:9d:32:d0:06:af:f8:70:ee:c0:c3:f5:12:
53:b6:a0:1a:ab:06:bc:38:13:99:7b:ca:16:ce:fd:a9:be:ae:
06:f8:a9:b6:6c:f5:fa:85:0a:8a:42:3f:b4:4b:2b:36:a3:7b:
eb:6b:eb:59:98:0e:c4:07:1d:7e:4f:68:37:de:c9:65:59:b6:
a9:ae:b0:2f:2a:53:6f:77:51:10:86:88:e1:84:50:28:b8:58:
f6:2f:89:a3:a2:8e:86:22:f1:da:27:35:49:31:e5:0d:46:66:
fc:ee:bc:10:0b:99:5b:c2:cc:10:15:fe:76:99:45:e4:1a:da:
2f:31:ff:6c:fc:80:81:b7:c1:23:e6:1b:f8:be:3b:b0:2d:80:
4a:2a:b6:e5:37:bb:29:19:ca:93:3a:cb:58:13:64:bc:af:11:
d4:e4:11:83:fd:60:a4:55:94:2d:07:ac:65:27:fc:49:90:9e:
b7:96:03:06:2f:1f:41:66:86:3a:63:42:66:8c:0c:57:5a:af:
05:d6:04:6c:41:9b:7a:5a:73:d6:ef:6d:28:3b:8c:8f:24:02:
24:97:66:42:1a:5c:af:4a:91:0f:c4:87:a4:f4:98:75:0d:98:
42:7f:a4:6e:7d:1d:90:ae:88:9b:4b:7c:9a:1c:24:6f:c5:28:
31:1e:7c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:40:20 2025 by rpki-client