Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jmIhCxY7pxlv81wnpm_XcN7H-9o.roa
File: jmIhCxY7pxlv81wnpm_XcN7H-9o.roa (raw, json)
Hash identifier: 6INokfs4iL2hs8QmSuMwblguh+HWktBS9QjD1/304vI=
Subject key identifier: 8E:62:21:0B:16:3B:A7:19:6F:F3:5C:27:A6:6F:D7:70:DE:C7:FB:DA
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB270704C35A7BDC759F5C916289A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jmIhCxY7pxlv81wnpm_XcN7H-9o.roa
Signing time: Wed 01 Jan 2025 01:48:21 +0000
ROA not before: Wed 01 Jan 2025 01:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197722
IP address blocks: 185.30.244.0/22 maxlen: 24
185.31.104.0/22 maxlen: 24
185.94.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b2:70:70:4c:35:a7:bd:c7:59:f5:c9:16:28:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e62210b163ba7196ff35c27a66fd770dec7fbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:3a:9b:78:e4:32:f7:06:79:d3:7e:69:61:
a4:29:6e:ca:bb:a6:50:31:28:3b:ef:81:1d:92:1b:
a5:57:85:c8:5b:ed:b1:f7:59:f5:c0:39:1f:1b:e4:
84:8b:fc:5c:4a:43:bd:f0:9f:91:42:02:60:fa:d3:
10:d0:29:aa:f8:68:8e:11:ec:60:bd:fa:25:e6:06:
d1:ce:58:2a:0a:ff:c0:e4:ff:f1:5b:43:6d:c6:b7:
e6:04:13:4a:dc:98:1e:03:61:aa:bd:6f:78:d0:62:
b7:b6:b7:5b:1a:87:24:65:51:6b:da:4a:b7:53:ac:
c1:53:e0:bd:7c:1f:7d:82:c4:ee:df:2c:5e:49:4b:
65:d4:4c:52:6c:ec:25:ab:99:c4:d9:20:eb:1e:15:
80:1d:e6:56:b5:9a:f3:56:85:aa:d3:cc:d8:1a:ba:
73:95:46:18:81:dd:80:af:6c:d6:00:de:69:cd:41:
1e:89:7d:ab:f8:c4:92:d8:ad:d6:bb:bd:13:56:16:
01:ff:1d:4f:fa:3e:a3:77:dd:16:33:4c:e0:b5:ba:
df:35:4e:6d:a2:d3:7e:89:62:37:a4:51:2f:a3:7e:
fe:a4:4d:98:d4:06:32:16:21:5a:d9:01:50:d5:f0:
2b:80:11:3b:bc:15:3d:50:eb:c5:f9:56:ce:27:b8:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:62:21:0B:16:3B:A7:19:6F:F3:5C:27:A6:6F:D7:70:DE:C7:FB:DA
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/jmIhCxY7pxlv81wnpm_XcN7H-9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.244.0/22
185.31.104.0/22
185.94.248.0/22
Signature Algorithm: sha256WithRSAEncryption
14:f2:fe:ea:f5:e0:ff:5e:52:72:8a:04:6e:e3:a6:d5:f8:6f:
04:b9:f6:03:2d:41:15:5e:f5:03:86:df:26:c8:ed:c4:8a:47:
fa:06:df:e6:99:46:71:d0:06:a9:62:07:e7:39:19:2c:8f:c8:
43:66:19:0c:e0:6f:4d:9f:cc:f0:81:ee:2d:b0:dd:8a:16:e7:
00:3a:0d:64:d3:47:13:8d:6a:4a:ca:74:18:5f:6c:74:4c:0b:
b8:e2:d2:ef:87:4b:4f:50:16:db:b0:c3:f2:36:18:90:b7:a4:
3d:b1:c0:49:0e:42:38:65:04:c7:ef:4e:e4:3a:0b:dd:ad:ff:
9e:c1:57:a4:34:03:c3:bc:2c:29:83:90:4e:95:b1:5a:ea:a8:
aa:b7:49:03:8b:1a:5a:c3:86:0d:97:57:90:3a:ee:a1:e7:64:
26:fb:2a:90:bf:f3:31:2c:22:68:c9:72:26:62:7c:d9:e5:a6:
b8:2d:3b:bb:f7:2f:5a:34:e8:ca:9e:db:3f:8e:c4:e4:83:72:
c0:9e:21:61:bf:85:5b:a8:e6:94:28:19:b4:0b:f6:6f:f3:77:
09:00:42:56:e5:06:cb:14:69:04:b4:58:e0:ce:38:1f:94:fd:
e8:59:b2:90:ba:e3:f7:86:47:b4:e4:6c:6d:ea:7f:31:f2:c5:
e2:c0:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:45:34 2025 by rpki-client