Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/t2eqeCQbNhgl-Jc8GT8fkJCiTUA.roa
File: t2eqeCQbNhgl-Jc8GT8fkJCiTUA.roa (raw, json)
Hash identifier: x1mp9cBQb/h3EpCU8ShrKyivABsASCyviicuxx2RF1c=
Subject key identifier: B7:67:AA:78:24:1B:36:18:25:F8:97:3C:19:3F:1F:90:90:A2:4D:40
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CA859A8C5F429FDB561402FA72183
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/t2eqeCQbNhgl-Jc8GT8fkJCiTUA.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42006
IP address blocks: 185.210.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a8:59:a8:c5:f4:29:fd:b5:61:40:2f:a7:21:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b767aa78241b361825f8973c193f1f9090a24d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:d6:7b:82:70:bb:43:fb:a0:5d:96:9a:55:
6f:de:a0:6b:57:f2:b9:c2:c1:64:fa:7c:7f:b4:29:
17:ef:37:d4:a6:f2:72:df:a0:71:f9:9c:c5:d4:67:
24:a5:30:cf:20:39:57:d4:c7:3d:09:35:cc:9c:19:
16:30:4d:b3:9b:94:cb:ac:62:90:85:a7:fb:d3:3c:
5f:54:33:84:62:69:6f:49:23:ba:df:55:5b:fe:ca:
f4:4c:6e:13:9e:88:ff:9e:42:e2:b3:de:b9:bf:96:
82:d0:44:7f:6e:76:51:bc:a6:0e:03:a5:a9:48:f2:
f7:f5:23:e2:dd:83:96:db:b2:f9:4d:31:98:3b:30:
4c:e6:76:f8:18:27:6a:88:43:2f:5e:8b:7b:03:24:
00:88:c1:41:4e:7c:c1:f4:22:39:14:63:08:82:4b:
40:70:b9:57:09:30:af:95:f8:1b:4a:0e:62:2d:0d:
46:2f:c5:9c:f8:61:42:ba:41:4a:0a:6b:24:bb:05:
fe:02:08:94:01:b7:cb:b1:e5:5d:c4:9d:8f:8a:1e:
52:52:51:e4:9c:33:f4:94:62:65:40:40:2c:77:c9:
20:8b:a1:1a:35:73:b4:8d:a6:2c:b5:15:e0:dd:b0:
f1:d5:7a:60:ff:d3:9b:80:af:6c:b5:0b:79:7c:cc:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:AA:78:24:1B:36:18:25:F8:97:3C:19:3F:1F:90:90:A2:4D:40
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/t2eqeCQbNhgl-Jc8GT8fkJCiTUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.184.0/22
Signature Algorithm: sha256WithRSAEncryption
20:50:9c:93:d9:95:2e:75:f1:6d:08:f1:5e:b2:16:71:3a:4b:
25:55:80:ae:f1:20:2d:88:c1:70:50:e5:f2:48:b7:2d:44:b5:
b1:0b:60:0f:68:13:7b:7b:0e:33:9d:52:7d:b1:1d:08:c4:b8:
57:68:04:b3:45:e2:73:03:d7:d8:73:05:5b:f9:31:94:16:a2:
d1:13:22:68:07:79:23:fb:81:9d:7a:7c:34:4b:44:57:63:29:
5b:ae:45:1c:f4:11:76:54:bf:c9:0c:0f:bc:b6:da:77:fa:d0:
4f:e9:d5:00:3c:35:b6:d8:88:1c:7f:04:bf:6b:26:2b:aa:88:
65:0e:02:af:dc:7f:f4:80:5e:26:59:dd:7d:ba:66:16:b2:26:
e3:7e:1a:cd:f8:ed:91:62:de:14:3a:fc:ae:60:33:e9:a3:4e:
90:28:e0:b1:e9:b6:e6:04:c5:31:ab:0b:45:c0:5b:38:e6:84:
21:49:23:8b:bf:e8:67:ff:5f:07:ed:bb:91:16:bf:6c:23:a8:
cb:bd:a4:d6:44:a2:ff:59:9b:c7:4d:6d:fa:b8:f7:0d:0b:30:
53:0d:92:62:b0:a3:7d:87:0b:52:f0:fd:87:aa:bf:74:28:76:
77:06:56:e2:aa:e1:11:6f:d4:b3:7f:55:0c:85:cc:e6:cd:8b:
b4:a8:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:13 2025 by rpki-client