Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/j-Iupp3EcWQfbMD2aDvdXh5buVM.roa
File: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (raw, json)
Hash identifier: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=
Subject key identifier: 8F:E2:2E:A6:9D:C4:71:64:1F:6C:C0:F6:68:3B:DD:5E:1E:5B:B9:53
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 01942520B574236945D7F8D74928151171C7
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/j-Iupp3EcWQfbMD2aDvdXh5buVM.roa
Signing time: Thu 02 Jan 2025 03:48:08 +0000
ROA not before: Thu 02 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201542
IP address blocks: 185.71.92.0/24 maxlen: 24
185.71.93.0/24 maxlen: 24
185.71.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:b5:74:23:69:45:d7:f8:d7:49:28:15:11:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Jan 2 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe22ea69dc471641f6cc0f6683bdd5e1e5bb953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:b9:db:ba:de:d1:20:4a:32:83:c1:c0:00:
02:d7:ed:67:e1:4e:d3:0d:6e:16:e1:5c:aa:03:5e:
45:d1:13:23:0f:d0:c6:c5:d1:21:cf:aa:11:7e:56:
58:24:d2:10:0b:f5:a0:d6:1e:bf:9a:8d:23:32:4a:
d3:0f:db:3b:ac:32:94:13:ba:b0:bf:8d:4f:7e:62:
25:35:f0:f9:b4:70:3a:40:c7:db:6f:5a:e2:61:ad:
92:aa:bc:77:b0:58:75:d4:36:b1:bd:08:7b:22:57:
0b:54:30:fd:41:8a:52:3d:6f:d8:f4:e1:97:94:a4:
5c:d4:e7:67:50:69:c6:07:05:9e:68:cf:00:0a:4f:
32:da:52:ac:4a:2f:db:84:9c:cb:01:79:d1:61:43:
51:16:5b:6e:48:e1:10:16:f8:6d:2a:ec:88:5c:a1:
6f:3c:64:cb:04:99:f5:f5:59:23:6c:55:71:cc:53:
08:b3:2f:e1:6a:c2:75:a4:a3:40:5e:31:5c:a4:91:
10:69:16:7a:4a:52:3c:7c:fb:75:4c:33:5e:76:ca:
55:1b:88:f6:17:bb:bd:ce:8e:b8:fb:5f:73:34:02:
6b:cc:80:f3:fc:d6:1d:32:e6:98:08:b6:17:02:0b:
65:b6:42:10:06:c7:56:4d:a0:7a:6a:95:a3:d4:29:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E2:2E:A6:9D:C4:71:64:1F:6C:C0:F6:68:3B:DD:5E:1E:5B:B9:53
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/j-Iupp3EcWQfbMD2aDvdXh5buVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.92.0/23
185.71.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7a:f9:2c:a7:2d:73:9f:77:25:96:e1:d1:a0:0c:0a:5a:52:
0b:4a:9b:9f:5d:2d:85:59:3f:b9:cb:4e:e9:20:42:69:b4:d8:
b2:49:23:f3:63:d1:05:ac:f0:40:71:7f:59:70:1c:55:ec:e1:
ec:cb:c2:84:64:03:aa:07:ac:ea:a6:f9:ee:93:44:7b:45:d3:
7d:7c:7e:c9:bb:34:2d:0d:d1:59:1d:82:ed:c5:a4:d2:9c:46:
0d:30:b5:4c:3d:8d:05:8c:27:5e:7e:d6:73:20:7a:49:9c:bd:
b0:ec:ad:fa:c7:0b:6a:19:0b:3b:43:d6:2e:10:0c:ea:23:10:
7c:a6:91:38:2b:a0:09:f4:35:6a:8a:0b:5b:9c:05:1b:12:ea:
8a:22:47:ac:2b:39:72:3f:a0:48:1f:76:f1:cf:f3:40:e7:43:
c8:48:43:35:f7:af:c5:00:68:0d:d6:d8:c0:4a:b2:29:3d:21:
2b:9e:b9:6d:89:0a:20:8e:78:97:9c:f6:0e:b9:15:1d:ee:df:
a8:df:83:28:65:0b:a1:13:88:bc:e6:de:ac:3a:12:00:5e:b3:
93:11:e0:54:b8:1e:56:ab:41:1a:ea:e5:2b:1a:36:fd:db:56:
c2:b1:93:14:ef:8d:51:91:48:de:f1:bf:2d:f3:80:2f:ea:88:
94:5c:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:30 2025 by rpki-client