Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa
File: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (raw, json)
Hash identifier: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=
Subject key identifier: 7C:C7:FB:7B:2A:84:50:6E:B0:0F:13:5F:2F:29:BC:DC:AC:9D:E1:A4
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01941FFA239F2E5B7436D5A9CCEBE4800DED
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15542
IP address blocks: 185.200.96.0/22 maxlen: 24
212.92.64.0/19 maxlen: 24
212.115.192.0/19 maxlen: 24
213.34.224.0/19 maxlen: 24
217.63.64.0/19 maxlen: 24
217.102.240.0/20 maxlen: 24
2a02:f68::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:23:9f:2e:5b:74:36:d5:a9:cc:eb:e4:80:0d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cc7fb7b2a84506eb00f135f2f29bcdcac9de1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:75:c3:49:69:d7:f1:b0:6f:66:d2:c9:58:
b0:b3:93:75:08:af:56:17:65:99:b2:91:28:e9:b1:
3a:a4:e6:33:50:0c:6b:e4:1d:2a:24:88:58:b5:b4:
f2:46:31:5c:a0:f7:9d:e0:03:40:02:8b:b1:9d:bb:
b1:f9:f3:96:f7:1f:af:83:03:52:26:83:cb:0e:5c:
67:1a:a3:72:9c:12:a2:fd:13:6a:58:a4:63:e1:d0:
01:e9:a1:f7:a8:4a:58:f8:de:a3:de:82:c7:9b:9a:
f6:cf:ce:ad:71:45:78:de:e1:df:20:cc:97:88:17:
2b:5d:c4:42:89:30:6f:82:5c:17:f4:11:53:23:40:
25:0d:1b:94:a0:49:18:96:ed:fd:fc:f0:73:f9:0a:
6f:48:87:79:1c:5b:c8:63:21:f7:60:e2:9a:5a:3b:
2b:5e:40:9c:e7:ee:1a:df:65:2a:50:de:99:b4:f1:
aa:e0:2a:ba:5d:f3:28:36:f4:42:f6:1a:27:32:85:
79:17:65:e1:93:f9:06:ed:e3:df:87:f1:f4:28:31:
9d:22:83:ea:38:c1:8e:22:3e:34:88:b5:c4:c1:1c:
e6:01:7b:57:9f:2d:97:f9:23:fe:39:d6:2f:ae:75:
ee:3c:9a:53:2c:ad:a1:c3:9b:d0:30:9f:67:61:29:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C7:FB:7B:2A:84:50:6E:B0:0F:13:5F:2F:29:BC:DC:AC:9D:E1:A4
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.96.0/22
212.92.64.0/19
212.115.192.0/19
213.34.224.0/19
217.63.64.0/19
217.102.240.0/20
IPv6:
2a02:f68::/29
Signature Algorithm: sha256WithRSAEncryption
17:f1:2f:1b:6a:83:9f:f7:a0:04:27:db:f7:78:50:7e:e3:06:
4f:d8:16:05:4b:6e:75:a4:fa:59:21:2c:d0:b4:0a:ca:19:0a:
cc:77:54:6d:4c:86:1f:c5:eb:33:c7:18:ae:42:3a:c9:c3:b0:
08:38:87:b6:af:d6:c1:0f:43:8c:d4:50:1f:9c:b7:53:fe:fe:
49:1b:21:ea:59:4f:56:4b:21:36:de:8e:a7:60:1f:f6:0e:db:
13:67:4d:98:ef:6b:e8:c3:c3:9d:58:7c:79:bc:10:b1:96:5d:
ff:9b:88:b3:30:86:0e:a8:10:76:de:d9:7a:fa:c5:29:90:76:
5c:d0:8e:d7:5a:77:b2:92:cc:bb:31:e6:38:60:7b:66:4e:c7:
cf:f2:f6:83:e5:c7:57:0b:10:f3:d7:a8:8e:70:96:4b:54:f3:
c6:9f:f0:00:0d:5e:2b:cc:01:e1:83:cb:1e:1e:ed:a8:3d:74:
45:5d:ee:d4:19:29:d6:de:9a:17:a5:eb:3f:2b:80:f3:f6:d2:
23:b5:49:46:2e:25:27:ae:8a:01:91:a8:d9:a2:02:a3:b7:30:
98:6a:c0:ca:51:8f:9f:7c:52:79:d8:51:ba:49:0a:ca:8d:df:
42:ff:41:ff:af:f1:b6:b8:12:18:b9:72:e6:75:0f:ba:ec:1f:
4d:e2:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:16:23 2025 by rpki-client