Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa
File: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (raw, json)
Hash identifier: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=
Subject key identifier: 37:B7:64:24:63:D5:FC:29:47:D3:37:6C:5A:15:17:42:12:DF:F9:F2
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 019536B763A91B15778285775142FB519C3D
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa
Signing time: Mon 24 Feb 2025 06:49:02 +0000
ROA not before: Mon 24 Feb 2025 06:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 185.2.246.0/24 maxlen: 24
185.2.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:36:b7:63:a9:1b:15:77:82:85:77:51:42:fb:51:9c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Feb 24 06:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37b7642463d5fc2947d3376c5a15174212dff9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:f5:77:aa:71:fd:8b:11:f8:78:89:31:a1:
ad:00:6c:c8:6f:70:dd:e1:71:6a:8d:5f:3a:6b:2e:
df:c3:e2:4d:ab:69:ba:d9:18:19:8b:7e:83:af:0a:
8d:7e:25:e5:da:96:61:40:e6:24:38:a6:c1:dc:88:
74:25:13:a1:52:f6:f9:4e:c3:ee:84:07:98:2a:e1:
5f:c0:eb:d8:06:b8:24:39:a0:f2:b1:d8:7b:06:6d:
c0:d3:32:31:fd:61:99:fd:77:11:6b:ae:93:a4:25:
29:f2:37:51:86:3c:13:ce:1c:05:8d:1b:2e:76:47:
87:a3:be:63:ea:2f:d9:34:1c:5d:86:6c:d5:d2:a6:
30:12:09:84:d8:e8:71:e2:f8:21:54:d0:eb:5d:5a:
c2:21:f3:c4:0a:f9:17:b8:0b:4a:7d:0d:39:90:3c:
5a:a4:5e:8a:a3:2a:1a:fe:58:24:cc:87:fb:fb:0b:
a3:45:44:eb:10:f4:2f:6a:12:14:c7:7b:b7:f9:ec:
79:ad:4d:f5:f3:4a:64:90:28:b8:9e:fc:ba:ef:b8:
4f:05:d3:30:bd:23:f2:89:4a:0a:12:7f:5b:27:2f:
2a:7b:3a:8f:84:71:cb:2a:83:84:fb:43:4e:ac:f1:
f7:a4:8a:39:be:c0:46:35:c9:b7:5f:5a:41:f2:80:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:64:24:63:D5:FC:29:47:D3:37:6C:5A:15:17:42:12:DF:F9:F2
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.246.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:1e:2f:c8:19:a9:ba:89:e9:1c:d3:1b:3c:3c:3b:09:b4:c8:
07:f6:2c:fb:99:c2:7c:53:98:77:7e:4b:31:98:1d:6b:2a:75:
0c:9c:02:65:46:c0:44:23:34:30:f2:0b:c0:d7:fe:ec:7e:3c:
5e:35:ce:c1:a4:83:ae:86:f7:5b:d6:82:83:74:02:0e:8c:70:
8a:22:86:d8:3d:43:c6:6e:73:4c:81:cf:c4:3e:d4:a4:ba:66:
c8:e0:72:73:95:bf:88:84:af:9c:77:64:bf:71:dd:89:93:c2:
62:81:5d:09:d9:91:c2:d2:33:3f:c8:ff:01:68:f5:15:2a:cf:
8d:11:07:ae:19:f1:69:c5:ce:54:ee:86:f4:01:a1:f9:c8:ca:
fa:0c:92:82:5c:33:b0:6c:90:0d:f3:9f:cd:23:a5:50:b0:54:
90:cc:ea:28:34:3a:c2:cd:dc:e5:77:3e:d2:11:60:8f:32:90:
3a:a3:22:2e:2a:50:5c:71:1d:ad:b0:4d:7f:55:de:cd:bd:a8:
aa:08:65:1d:f6:71:a7:04:d6:0c:35:82:8f:55:e0:5c:7d:f0:
82:98:5a:9e:56:69:52:f8:32:ae:d6:d0:fe:be:79:b7:08:81:
b5:fb:4d:25:51:68:b7:38:40:24:99:27:63:6a:ba:34:a3:f8:
6e:9a:d2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:07:44 2025 by rpki-client