Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/9w0Rti9UPZRyrIWU5NOMy8Ud8C0.roa
File: 9w0Rti9UPZRyrIWU5NOMy8Ud8C0.roa (raw, json)
Hash identifier: ZfEurcdpYDkivnXtecQQ+AVyXc0rQ0W3ilxhEsJxMBc=
Subject key identifier: F7:0D:11:B6:2F:54:3D:94:72:AC:85:94:E4:D3:8C:CB:C5:1D:F0:2D
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 0194228E30A8AB9B654FEB3BFDA3920A641F
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/9w0Rti9UPZRyrIWU5NOMy8Ud8C0.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31673
IP address blocks: 185.62.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:30:a8:ab:9b:65:4f:eb:3b:fd:a3:92:0a:64:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f70d11b62f543d9472ac8594e4d38ccbc51df02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:e0:4f:9f:eb:e3:f6:0a:47:d9:49:67:40:
b8:f0:8c:c1:b1:fd:fb:20:8f:3f:0e:45:af:97:b6:
8f:3f:2d:8f:22:d0:54:e1:a8:b0:73:6d:0d:55:42:
18:2d:69:f7:f1:a6:5e:53:1f:43:30:be:ef:42:e2:
ea:18:e1:1a:c8:0b:ef:bc:10:da:e3:4c:e8:61:41:
38:08:4d:f5:c4:c0:34:6c:23:f1:3f:dd:58:89:05:
71:db:9e:45:cb:e7:46:63:ad:94:d4:50:8a:21:d6:
f3:7c:8f:c9:af:4a:7e:b7:c4:8d:d5:0a:a4:76:fc:
8f:7b:2d:40:d6:e6:c4:88:4e:74:1f:cc:31:ce:06:
93:2c:7e:e8:fa:39:af:03:26:f4:e4:9c:b3:28:ec:
ce:9c:1e:0b:08:10:5f:f4:67:b1:d8:ce:01:11:87:
58:02:71:25:4d:cd:8a:fb:07:78:11:47:3d:1a:d5:
76:00:a9:9b:f9:65:f5:f8:94:69:b2:41:1c:97:2f:
29:20:42:da:a4:19:fa:6f:cc:13:ae:8b:86:9f:1b:
66:29:95:07:30:1f:97:ea:04:8f:44:d3:0e:68:1d:
19:ff:c7:db:39:3f:cd:80:06:35:68:2b:c1:1a:29:
9a:13:f8:ab:a4:15:4a:2a:da:5b:e7:b4:eb:8f:51:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0D:11:B6:2F:54:3D:94:72:AC:85:94:E4:D3:8C:CB:C5:1D:F0:2D
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/9w0Rti9UPZRyrIWU5NOMy8Ud8C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:2c:71:4e:0c:e0:e4:80:39:27:e8:56:45:a5:99:57:d3:21:
c3:1c:72:68:48:1c:39:ce:7b:41:a3:a6:2f:1b:e2:de:24:6b:
14:b3:98:a4:1e:6d:5c:d2:23:e9:46:2e:f0:30:08:4d:88:83:
06:a9:44:6d:17:a7:da:64:d6:fb:65:95:6c:c7:c6:2b:33:0d:
d8:a4:1b:47:9c:e6:1a:a5:7c:cb:fe:40:d2:e9:65:35:89:e3:
d0:32:c8:55:37:71:e7:14:25:55:bd:54:37:be:65:90:12:0d:
3c:9a:69:b3:49:b7:01:d5:ac:24:7b:76:cd:33:13:5b:4c:37:
89:8b:ed:02:da:b9:0d:9b:7f:ab:68:51:4a:b6:f6:7d:dd:f6:
cc:a7:59:36:93:49:06:c0:d9:91:3b:c0:2b:eb:15:d0:0f:b2:
0f:82:73:97:48:87:75:40:3a:42:2f:96:8f:d7:4d:cc:c3:67:
4e:79:c2:21:43:9d:1a:39:2e:56:15:91:4a:f9:63:60:06:ae:
aa:bc:cd:34:2c:8f:59:80:de:69:03:ea:08:45:f7:84:05:48:
ec:fb:0f:3a:06:62:fa:ff:2c:cc:07:b6:a5:b8:99:f2:54:8a:
eb:d1:c9:6f:6e:24:c5:70:a9:73:c2:48:37:cc:c8:69:98:cd:
78:8f:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:43 2025 by rpki-client