Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/erMk5yuryhZB_ZV-dGn9yf-aRpI.roa
File: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (raw, json)
Hash identifier: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=
Subject key identifier: 7A:B3:24:E7:2B:AB:CA:16:41:FD:95:7E:74:69:FD:C9:FF:9A:46:92
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 0194221F83AEBD72504EA152415506EC1E04
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/erMk5yuryhZB_ZV-dGn9yf-aRpI.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.222.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:83:ae:bd:72:50:4e:a1:52:41:55:06:ec:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ab324e72babca1641fd957e7469fdc9ff9a4692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:41:0c:d2:71:39:2a:58:a4:be:fd:18:a9:
21:11:c9:84:a3:1c:06:09:e1:63:e9:8f:7e:54:ea:
0f:4a:1f:13:2c:0e:aa:b2:04:0a:2f:6e:6d:fb:b7:
28:ee:c1:40:0f:1a:a5:bb:03:be:6f:fe:1f:82:04:
e6:b7:2d:24:90:a1:e3:85:96:dd:5b:2f:17:3a:48:
67:88:1e:bd:61:ed:16:ef:b3:99:73:9f:52:93:91:
c5:88:3f:4a:dc:36:85:0f:09:12:a8:4f:30:9a:c7:
e4:a6:9e:67:8e:e9:75:e6:fc:b3:98:0c:ec:e4:2f:
b4:41:76:09:f8:a2:99:f0:d1:12:37:be:45:fa:aa:
cd:32:c6:8a:60:b2:9c:14:a0:93:86:52:6e:c1:e2:
52:f5:11:74:ea:75:29:92:4c:71:7f:fe:76:c6:2d:
e5:ca:45:cf:bc:fe:a1:3d:6e:8d:b4:08:9e:29:e7:
97:e3:0a:95:39:d9:a7:4a:b9:57:52:03:2e:5c:63:
e3:9c:1e:6f:20:79:3b:d5:4b:ad:fd:e5:e8:d5:46:
dd:77:70:03:ba:36:5a:da:5a:14:23:5c:37:26:39:
15:01:94:86:d2:3b:31:c3:ce:a2:d2:a6:95:4f:3a:
fd:34:bb:ef:e1:f5:75:23:e3:cb:0b:fa:77:81:f9:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B3:24:E7:2B:AB:CA:16:41:FD:95:7E:74:69:FD:C9:FF:9A:46:92
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/erMk5yuryhZB_ZV-dGn9yf-aRpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:14:95:f1:4b:2e:b7:11:70:40:bd:d4:59:c9:4e:2b:9f:c2:
e7:9f:d7:11:a7:9f:cf:ce:70:3c:e6:d9:85:fc:28:ce:43:4b:
37:db:c2:80:9a:4b:1d:19:c8:4c:c3:75:c0:69:8d:55:ee:bd:
1d:3f:5f:a5:9c:2e:be:b0:ee:4e:ba:1d:ce:ff:fd:af:1f:d1:
1d:fc:9a:2b:3f:af:1f:1b:4b:bf:d1:91:0f:34:7e:e1:9b:68:
b4:5f:75:e8:74:07:32:a8:43:91:08:c3:78:cb:7f:12:6e:03:
62:c7:0e:b4:51:7b:b8:48:0b:a6:84:e2:0b:a9:28:f1:f6:4e:
a5:10:7f:96:1f:09:26:19:53:e3:c7:97:4a:7d:3e:ff:ee:5c:
19:16:57:b7:93:bd:25:9c:6a:f9:81:b0:a6:05:d8:4a:57:34:
13:9f:f1:f2:86:18:ba:32:d4:c7:cf:25:5a:97:eb:70:e1:9b:
67:82:2e:6f:ea:6b:ad:f2:03:11:50:ae:83:09:0e:38:82:f0:
62:f2:3e:83:6b:23:4f:31:e3:45:0c:59:4f:18:44:92:f8:b9:
40:94:72:43:02:fe:35:48:07:1a:db:28:a6:c7:bf:34:28:fd:
6c:71:8b:4b:3f:78:5b:fc:e5:4f:67:37:86:1d:8d:6e:7b:52:
2e:72:c8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:13 2025 by rpki-client