Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/1-aRCdRBpKSBpGR4v9msgat9V61M.roa
File: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (raw, json)
Hash identifier: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=
Subject key identifier: F9:A4:42:75:10:69:29:20:69:19:1E:2F:F6:6B:20:6A:DF:55:EB:53
Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial: 0196349236DD9E1CDFFDEE4D0850F48C1158
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/1-aRCdRBpKSBpGR4v9msgat9V61M.roa
Signing time: Mon 14 Apr 2025 13:51:59 +0000
ROA not before: Mon 14 Apr 2025 13:51:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211052
IP address blocks: 185.229.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:92:36:dd:9e:1c:df:fd:ee:4d:08:50:f4:8c:11:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Validity
Not Before: Apr 14 13:51:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9a442751069292069191e2ff66b206adf55eb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:4f:7a:07:b6:a8:1c:86:cc:23:ea:6c:2f:
59:0e:35:01:c2:ec:55:f6:51:48:06:d5:c4:6b:4e:
b8:82:8b:44:31:9e:cb:43:cd:95:5f:f7:48:48:2e:
fe:28:95:c0:a8:f1:f3:25:9d:de:b4:76:c8:90:98:
07:b2:d5:2e:e8:7a:f7:31:36:03:04:85:a2:78:56:
ef:89:e7:3e:45:01:02:e4:96:c1:db:b4:4e:b3:ab:
03:34:72:c2:00:60:90:12:6b:e2:7b:8b:5d:c8:05:
a8:7e:7a:30:00:a8:d3:7b:d6:df:7e:8c:99:35:8b:
db:a7:92:03:a0:bd:65:1d:4f:27:18:73:f4:02:4a:
2e:d0:ff:0a:b3:88:e7:d0:91:ad:63:bc:1c:67:ed:
87:9a:91:f2:dd:88:b7:40:33:fa:41:af:e8:e4:17:
ac:b9:8d:ab:2f:44:08:67:d2:b0:8c:b0:4f:da:5c:
94:69:a5:9e:b7:0a:d7:af:49:81:22:ed:e0:ec:f3:
05:9e:cc:c0:bf:21:1a:dd:5b:50:e2:b4:19:c1:f0:
58:33:24:9d:92:bc:e5:e2:a8:fd:81:3d:c0:ae:e8:
cf:d7:2f:f4:df:ca:36:c5:1d:c8:03:f3:34:ee:cf:
a6:88:03:a4:1b:32:87:2e:a9:be:6a:45:14:ec:d6:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A4:42:75:10:69:29:20:69:19:1E:2F:F6:6B:20:6A:DF:55:EB:53
X509v3 Authority Key Identifier:
keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/1-aRCdRBpKSBpGR4v9msgat9V61M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7c:44:e8:d4:5a:43:50:22:77:9b:e1:73:9a:f1:34:40:03:
16:8e:7a:0e:3c:bb:b1:10:42:ec:31:f9:ac:f5:05:86:c5:5b:
1a:4b:94:85:ec:e9:04:a8:57:05:8c:25:78:7c:41:f7:5f:5e:
85:87:e9:6d:0b:fc:94:fc:eb:fb:dc:d7:45:8c:6f:93:1a:8c:
bf:8c:07:14:be:ab:3c:9c:bf:d9:1c:7c:b8:5d:9a:d6:93:24:
1d:ac:49:d2:8e:01:38:b8:22:17:97:06:be:4b:a7:aa:84:db:
14:5c:6f:15:22:4e:3e:eb:c1:de:1b:14:ea:9e:fa:8d:c1:81:
ab:7e:fc:5a:cf:2d:d7:f6:32:0f:69:ef:0d:b8:45:98:b6:18:
df:83:70:bb:c1:3c:3d:06:fc:86:d3:2e:6e:66:a8:eb:25:87:
2d:c9:a7:4a:a6:1f:c4:29:62:d9:8b:ad:97:07:93:43:ec:07:
69:3d:f4:c3:2e:d1:23:7f:80:22:9b:ec:33:12:9e:3f:ed:e3:
bd:35:16:d8:4d:ee:f8:f9:fe:9a:6f:5c:74:b4:09:c4:7f:11:
7b:90:c3:d9:4c:2c:8d:78:00:95:63:42:88:5a:86:ea:8a:7a:
3e:d9:74:5c:17:49:fd:4c:1e:f9:db:61:76:c8:ff:1d:1d:a7:
d4:69:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:55:25 2025 by rpki-client