Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa
File: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (raw, json)
Hash identifier: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=
Subject key identifier: 7D:9B:13:68:7B:0C:89:14:CE:43:1F:EA:4F:1F:8F:2E:34:9D:5D:51
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 019425FDB2AA1E987F4794FBC992E1E6282C
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212058
IP address blocks: 185.197.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b2:aa:1e:98:7f:47:94:fb:c9:92:e1:e6:28:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d9b13687b0c8914ce431fea4f1f8f2e349d5d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:32:7c:90:ee:a5:a6:3e:bd:c2:79:25:16:
81:7e:c5:ba:cf:a3:1a:39:93:c2:eb:ff:4c:ce:78:
a6:79:a6:9f:fe:fa:a9:0e:8d:09:35:1b:e7:6a:11:
df:3d:3e:69:f2:d6:fc:89:d8:dc:08:eb:80:fe:8d:
dd:f2:3e:b7:ed:58:ca:b6:67:29:f5:b1:cc:80:bd:
71:df:86:e7:09:c7:14:d0:0f:c1:a8:5d:de:1a:0c:
80:1c:0b:26:3f:d8:78:ca:cd:31:28:c6:a3:41:dc:
32:ce:82:1d:db:40:1b:52:9e:23:3e:52:4d:15:23:
8c:e6:1c:e4:08:dc:5e:fb:6a:90:29:d5:b9:5f:51:
32:e5:fe:02:62:57:9d:a9:fd:e5:95:67:95:ea:f2:
63:33:19:67:65:be:ed:b0:ae:21:d6:36:01:4f:4e:
4f:9c:59:36:7b:11:f8:c3:c2:db:49:0b:18:5b:02:
25:68:b7:ed:cc:23:e6:d0:fb:bf:6a:ff:78:60:45:
80:c7:1a:6a:b6:1c:87:0e:fc:7c:8c:fc:a3:37:42:
c7:49:3f:32:97:04:0f:10:91:c6:fc:ae:15:8f:f2:
71:fb:6c:67:44:db:80:3f:e7:f6:97:3b:5c:41:ce:
c7:34:db:60:ba:2c:a9:d4:0f:f5:2e:58:6a:3f:b7:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:13:68:7B:0C:89:14:CE:43:1F:EA:4F:1F:8F:2E:34:9D:5D:51
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.183.0/24
Signature Algorithm: sha256WithRSAEncryption
80:af:f3:17:e5:0e:97:ff:43:7c:10:09:6f:a5:af:cc:bc:b3:
43:f4:9c:6e:bc:a5:f5:22:a3:0c:11:99:a2:0f:0c:43:f3:99:
5c:d7:04:2e:11:ea:df:7e:c3:51:23:8a:92:bf:0c:56:b5:83:
a8:c9:f4:02:c9:e6:56:8d:b3:87:7f:6f:54:55:6e:12:23:93:
13:b1:13:ee:bf:78:7c:72:71:64:bb:a6:68:10:06:89:e2:d6:
b9:a9:20:ef:35:ac:1f:30:94:91:54:4e:2c:a7:31:1e:02:56:
05:aa:da:a7:a0:22:1b:c2:2a:e7:04:0e:a9:b8:5b:39:3f:44:
d2:2a:e6:aa:23:70:da:16:65:23:fd:54:98:ab:ad:f2:4c:4a:
2f:a0:03:b2:3d:9f:c5:64:97:f1:cc:07:be:ed:20:be:e2:76:
30:f4:a4:3c:c6:71:69:8e:3b:38:d1:18:c3:bb:3f:4d:2a:4f:
ca:0f:f3:69:f8:28:c2:af:cc:c3:25:25:ad:2e:9f:db:7f:41:
65:65:47:76:29:a2:04:52:28:e7:db:5d:f5:13:c1:ff:37:f1:
e0:d3:e5:4b:ae:d1:fa:dd:98:7b:d9:a1:4d:6c:a8:00:5a:c9:
dd:09:86:b3:b3:99:b8:bd:b5:91:0e:e1:b3:3b:1b:25:1f:ed:
83:c4:64:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:52:32 2025 by rpki-client