Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa
File: 7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa (raw, json)
Hash identifier: wQjiNc4CCIKnGkmgdVYRMnPV1+DQiNnrix3wCvH87Fs=
Subject key identifier: ED:FE:B6:E3:BC:AD:AC:09:FC:A8:76:77:96:0F:31:D0:96:E0:DE:95
Certificate issuer: /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial: 019426D95BB1FCAEE058DC302751B8FD1183
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57721
IP address blocks: 185.87.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5b:b1:fc:ae:e0:58:dc:30:27:51:b8:fd:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edfeb6e3bcadac09fca87677960f31d096e0de95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:d5:51:d7:43:38:8a:ad:8b:9b:ae:7c:1b:
ae:fa:4e:e1:a5:36:7a:b4:cd:c0:9c:80:81:b9:df:
79:eb:f3:80:74:fc:26:ef:d5:ac:d5:59:62:1a:a4:
79:d1:15:d0:4f:8b:50:92:d9:c6:dc:3b:8b:28:fa:
18:55:55:c5:dd:9f:06:a8:9f:e5:98:ff:be:fa:d1:
de:5f:b4:ad:73:27:85:6d:46:42:2f:a1:35:c9:dd:
17:70:59:b2:11:e1:02:d6:fb:55:15:b0:00:14:02:
5d:48:03:0d:b4:ff:58:7c:dc:0a:5f:4c:d1:2a:ef:
1f:b9:4e:36:a3:97:ba:c7:c8:91:99:eb:77:e5:5d:
a9:8a:8a:fa:ac:ac:1b:e9:aa:b4:69:41:06:aa:4d:
05:59:0a:f4:9c:a6:28:d2:2f:af:6c:4e:55:f6:86:
32:23:4f:d1:36:43:5f:99:81:6d:92:85:98:3b:fe:
e8:93:fe:bf:7f:e4:bb:8c:c2:65:1a:23:9b:4b:7f:
e9:31:f4:ae:48:d3:4e:16:30:ac:a1:a4:fc:08:d7:
97:9e:70:6b:fc:d6:99:aa:4d:56:75:fb:f0:21:73:
4f:10:c5:02:90:50:03:f8:12:fc:5c:1c:52:d9:1e:
6c:5f:41:24:69:28:f1:d1:f5:58:c4:a4:40:c7:6a:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:B6:E3:BC:AD:AC:09:FC:A8:76:77:96:0F:31:D0:96:E0:DE:95
X509v3 Authority Key Identifier:
keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.160.0/22
Signature Algorithm: sha256WithRSAEncryption
05:78:48:f6:fc:55:53:08:ec:31:8c:fc:40:5b:76:b1:3d:a3:
b5:0d:c7:b6:8f:f8:4c:d6:7d:1d:15:88:1f:ee:a8:f7:14:91:
e8:47:e5:f4:cc:15:b1:bf:d2:dd:b4:fa:62:12:6c:74:19:9c:
92:d1:84:d6:89:95:7c:30:94:b8:b1:60:42:a0:90:b6:dc:0b:
d3:c1:ca:ba:45:f4:1c:eb:48:0e:27:0f:48:e5:2c:fc:81:6d:
02:3b:e9:d7:d6:52:47:87:04:c4:e5:ce:03:4e:97:b7:a5:0a:
47:4e:91:36:7d:ca:d0:d1:36:ca:60:03:e6:4b:3c:83:5c:88:
29:43:eb:e9:09:ca:fa:cf:a3:12:5f:a1:72:78:82:34:1d:6c:
f0:20:32:9e:83:74:df:2a:f4:1a:7d:f8:06:9c:fc:c0:96:fc:
bf:a3:37:50:89:50:62:15:5b:f2:5e:f2:df:c5:ee:a6:f6:5d:
75:d9:6e:1a:d4:d1:b3:4f:83:d9:d6:4a:12:38:d1:d4:a3:2a:
d0:58:13:23:3d:87:16:e3:e6:36:b2:33:63:d7:79:18:0a:9e:
ea:5c:b3:ce:f0:28:1d:6e:3e:71:eb:01:5d:a4:c7:bf:a8:a7:
f2:2c:37:67:1a:16:fb:87:11:9f:5d:53:75:8b:9d:69:3a:d1:
66:15:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:57:19 2025 by rpki-client