Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa
File: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (raw, json)
Hash identifier: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=
Subject key identifier: 75:40:43:C8:8D:D8:D3:C7:3C:99:38:B2:7A:82:4C:94:02:F4:9E:5D
Certificate issuer: /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial: 019421B1BE5BF53B1C97297DB1B111412483
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 185.222.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:be:5b:f5:3b:1c:97:29:7d:b1:b1:11:41:24:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=754043c88dd8d3c73c9938b27a824c9402f49e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:a8:6d:61:01:36:5a:d9:e8:22:6d:46:9f:
81:a1:ab:6c:8c:09:fc:a7:8d:2d:b6:d3:c9:34:17:
d7:b2:ea:ea:96:07:68:2a:8d:1c:63:e1:13:e6:b0:
44:b3:ba:5f:95:0f:20:ff:54:36:6e:dd:92:cd:ed:
e9:cc:01:35:aa:74:92:77:d2:fe:1f:e8:ee:4f:3a:
50:af:ff:1c:f2:5d:9b:1b:14:18:e6:38:c5:44:32:
2e:4c:ca:82:39:d0:67:88:55:0a:f3:bb:fb:83:6e:
81:59:e3:27:ae:50:e8:3c:87:f3:0f:5c:0b:f0:39:
43:56:dc:3e:c0:33:f4:b0:53:b8:fa:36:52:b7:33:
b0:87:2e:bf:72:08:1a:f6:0a:73:e8:24:24:6e:04:
e8:0d:60:ca:7f:8e:7e:d2:21:fc:ea:7b:eb:eb:93:
05:11:69:44:83:bf:a8:aa:3e:13:f1:37:91:99:e6:
f7:03:22:6e:2f:f2:73:51:97:93:6a:4c:e7:74:89:
96:37:a4:d0:63:c6:a2:c3:be:3a:5a:a4:74:2d:d2:
01:1d:dc:97:1b:68:ef:88:59:31:86:ed:4a:32:76:
dd:cc:c3:3e:fa:6d:62:cd:99:9c:87:53:de:ae:60:
0c:f9:66:92:ee:3c:23:2e:c2:1f:c4:d0:92:fe:5f:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:40:43:C8:8D:D8:D3:C7:3C:99:38:B2:7A:82:4C:94:02:F4:9E:5D
X509v3 Authority Key Identifier:
keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.228.0/22
Signature Algorithm: sha256WithRSAEncryption
68:81:01:eb:ac:27:4b:12:93:1b:2f:f6:68:38:59:ff:44:cb:
22:88:5a:b6:6e:5b:e8:db:f0:64:98:65:60:90:c2:7e:ed:73:
ba:0f:4b:42:e6:db:30:d8:80:3f:0a:ae:dc:da:73:26:06:e7:
0e:ec:9e:3d:5d:aa:1a:91:33:99:53:20:87:48:6a:72:8f:75:
6a:6c:76:d6:6b:af:9d:96:c3:c7:3b:b3:57:be:79:f6:91:43:
1e:11:31:ca:fc:a1:3a:ba:33:d1:99:66:6c:55:26:35:65:b8:
8d:41:b9:b4:2d:0e:71:d8:82:47:22:ad:ac:67:81:90:38:9e:
be:a0:98:c4:30:4d:76:77:cd:21:9e:08:7f:05:4f:53:1f:6e:
20:e0:f8:dc:8c:b1:33:57:c5:95:1d:2c:4a:41:59:4c:64:99:
d0:c1:f6:b0:e8:5d:21:48:9e:12:9e:fb:03:83:c1:3d:f7:2f:
08:42:88:89:b2:26:3f:80:9c:2d:43:c8:85:d9:8f:62:d3:ea:
ef:2f:91:0a:ac:ea:69:a8:dd:1e:1b:cc:d5:c9:0e:33:55:9a:
40:40:5d:f0:c2:57:95:10:f0:9a:68:df:0a:2b:b4:55:8b:5c:
55:a0:0f:a1:ca:34:6b:05:47:ab:b5:c4:98:f7:79:97:b7:8b:
2a:df:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:30 2025 by rpki-client