Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/x-pf71LMqWAOfz_edcWa4jqcFtw.roa
File: x-pf71LMqWAOfz_edcWa4jqcFtw.roa (raw, json)
Hash identifier: R9d0veM+s5qj9VQxcv57hMUlsfI6YWyDvMX5S+dYnf4=
Subject key identifier: C7:EA:5F:EF:52:CC:A9:60:0E:7F:3F:DE:75:C5:9A:E2:3A:9C:16:DC
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 0194AD138A8960BDDA217057C3FE64E074B0
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/x-pf71LMqWAOfz_edcWa4jqcFtw.roa
Signing time: Tue 28 Jan 2025 13:22:06 +0000
ROA not before: Tue 28 Jan 2025 13:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206190
IP address blocks: 185.194.8.0/22 maxlen: 22
185.194.8.0/23 maxlen: 23
185.194.8.0/24 maxlen: 24
185.194.9.0/24 maxlen: 24
185.194.10.0/23 maxlen: 23
185.194.10.0/24 maxlen: 24
185.194.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:13:8a:89:60:bd:da:21:70:57:c3:fe:64:e0:74:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jan 28 13:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ea5fef52cca9600e7f3fde75c59ae23a9c16dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:31:3a:89:6b:58:54:7d:92:26:b7:e6:e0:
d3:21:ff:36:0a:88:53:66:f8:f2:72:dd:3c:fb:14:
0a:14:a1:05:73:11:a8:d0:16:51:10:f9:ab:b3:29:
5c:2d:b7:dc:71:6d:2f:3e:a8:38:32:18:90:af:e2:
9e:08:ef:ee:85:99:80:f6:03:57:ba:70:8e:40:0b:
42:5b:06:2d:d7:6d:99:0b:b4:53:26:78:40:50:c0:
f0:6a:8d:90:cf:ee:29:4a:93:93:8c:d6:40:62:59:
08:1f:42:dc:5d:c0:bd:ea:16:23:5e:03:ca:aa:d3:
01:e5:20:73:7c:51:aa:e9:dc:a0:ff:47:2c:e5:e5:
08:a5:29:0c:b0:25:a8:40:1c:ca:6a:25:a0:80:97:
a5:ab:a2:7e:86:97:78:da:71:f2:fa:ca:55:18:91:
27:a8:d9:35:b3:a3:44:7b:b0:f8:7b:d2:7e:79:74:
da:2e:fe:2b:7c:80:c9:27:64:7c:46:d7:6f:53:e1:
fc:fa:52:f4:81:62:99:dd:db:41:47:c0:8d:b3:33:
34:77:e5:3d:dd:2c:04:63:be:31:c1:8c:81:59:e9:
af:14:f2:4a:bb:29:a6:04:07:3f:50:af:c6:7d:80:
19:4a:78:a5:65:0a:bc:d7:b0:49:d7:ad:0f:a1:d4:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:5F:EF:52:CC:A9:60:0E:7F:3F:DE:75:C5:9A:E2:3A:9C:16:DC
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/x-pf71LMqWAOfz_edcWa4jqcFtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
88:68:3d:ec:d5:f1:ff:43:a0:2c:19:8c:2a:cc:25:ab:aa:73:
2a:1c:6d:00:93:ae:4d:4e:a7:88:ad:d5:29:59:b5:39:5e:fd:
c7:6f:06:76:1f:c7:a6:e9:3b:f0:94:2f:9a:d8:d6:18:92:e0:
8c:01:7a:55:b4:2a:0a:82:c8:68:f3:42:9d:ee:e7:5c:7c:2e:
66:1b:73:ce:d7:ff:42:94:68:8b:53:97:8f:81:b3:73:31:b7:
63:ad:18:98:01:e9:1d:4e:62:ed:0f:09:e9:e9:71:d9:a6:17:
6c:1d:23:4e:32:cd:50:d3:54:86:b3:10:b2:5c:cc:8a:23:e3:
80:62:81:9c:be:28:06:92:cb:39:22:4c:20:30:84:34:8b:d0:
da:df:f6:4a:93:ed:b6:9d:3e:b8:e8:5a:50:54:e5:3e:ac:39:
f5:4f:e8:3d:05:8e:c2:d9:87:33:d5:bc:eb:10:0c:6f:b9:72:
b6:d0:fd:17:bf:94:7c:06:b9:3d:11:9c:f4:14:53:ad:03:fc:
39:7e:20:81:c2:ba:fb:b0:7f:45:4f:50:ca:bc:57:49:da:61:
05:9a:b1:7b:b1:b3:fe:d5:c6:12:ab:c6:c2:d9:7d:7a:7b:cf:
ec:dd:94:c8:52:a5:84:2a:79:d6:b8:ef:1e:a9:59:7b:03:40:
b8:1a:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:51:29 2025 by rpki-client