Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/c47adC4Bxlaw5597wV2V7KU0TIk.roa
File: c47adC4Bxlaw5597wV2V7KU0TIk.roa (raw, json)
Hash identifier: LtdOn5FUGrZ35ebiBFAgNw0wB+y/797Rd6pVef69jvw=
Subject key identifier: 73:8E:DA:74:2E:01:C6:56:B0:E7:9F:7B:C1:5D:95:EC:A5:34:4C:89
Certificate issuer: /CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Certificate serial: 019423D6C0EACB547FD969459606187C2109
Authority key identifier: B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/c47adC4Bxlaw5597wV2V7KU0TIk.roa
Signing time: Wed 01 Jan 2025 21:47:44 +0000
ROA not before: Wed 01 Jan 2025 21:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39307
IP address blocks: 185.222.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c0:ea:cb:54:7f:d9:69:45:96:06:18:7c:21:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d701af43fd7f86cb3e04ce3ab542e559c6d4b7
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=738eda742e01c656b0e79f7bc15d95eca5344c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:08:18:81:a0:50:38:db:5e:ef:0c:d8:ac:14:
05:a7:48:21:3d:f1:c0:79:a2:66:f6:51:15:b0:8c:
37:f6:cf:89:7f:03:ba:8d:7b:90:84:7a:94:ac:f3:
3f:e6:54:ec:12:34:49:90:ba:81:49:db:db:dd:f7:
a5:5c:21:c1:56:ab:a6:60:33:7f:71:0b:7e:3d:bf:
82:90:b5:94:83:7f:4f:1b:bd:05:6f:0e:06:ee:e5:
6c:34:4d:62:ff:9a:18:a6:52:8e:a4:f2:45:55:de:
04:d0:33:6e:14:35:30:a3:f7:79:82:a7:c0:31:44:
13:96:47:8c:38:f1:fa:19:7a:79:45:13:4f:73:b7:
c3:85:8a:53:b9:bf:60:61:d7:47:fe:96:b7:b4:17:
46:4e:d5:a9:b3:95:43:b5:6d:39:86:06:2b:f8:1f:
9f:f8:e5:98:28:71:56:75:1d:36:4a:b8:a6:e5:0a:
f0:d5:a4:d2:a1:d3:a3:da:d9:3a:bb:3c:8a:5d:44:
ac:6d:d4:d0:d9:42:a5:fe:92:ae:4c:86:34:7b:ef:
90:f6:4f:f8:84:27:2b:2a:f6:e2:fd:b0:f1:32:43:
8b:70:56:b4:62:6d:77:06:14:14:d4:d6:67:0d:a5:
eb:79:df:b5:c2:1c:db:5c:45:c3:d6:ac:48:dc:36:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:DA:74:2E:01:C6:56:B0:E7:9F:7B:C1:5D:95:EC:A5:34:4C:89
X509v3 Authority Key Identifier:
keyid:B8:D7:01:AF:43:FD:7F:86:CB:3E:04:CE:3A:B5:42:E5:59:C6:D4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/c47adC4Bxlaw5597wV2V7KU0TIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c7dd35-ef0f-4c5e-9ba6-0086a0c4e18c/1/uNcBr0P9f4bLPgTOOrVC5VnG1Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.23.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7b:35:b3:96:f1:91:83:25:96:31:0f:21:0b:55:df:a8:2e:
32:77:f3:54:2a:52:7d:7d:c1:3d:23:8d:48:2d:35:56:d7:fc:
3e:05:ae:53:35:a9:f1:7f:df:9e:92:78:d9:25:44:35:ae:fe:
91:ed:2b:0b:17:fc:ae:7f:3f:aa:99:bd:b8:29:fc:1b:bd:52:
06:6d:6c:b5:9a:aa:92:2e:19:48:10:c9:d6:1a:0b:e6:ea:de:
f9:b1:99:94:8b:a1:0c:46:35:dc:da:f6:70:f2:64:6e:79:d6:
b9:28:82:1f:ed:10:0c:23:fe:df:87:02:df:47:ca:02:40:d9:
a4:c2:38:c7:2b:fd:86:a4:fb:61:bf:9b:32:e9:cd:4f:cc:5c:
57:a8:cf:08:aa:1c:a5:f7:1e:8b:d4:39:2d:c4:b2:54:8c:57:
8e:47:9b:56:b8:19:e5:c0:f8:6f:15:5c:1e:54:17:13:b4:dd:
7b:cb:86:10:ac:8a:2b:31:81:ce:3d:6a:8f:3e:44:89:88:09:
52:ec:20:d3:7c:d3:da:bd:79:f4:8b:6e:d0:c2:96:ab:ae:92:
28:ae:c6:4b:7c:b8:0e:ca:25:89:9f:a0:00:b2:1b:97:b4:d5:
de:a8:f9:59:e0:03:db:96:1f:1e:5a:e2:94:52:47:be:92:97:
b6:1b:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:32:44 2025 by rpki-client