Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa
File: t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa (raw, json)
Hash identifier: DgVk1B4aExECpWEcAT+MKrSw8s1OZ50aoeFXQKO0kng=
Subject key identifier: B7:EE:E7:83:DC:1C:67:A0:D2:3C:C8:24:78:B8:09:F4:01:7E:F8:EE
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 019661CD0D428270EA45DC207AA5A0340D7E
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa
Signing time: Wed 23 Apr 2025 08:39:10 +0000
ROA not before: Wed 23 Apr 2025 08:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60619
IP address blocks: 185.249.144.0/22 maxlen: 22
2a0c:6280::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:cd:0d:42:82:70:ea:45:dc:20:7a:a5:a0:34:0d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Apr 23 08:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7eee783dc1c67a0d23cc82478b809f4017ef8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:90:81:7b:b6:4a:bb:8a:b3:a4:56:71:3c:
40:8a:0d:46:05:49:74:7f:e2:4a:79:be:e3:eb:09:
a5:2c:11:0d:41:5c:b1:a4:e0:6f:2e:81:a8:6e:4a:
50:68:b7:60:4b:da:14:a9:e1:13:f8:5c:4b:ba:fd:
b6:8c:82:c3:30:bb:cd:c0:cb:c7:91:16:e0:8d:bb:
7d:16:b5:11:7a:6a:01:0a:de:9e:59:09:e3:be:48:
8a:d0:0c:04:37:9b:b0:3f:29:50:34:aa:cb:1c:1e:
01:7a:5f:d5:a3:f1:ca:a2:23:97:37:e9:37:33:6c:
05:49:cb:6b:51:46:9c:2f:c4:c1:1b:54:af:48:ff:
76:0a:1b:2b:af:63:69:d3:5c:4d:02:83:b2:94:67:
62:44:a5:eb:31:a6:40:04:11:ca:48:d9:e5:e9:ae:
6b:d3:3e:a3:bc:90:36:b6:e0:26:5b:d5:64:56:6d:
5e:68:ec:47:c4:b6:62:a5:81:f8:d5:8e:10:3c:7c:
ec:fb:8e:86:e5:5e:66:d8:d0:77:a7:a8:4a:f7:ee:
52:10:8c:4a:ae:54:cc:98:95:dd:04:c0:12:b0:5d:
49:52:50:6b:e2:d9:35:e6:d2:9c:f8:ce:66:d0:d8:
e7:95:47:da:47:d4:95:9d:8f:4d:83:34:dc:85:4d:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:E7:83:DC:1C:67:A0:D2:3C:C8:24:78:B8:09:F4:01:7E:F8:EE
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.144.0/22
IPv6:
2a0c:6280::/29
Signature Algorithm: sha256WithRSAEncryption
61:8f:7b:64:93:ab:d1:a1:44:c3:31:cf:e8:ba:14:f5:30:77:
af:91:9a:8f:3f:0d:87:71:72:82:43:2c:e9:c5:6c:c8:68:6d:
a3:dc:8a:82:d2:e8:72:11:a5:9f:fe:41:06:3b:5e:c7:05:dd:
74:51:81:a0:ed:fd:ca:dd:2b:29:88:37:62:ba:ed:14:ee:c0:
02:14:7f:99:9e:56:e5:b6:61:30:52:7d:c4:f4:a7:55:17:8e:
25:f4:26:03:be:fa:73:cf:55:c4:62:e1:3f:9b:91:4b:8d:47:
52:c3:61:4a:c4:8d:4c:72:2a:fe:f9:ba:2a:6c:4b:26:49:26:
0f:2b:f2:7d:f9:08:79:cb:ee:82:d8:64:55:72:19:cf:aa:e9:
e7:91:bc:0c:0a:c4:8e:55:18:67:ea:f9:ec:a4:75:f8:c6:77:
58:b0:58:4d:85:41:47:d7:72:74:40:08:49:47:17:78:4e:53:
6d:36:2e:d6:63:69:07:6d:dc:cc:86:a9:41:29:cd:70:2d:96:
e1:b9:4c:c9:f9:92:18:2a:5a:4d:03:9c:eb:0b:1c:81:81:2b:
a1:30:82:8d:c2:16:4f:f2:8f:47:49:35:a2:7e:85:5c:4a:e1:
82:52:e0:6e:92:81:5e:74:99:4b:a6:39:50:9a:dc:4f:4a:cb:
83:29:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:11 2025 by rpki-client