Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/V9TCe7mXJBH58d-15AGeUYfc0cM.roa
File: V9TCe7mXJBH58d-15AGeUYfc0cM.roa (raw, json)
Hash identifier: hoxc5Dur4oAZR+SCmAqnZb+/Hrq6+3AzAIRJJu/YQd0=
Subject key identifier: 57:D4:C2:7B:B9:97:24:11:F9:F1:DF:B5:E4:01:9E:51:87:DC:D1:C3
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 019560176314AB734CCE8E7F9E393D775E24
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/V9TCe7mXJBH58d-15AGeUYfc0cM.roa
Signing time: Tue 04 Mar 2025 07:38:20 +0000
ROA not before: Tue 04 Mar 2025 07:38:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205868
IP address blocks: 37.130.140.0/22 maxlen: 24
146.66.228.0/24 maxlen: 24
2a00:7380:feed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:17:63:14:ab:73:4c:ce:8e:7f:9e:39:3d:77:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Mar 4 07:38:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d4c27bb9972411f9f1dfb5e4019e5187dcd1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:b2:34:73:ef:cb:b3:0f:a7:cd:59:d5:8c:
b0:77:07:82:ab:80:89:85:6b:f2:18:a7:e6:ad:c6:
35:33:d5:7d:46:e0:d4:30:7f:76:1d:35:33:a3:f9:
07:f2:5b:d2:6a:aa:af:01:bf:eb:d9:c9:5a:a9:86:
86:f3:b5:b4:92:6f:33:ca:cb:a8:5a:dd:5c:72:69:
8b:96:07:43:76:73:df:48:b7:8b:19:a2:32:75:82:
87:b1:ac:c9:dd:bb:41:b7:18:53:ea:bf:7d:19:63:
29:22:38:0d:d4:62:92:e2:42:8b:38:7d:94:84:70:
e3:cf:02:9f:b1:82:00:ed:7d:2a:ed:77:9a:a1:e2:
2c:fd:59:5c:6f:90:f5:e0:94:aa:8e:67:eb:e8:67:
91:bb:73:86:72:a0:2a:d1:0c:fa:a8:3e:f0:da:fd:
ee:58:09:ba:fc:63:8e:6b:60:59:90:9c:08:95:33:
e6:b1:91:a5:e6:ba:31:79:6f:2c:cb:06:fe:6d:ed:
23:7d:9b:cb:1f:27:39:2e:54:db:64:c4:fa:b3:e0:
c1:90:f9:f1:11:e4:35:83:6f:cb:0c:ca:b3:a2:ed:
e4:34:9d:df:ed:da:a8:92:f4:e3:f4:97:58:77:04:
29:72:c0:1f:18:28:5a:9b:2a:b1:d5:88:19:17:61:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:C2:7B:B9:97:24:11:F9:F1:DF:B5:E4:01:9E:51:87:DC:D1:C3
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/V9TCe7mXJBH58d-15AGeUYfc0cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.140.0/22
146.66.228.0/24
IPv6:
2a00:7380:feed::/48
Signature Algorithm: sha256WithRSAEncryption
03:87:2e:9e:96:9b:ff:35:cb:0a:5e:c2:69:33:14:a7:0d:a7:
4f:4c:d8:b7:ba:b5:13:5b:55:e0:49:b9:fc:74:7d:35:01:5b:
f2:19:2c:ad:f1:16:bf:3d:fe:74:24:c3:cb:c3:2a:5f:69:13:
84:36:f1:7c:02:1e:5d:5f:de:73:39:6d:61:a2:da:f6:04:5f:
09:9b:3d:4a:35:45:6f:f8:48:7f:c3:01:b1:64:1d:92:5c:8f:
61:a3:6b:6b:52:24:68:1c:78:bb:d1:ec:68:48:d3:78:b2:59:
48:40:cd:1b:1f:dd:9d:c6:82:98:88:96:5d:05:6b:72:58:a2:
da:c7:54:7f:94:b3:75:08:b5:ea:aa:28:1c:bb:a9:b0:c1:29:
69:90:31:bd:e8:88:ca:9b:da:40:1d:e1:af:9e:87:d8:d8:6e:
bf:ad:43:1b:dd:41:eb:fe:56:01:80:59:98:9f:64:0a:c7:14:
22:de:c4:2a:af:53:b0:bc:31:f1:d0:3e:f5:74:d0:2b:40:ad:
18:71:7f:3d:2b:cb:28:41:b4:cd:21:87:8c:3c:8a:db:7c:d7:
d6:19:c2:17:80:78:9d:a5:ac:da:6d:3f:be:e8:2b:4b:fe:e9:
48:99:8b:f0:02:13:71:3d:86:37:a9:d0:5e:31:fc:39:a3:21:
dd:61:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:52 2025 by rpki-client