Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa
File: fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa (raw, json)
Hash identifier: Gp0oxYbqR8uF0JIVNiZGflyEv6T2n/2lVC4AqntijqM=
Subject key identifier: 7D:DD:D1:24:9E:BE:B7:93:0F:C4:53:23:68:E8:9E:33:2A:CD:8F:54
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 01963D992B36BD1740561C21D15C9845EB91
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa
Signing time: Wed 16 Apr 2025 07:56:10 +0000
ROA not before: Wed 16 Apr 2025 07:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 185.14.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:99:2b:36:bd:17:40:56:1c:21:d1:5c:98:45:eb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Apr 16 07:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dddd1249ebeb7930fc4532368e89e332acd8f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:c9:a6:d5:c4:46:e7:78:57:97:e8:55:4d:
c5:a4:f1:39:b7:2c:35:8e:ff:3f:06:5c:c5:68:4f:
cf:c5:70:da:90:85:79:b7:b9:51:a2:6f:5b:db:28:
ea:fe:93:39:93:ad:f0:d6:68:da:6a:14:1f:ad:9e:
eb:10:be:83:54:62:c9:97:cc:e7:39:36:7c:a1:bf:
5c:82:ec:1e:f9:41:63:fa:83:c3:0a:de:f7:01:77:
d1:30:2d:7f:c0:4d:bd:2a:a4:c1:9b:6d:f2:c0:ea:
6a:0c:b5:c4:9e:5b:17:a2:c0:8e:31:db:88:65:ec:
d9:07:60:3d:a7:18:5b:58:e6:2a:14:18:38:d3:39:
d5:3a:fa:b6:0d:86:bf:86:f6:ed:b5:4a:4d:07:af:
b3:ca:03:51:a7:67:e5:52:e4:22:3c:c5:12:bb:68:
0c:ab:78:41:74:b6:0f:4f:1a:2f:12:b5:7f:07:ef:
12:9e:a0:01:75:86:70:ef:c4:a9:95:05:24:d4:6b:
22:2f:71:b4:20:28:1a:92:71:2e:87:5d:22:44:da:
81:17:8d:2f:7c:4b:3c:5d:2d:7d:ef:9f:02:5e:52:
81:37:31:3c:17:cc:30:a5:02:27:09:8e:e7:df:d4:
e0:ac:d1:79:af:3d:ba:21:23:a0:9e:6f:ad:0c:08:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:D1:24:9E:BE:B7:93:0F:C4:53:23:68:E8:9E:33:2A:CD:8F:54
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d5:0c:7c:89:39:b5:21:fa:6f:80:f3:9e:d5:b8:ee:f1:0a:
e9:13:81:2a:4a:27:83:7f:d6:dd:9a:42:df:3c:56:69:ae:ea:
fa:fb:dd:8b:86:9c:cb:47:1b:42:1f:27:7f:3f:9f:ba:67:e1:
6d:6c:f6:69:d0:90:4a:a0:d7:6e:b8:71:68:38:00:42:99:f5:
fd:65:23:07:54:df:97:8a:0e:5e:8e:e7:40:59:68:36:de:b9:
dc:c9:c3:e6:fb:ab:7d:da:66:bc:b1:c6:e5:9a:d7:70:56:16:
cc:b5:3c:ae:be:b8:53:9a:69:fc:5c:f2:e4:5c:3e:90:28:8e:
3c:1e:a8:db:6e:1b:aa:69:cf:8e:91:12:1c:f9:f0:25:c6:51:
3e:4c:be:c6:4f:a0:33:7f:3f:45:8f:da:74:c6:d2:46:b9:08:
17:2e:c3:1a:00:bc:48:b0:a6:06:e7:55:0c:6e:0f:c4:83:3b:
e4:a8:33:16:82:32:c8:61:bf:31:5c:bb:4a:9e:fa:dc:9a:36:
e5:8b:53:ed:a4:a9:27:08:2c:36:4b:e9:88:05:e5:2d:04:ab:
db:82:29:56:de:1f:bc:cd:47:ea:2a:f3:9e:93:8d:b4:ae:57:
49:21:45:9e:90:7c:0f:2b:3d:0b:c9:3d:8c:59:08:7e:1d:67:
94:a2:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:44:00 2025 by rpki-client