Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/ReM7E0Ct8Is2t6gxw6bBURtAJ3I.roa
File: ReM7E0Ct8Is2t6gxw6bBURtAJ3I.roa (raw, json)
Hash identifier: PorOfRQoP4oTBL/MW3C7RSgIC8L1gHDvURWlRM6jfmo=
Subject key identifier: 45:E3:3B:13:40:AD:F0:8B:36:B7:A8:31:C3:A6:C1:51:1B:40:27:72
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 019662A1B0C9A47FC80F904305E4F9B614FE
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/ReM7E0Ct8Is2t6gxw6bBURtAJ3I.roa
Signing time: Wed 23 Apr 2025 12:31:25 +0000
ROA not before: Wed 23 Apr 2025 12:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213659
IP address blocks: 185.84.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:a1:b0:c9:a4:7f:c8:0f:90:43:05:e4:f9:b6:14:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Apr 23 12:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e33b1340adf08b36b7a831c3a6c1511b402772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:c1:bc:9d:85:a7:d3:99:db:7d:31:4f:3f:
6f:3e:e5:b8:50:4e:c2:93:20:47:81:4f:a4:60:05:
a6:ad:5a:8e:2a:78:41:c5:c6:e4:60:44:ca:84:87:
e3:a2:9a:c5:08:f4:4e:23:71:fc:70:2a:46:50:17:
f8:4e:45:5e:b9:c3:c6:2a:45:1c:68:3a:1c:cb:a1:
a3:37:31:fb:82:93:64:4f:10:d0:bb:6a:33:aa:87:
ff:65:d3:45:f3:ba:50:b7:77:dd:a2:41:57:91:41:
43:b4:62:da:87:c9:8c:2f:dc:07:16:4f:f1:e6:a5:
08:1c:7f:40:3a:51:18:ec:a7:77:69:fd:06:c5:b4:
b0:84:b0:f5:37:cf:8b:a4:df:f7:00:7e:cc:e7:91:
06:0e:ab:52:fd:fe:8d:f9:71:e3:c8:83:cf:70:29:
94:cb:2a:f9:fa:8d:ae:70:e0:08:7b:ed:4e:76:c2:
91:87:85:0c:d0:b1:eb:2a:59:e3:f4:d1:28:33:3a:
75:ee:72:70:ad:55:27:95:3d:e6:d5:34:be:45:cc:
04:60:eb:13:c3:18:3d:62:60:bd:56:b8:61:6e:1f:
10:cb:00:fe:5c:86:ff:ac:52:dd:be:86:29:a5:c8:
5c:a4:f3:85:96:58:ab:76:90:ee:4b:6f:0c:48:e4:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:3B:13:40:AD:F0:8B:36:B7:A8:31:C3:A6:C1:51:1B:40:27:72
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/ReM7E0Ct8Is2t6gxw6bBURtAJ3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d7:2c:99:51:13:70:61:af:8c:81:16:32:04:6a:37:d1:85:
75:44:5c:9d:fe:06:37:3d:99:e1:4f:a9:8e:3d:ca:16:ee:51:
69:e2:62:a0:85:47:55:41:95:f9:b6:fc:be:0b:38:11:0c:3a:
fd:a5:c6:8e:47:9c:c9:75:73:70:c5:82:1a:b8:d1:1c:99:cf:
8d:02:a5:ca:45:ab:d8:a8:9b:0f:1c:dc:14:dd:ba:49:d7:ed:
45:ec:65:3f:91:62:bd:9b:36:82:e1:e1:bf:20:f8:19:62:b0:
f2:6c:f9:b8:b9:27:57:8a:13:15:ab:29:f9:4c:22:3c:30:4d:
2e:ac:14:f2:33:78:e1:ec:1e:1d:b6:9b:5b:57:23:0b:dc:33:
64:14:87:ff:a6:98:f2:fd:b6:00:8f:46:11:5b:ac:9b:86:da:
2d:a4:ce:db:ab:42:57:d3:b4:67:2e:0b:6b:75:33:02:d5:fe:
39:a6:57:c1:3a:d7:a4:69:85:c9:4a:07:f1:bb:19:98:3b:31:
e9:3b:37:a4:ae:66:df:cc:97:1a:ca:88:18:43:1f:03:12:a6:
32:ff:04:3f:a8:b7:60:26:ba:be:49:ab:ac:23:13:24:f5:4c:
65:b7:9e:ff:5c:c8:39:44:cf:e9:55:da:f3:e4:1e:1e:3f:32:
28:15:24:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:03:37 2025 by rpki-client