Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7K_fXBgx0WXt0gGYJ6jjRgUKATo.roa
File: 7K_fXBgx0WXt0gGYJ6jjRgUKATo.roa (raw, json)
Hash identifier: UsnozRUQs3hkcM2EUwqVf37Hx3WFirrJkKfa3m5CS/M=
Subject key identifier: EC:AF:DF:5C:18:31:D1:65:ED:D2:01:98:27:A8:E3:46:05:0A:01:3A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01968DBE23F6CB81D293742298F5F6058503
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7K_fXBgx0WXt0gGYJ6jjRgUKATo.roa
Signing time: Thu 01 May 2025 21:26:10 +0000
ROA not before: Thu 01 May 2025 21:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11798
IP address blocks: 185.207.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:be:23:f6:cb:81:d2:93:74:22:98:f5:f6:05:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 1 21:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecafdf5c1831d165edd2019827a8e346050a013a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:96:43:92:6b:1a:ff:21:80:59:70:be:93:
d4:24:59:90:53:c4:0e:ae:49:d3:f5:41:0e:a9:bc:
05:81:a4:5a:ae:2a:03:b5:47:62:bc:e4:2d:71:27:
c0:7f:a9:45:87:1b:93:ba:e7:ac:7a:9e:d8:52:ac:
04:91:ed:8b:af:99:38:f3:f0:fc:5f:8b:7f:ef:87:
96:7c:f5:a2:6d:22:75:aa:a9:5a:3a:57:74:ad:27:
eb:09:4c:3e:e9:f7:04:6a:16:33:eb:ab:18:5f:69:
d2:28:17:74:c0:21:72:5d:c9:12:33:66:4d:b6:0c:
d0:b6:57:8d:c3:21:61:49:1b:5b:e4:6f:26:2e:85:
b7:6a:fd:ea:b7:e5:a7:4f:fa:3d:86:33:e1:37:ad:
78:18:23:90:ea:b7:5c:69:bf:2e:4a:fe:a7:36:b0:
95:d7:06:ad:ad:99:ae:b7:66:bd:22:c2:af:f8:75:
a7:5e:c3:78:8b:81:32:65:b9:56:24:23:4e:07:48:
a6:76:35:4d:ab:25:1f:52:63:43:03:2b:8e:4d:04:
54:e9:1a:11:58:5f:7a:f6:a0:05:92:43:f8:99:01:
4a:a5:d1:08:1b:06:9f:d2:28:67:25:0d:84:55:ef:
97:98:97:96:ea:ac:71:21:a9:fd:52:ca:2a:b9:f3:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:DF:5C:18:31:D1:65:ED:D2:01:98:27:A8:E3:46:05:0A:01:3A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7K_fXBgx0WXt0gGYJ6jjRgUKATo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:49:70:68:84:4e:d1:58:2a:8a:03:13:6e:09:c2:99:05:68:
3d:d2:11:a2:35:9a:dd:14:d4:de:14:ab:e3:87:e4:7d:71:83:
54:b5:ad:bb:9a:3e:b6:6e:ec:11:0a:3b:06:de:af:ab:c1:6f:
4d:f1:2d:c7:a6:63:0c:fd:19:e5:76:66:71:0d:39:8b:14:84:
5a:9a:d3:f8:33:1d:17:91:ab:72:4d:0c:bb:d6:45:84:b5:6a:
74:60:cd:e3:21:88:a8:fd:c2:92:2c:c0:50:25:e0:25:36:33:
5f:9e:bf:f8:9a:44:59:21:7f:7e:c1:b3:e2:83:b7:f3:8c:9e:
85:db:b4:76:27:a8:68:89:c7:2f:c6:71:33:ad:40:57:70:25:
61:40:f5:56:7b:83:28:00:79:87:b6:3e:d6:96:7d:9e:75:a9:
9a:cf:ef:a2:2b:42:3c:3a:04:10:22:a3:6c:0f:91:73:52:d4:
b9:75:bd:00:3a:3b:df:51:2d:37:ea:bd:10:10:bb:08:ad:97:
f1:96:ea:cd:95:b3:a1:35:9f:60:5b:ca:58:a3:e8:4e:36:df:
cf:e0:6b:f3:af:4c:f1:78:c0:5b:95:df:e0:02:f7:e8:c3:2f:
2f:ba:ea:25:27:3b:c9:59:6a:36:d9:bb:06:d2:39:f8:fe:62:
89:d5:d2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:56:31 2025 by rpki-client