Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa
File: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (raw, json)
Hash identifier: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=
Subject key identifier: 7C:DD:DB:7D:56:45:B1:80:30:4A:DE:A5:8C:82:AE:15:D2:2B:61:3C
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019643302446DB641AEC66385764FECCB714
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa
Signing time: Thu 17 Apr 2025 09:59:10 +0000
ROA not before: Thu 17 Apr 2025 09:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197075
IP address blocks: 151.248.14.0/24 maxlen: 24
185.219.85.0/24 maxlen: 24
185.219.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:30:24:46:db:64:1a:ec:66:38:57:64:fe:cc:b7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Apr 17 09:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cdddb7d5645b180304adea58c82ae15d22b613c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:0e:f3:84:92:25:28:3b:51:63:ce:2f:5c:
b7:21:5d:f5:56:94:76:48:6f:50:51:2c:d7:90:de:
7a:0e:3f:1e:74:c1:50:ba:fb:db:08:aa:c4:1f:cf:
90:a4:74:c5:85:07:06:b8:55:59:a1:bc:9f:e5:6d:
c8:9b:e6:27:ee:a0:2b:e9:f3:19:22:9a:50:2f:d0:
57:39:d5:70:a8:b6:f5:e9:11:a2:27:ff:ae:d2:37:
9e:7a:82:b0:c5:b1:b3:0b:55:28:9d:60:a6:ac:7c:
59:27:00:92:75:0e:e3:d3:d7:57:42:24:6b:da:81:
4e:24:a3:55:e0:cd:70:b8:12:82:02:18:2f:48:84:
7c:7c:cb:72:65:34:38:f1:1a:08:2b:10:3c:a2:84:
7e:d9:d7:d2:ed:2a:8f:5a:8a:c9:6c:be:38:7f:73:
2e:d1:c6:d2:20:9c:c4:49:48:48:0e:95:44:be:84:
ca:be:64:16:b5:91:12:01:cc:48:7e:f2:e5:b2:13:
95:a0:d1:1f:76:ba:bf:d5:c9:d2:87:e9:4b:aa:d2:
74:15:52:f9:99:40:44:31:68:ea:5f:d0:19:d6:a1:
25:6f:70:ba:c4:26:cb:a5:67:42:b4:7f:e3:ed:7d:
02:5d:c2:a4:03:14:eb:cb:f1:27:f0:d6:58:93:6c:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DD:DB:7D:56:45:B1:80:30:4A:DE:A5:8C:82:AE:15:D2:2B:61:3C
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.14.0/24
185.219.85.0/24
185.219.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d5:2d:1b:f9:e4:c2:2e:83:8a:6a:29:1b:bb:84:15:50:ef:
8f:15:28:52:41:fb:42:e3:c1:7d:45:6e:4c:64:74:6b:2f:af:
e4:3d:3c:83:56:e6:ff:af:75:88:63:4b:16:8e:12:61:65:d1:
b5:5c:e1:9c:09:72:83:8f:9e:7e:51:f8:d6:95:0c:03:35:bd:
79:d7:27:08:f6:9a:cb:6b:a7:59:73:52:9f:a5:04:af:bf:8f:
21:9b:ed:73:e0:57:16:5b:24:5e:b3:b1:7f:83:06:88:8c:1d:
63:d4:a0:2c:4e:e6:9a:37:d0:ab:af:47:1d:4f:a4:2e:79:22:
bb:d7:82:d0:cc:6e:aa:6b:0f:90:35:2b:08:27:cf:5e:13:51:
35:a1:e9:9e:53:90:58:cb:1e:03:d6:ce:31:b1:53:c4:45:07:
fb:98:f2:2f:5a:cc:b9:cd:20:c6:f6:f5:ba:09:36:28:90:d7:
cb:43:94:8c:91:57:97:91:50:b6:e1:df:fd:c4:5c:c6:b7:da:
d4:57:5c:55:d3:2d:f4:72:85:40:03:0c:b1:a7:b7:aa:db:06:
55:35:97:02:0f:0a:64:be:ca:f2:dc:25:5d:79:3f:6d:29:e0:
00:55:ff:a3:2c:1f:95:83:4f:32:b1:7c:83:5a:24:05:06:6b:
ed:bd:8f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:24:58 2025 by rpki-client