Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/37GvZ07Bs9ALM-UjthgHQEKF0y8.roa
File: 37GvZ07Bs9ALM-UjthgHQEKF0y8.roa (raw, json)
Hash identifier: pSoIBelVOfgMsL7bvPvm9KNh08Z3vU+jb3PDyOFmyw4=
Subject key identifier: DF:B1:AF:67:4E:C1:B3:D0:0B:33:E5:23:B6:18:07:40:42:85:D3:2F
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 01978C592AA523D36A22909D863EA115A8D9
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/37GvZ07Bs9ALM-UjthgHQEKF0y8.roa
Signing time: Fri 20 Jun 2025 07:59:03 +0000
ROA not before: Fri 20 Jun 2025 07:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199878
IP address blocks: 185.42.140.0/24 maxlen: 24
185.42.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:59:2a:a5:23:d3:6a:22:90:9d:86:3e:a1:15:a8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Jun 20 07:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfb1af674ec1b3d00b33e523b61807404285d32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:e4:fa:bd:c0:f3:48:ff:cc:d0:3b:0f:b6:
c6:65:99:4b:6e:f4:34:ff:63:6d:f1:6b:cd:c9:c2:
57:99:1f:22:11:2d:44:ee:7f:13:47:8f:c4:b4:8a:
22:20:78:ed:ce:9e:b5:ff:30:37:31:40:ed:2f:3f:
7f:ee:22:20:6d:c0:6e:37:db:48:3a:b0:f1:e2:5c:
f9:72:dd:23:8c:2e:b7:e4:d7:28:e3:b6:59:97:6d:
ce:25:6f:09:45:c0:71:70:71:04:4a:2e:7a:28:3e:
d3:86:49:c3:a8:d4:60:cc:a5:f2:29:6c:5f:57:03:
ef:a3:87:7c:6f:1b:4d:23:dc:8c:0b:43:12:1f:3b:
3a:34:8e:75:13:fb:c8:ac:b2:ff:0f:41:b4:b0:99:
67:58:ef:6b:8e:21:7f:b9:0e:5d:ca:ca:e1:11:f5:
b7:df:2c:b0:31:0b:34:92:a8:6f:0b:d9:00:2f:06:
1e:83:76:b8:22:3f:4f:e6:d5:a3:9e:a8:24:8d:9e:
89:ff:b4:d6:36:07:2e:f6:09:70:3b:d3:f9:17:7f:
b6:cb:f0:69:70:a0:57:f4:20:d8:bb:a9:d4:5f:4b:
bd:55:2c:83:56:22:62:cf:2e:e4:40:42:17:8a:a8:
91:54:f7:5d:8b:fa:88:ea:df:2e:a4:00:a4:89:3d:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B1:AF:67:4E:C1:B3:D0:0B:33:E5:23:B6:18:07:40:42:85:D3:2F
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/37GvZ07Bs9ALM-UjthgHQEKF0y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.140.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f9:b8:3a:29:bd:19:10:47:c8:a3:3d:62:57:79:20:64:ba:
01:96:ea:28:99:4e:45:7a:33:13:e2:9c:52:4c:c1:5d:1c:4a:
06:c7:de:98:ee:78:d8:8b:35:94:3f:48:ef:d5:1e:10:87:f7:
44:85:c5:45:10:4d:a5:ad:bc:3c:e3:ae:74:c0:24:b9:67:22:
90:7a:9f:06:a0:d8:a6:6b:11:4a:43:2c:3c:de:3f:56:1b:29:
92:3a:ff:df:2a:b8:59:99:ab:27:f9:ce:fb:e6:df:47:77:25:
ae:e6:9c:f1:33:d0:08:97:37:35:31:f1:ce:45:83:de:78:98:
87:52:03:78:97:ba:5d:86:64:47:eb:df:6f:b5:1b:96:ba:3d:
75:06:4f:98:2b:39:b6:54:4b:1e:51:72:5b:ff:7b:f8:93:9a:
11:ba:eb:13:b0:16:57:8f:72:f1:bd:ba:42:cd:0d:0b:67:2c:
eb:71:6f:7b:50:26:1f:ee:ee:48:8c:ec:c9:e6:0d:c8:36:71:
37:52:8f:87:a1:76:62:07:96:14:8f:1a:04:dc:9c:80:68:bd:
67:32:93:30:31:3d:67:fc:1a:d0:ad:f3:28:c0:ca:e9:ea:95:
f1:d8:8d:74:f1:d6:3a:b7:ae:b1:ea:5b:23:f8:13:c4:75:18:
ec:5f:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:06:09 2025 by rpki-client