Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/g31y-rKLvjosua_ERt6smuGZVHc.roa
File: g31y-rKLvjosua_ERt6smuGZVHc.roa (raw, json)
Hash identifier: Hy8hOW+cMn+xBbfHloAf3HNQIZw1e0uLWvV6liqhbxo=
Subject key identifier: 83:7D:72:FA:B2:8B:BE:3A:2C:B9:AF:C4:46:DE:AC:9A:E1:99:54:77
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 01951D724566143E830E2068D8807A04D970
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/g31y-rKLvjosua_ERt6smuGZVHc.roa
Signing time: Wed 19 Feb 2025 09:03:02 +0000
ROA not before: Wed 19 Feb 2025 09:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40490
IP address blocks: 185.62.165.0/24 maxlen: 24
185.62.167.0/24 maxlen: 24
2a01:8840:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:72:45:66:14:3e:83:0e:20:68:d8:80:7a:04:d9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Feb 19 09:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=837d72fab28bbe3a2cb9afc446deac9ae1995477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:16:82:d3:a9:2f:d2:2b:af:88:6f:36:47:
5a:dc:20:f5:5d:08:92:05:0c:43:a1:f3:ad:0d:67:
82:61:99:70:9c:3e:4b:c8:51:8c:fe:2d:22:30:98:
22:74:34:30:39:d7:39:e4:a4:78:a5:ce:10:a3:e3:
e0:65:9d:6f:8c:bf:49:8a:4a:c7:bd:e9:0d:b9:51:
5f:8c:17:7f:cf:82:ad:34:48:e5:cc:88:46:ac:b4:
2a:c9:e1:19:fb:71:fc:f3:dc:0d:0d:a9:df:8b:ba:
ac:85:0e:91:fa:5e:1f:82:8c:79:17:ec:c6:f3:a2:
2f:32:ad:d8:bd:ba:9e:3d:fc:5c:d3:3a:5f:b6:e5:
cd:14:fc:5a:e6:00:8e:4f:4f:da:59:7a:74:04:95:
86:a5:1e:45:33:82:cd:27:d8:d5:ae:d0:43:82:20:
2f:9c:0d:30:96:a8:47:60:e6:23:aa:57:3c:f9:ba:
aa:f3:7a:5b:4d:d4:e0:e1:b5:bf:9f:7d:f3:59:71:
24:87:20:53:65:58:bd:cc:42:9f:43:70:62:7b:5c:
55:7b:5f:6d:81:65:db:e7:6b:88:d4:90:45:50:b7:
96:e7:c3:4a:a7:94:19:0b:77:de:8c:4b:8c:f1:2c:
f8:f0:6c:d5:5f:fe:a9:1c:c1:b1:39:be:6d:3f:9c:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:72:FA:B2:8B:BE:3A:2C:B9:AF:C4:46:DE:AC:9A:E1:99:54:77
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/g31y-rKLvjosua_ERt6smuGZVHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.165.0/24
185.62.167.0/24
IPv6:
2a01:8840:f::/48
Signature Algorithm: sha256WithRSAEncryption
78:81:e2:4e:50:da:43:f4:0d:b1:1e:5f:0d:37:45:b6:27:0a:
c8:25:a6:a3:3a:16:69:e6:d0:44:6c:99:20:73:8a:ae:40:00:
33:96:ae:43:f5:73:15:85:66:e4:af:dd:4a:1b:08:a3:f7:b7:
54:c9:8d:a7:d3:a8:3c:9c:71:7d:a2:9c:bb:f1:34:72:dd:58:
89:18:92:b6:d7:7e:a5:08:af:45:ae:11:58:c7:61:52:0a:03:
5c:17:b4:ae:3b:e0:e9:19:3a:9c:c4:e8:65:36:e3:f5:46:0e:
34:5c:3a:46:73:14:2e:ee:40:61:8c:90:9f:0d:7e:fc:6e:27:
0f:f1:ac:fa:b0:4f:d0:bd:79:25:93:93:15:5b:ba:a1:4b:55:
4f:73:ea:ae:fa:a1:59:d1:8d:43:f3:6c:a8:d2:5a:c9:aa:2f:
34:22:d8:7a:19:c7:3a:6f:60:33:3f:36:a4:c3:8c:77:cc:42:
e7:db:a5:7b:42:61:b4:2f:42:6c:93:fb:bc:38:71:d4:bc:8f:
74:67:b0:5b:eb:8c:a4:10:4e:5e:e9:7d:92:ff:89:be:e7:bd:
b1:76:6a:0a:46:a0:5c:ed:bf:96:ca:1b:52:2a:9d:94:cc:e1:
33:27:a9:65:b5:11:e7:a6:be:51:dd:91:cd:d4:b7:05:6c:ae:
54:82:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:00 2025 by rpki-client