Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/TV8bjX2iYLQ_K3xvyPQFBg8_5j4.roa
File: TV8bjX2iYLQ_K3xvyPQFBg8_5j4.roa (raw, json)
Hash identifier: igohX63jX8Cxe5hsEllsQKaFbZphTldJC29RHVnM4dA=
Subject key identifier: 4D:5F:1B:8D:7D:A2:60:B4:3F:2B:7C:6F:C8:F4:05:06:0F:3F:E6:3E
Certificate issuer: /CN=c9633fa6fc66b43639c056d02174f80c2426614b
Certificate serial: 019423D74B6895986B1C5F056ADA98B43BAA
Authority key identifier: C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/TV8bjX2iYLQ_K3xvyPQFBg8_5j4.roa
Signing time: Wed 01 Jan 2025 21:48:19 +0000
ROA not before: Wed 01 Jan 2025 21:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.166.140.0/23 maxlen: 24
185.166.142.0/24 maxlen: 24
185.166.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:4b:68:95:98:6b:1c:5f:05:6a:da:98:b4:3b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9633fa6fc66b43639c056d02174f80c2426614b
Validity
Not Before: Jan 1 21:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d5f1b8d7da260b43f2b7c6fc8f405060f3fe63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:c4:9e:90:20:56:d2:97:56:4f:59:5f:a7:
dc:7d:97:28:47:80:cc:bc:01:73:c0:6a:8b:9b:e3:
dd:75:f8:97:51:2c:2e:fb:ad:35:ee:a5:f2:6a:3d:
b7:96:98:2f:f7:33:a5:41:a0:5d:cb:f1:50:70:06:
1c:d4:68:a1:30:1d:cc:67:87:bb:1e:3b:e5:6e:39:
e8:32:de:77:9a:68:14:11:d3:37:2e:2e:d4:05:74:
4b:9d:83:33:aa:66:c8:b6:fe:df:7f:fb:6b:39:4a:
5e:26:c4:7a:43:8a:4b:4a:5f:b4:39:9a:1c:d3:8e:
78:96:c0:e5:7e:5a:ec:35:3d:3f:2f:41:b4:b6:42:
1e:91:e9:4c:8f:67:78:f2:a1:af:f8:20:c0:de:3b:
e9:3c:1c:d6:d8:54:09:84:f2:5f:e0:ab:10:a4:5b:
d3:9d:77:10:78:d8:24:66:7a:b1:9d:78:dd:fd:37:
e3:3f:48:c9:2a:2e:22:70:e6:e8:fe:b7:39:c6:78:
b5:d8:8e:f2:94:3d:ec:1d:e3:9c:a5:27:62:62:38:
21:6d:11:8e:35:f0:26:f6:48:07:3d:0d:50:6b:1f:
18:5f:94:cb:3d:7e:a1:ed:0e:ac:b5:5d:a7:93:b9:
b6:e9:7d:93:ff:8d:c2:a7:10:aa:ba:97:aa:a0:ca:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5F:1B:8D:7D:A2:60:B4:3F:2B:7C:6F:C8:F4:05:06:0F:3F:E6:3E
X509v3 Authority Key Identifier:
keyid:C9:63:3F:A6:FC:66:B4:36:39:C0:56:D0:21:74:F8:0C:24:26:61:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWM_pvxmtDY5wFbQIXT4DCQmYUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/TV8bjX2iYLQ_K3xvyPQFBg8_5j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/yWM_pvxmtDY5wFbQIXT4DCQmYUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.140.0/22
Signature Algorithm: sha256WithRSAEncryption
48:a2:0b:b5:6a:68:42:91:02:9d:a3:ca:1f:79:00:73:61:04:
fb:fd:3a:d5:97:20:a3:43:df:4c:69:49:74:a2:11:de:96:be:
81:59:b4:b9:9a:31:8c:51:ae:82:38:b5:bf:79:91:cd:76:35:
aa:4c:7e:3f:f3:9a:9f:df:aa:dd:63:8e:62:fc:06:6f:1e:9e:
a7:b7:b9:cd:f4:cf:78:58:ae:87:c3:90:7c:8e:02:e4:7e:7d:
68:62:16:29:8b:a4:02:b0:7f:39:48:79:ff:8f:cd:53:13:b3:
57:20:8c:f2:f3:94:c3:44:14:24:ca:cc:de:22:b8:e6:0f:b9:
7b:6e:a2:05:80:0a:8a:8f:02:4e:21:45:d5:1b:1e:19:bc:ae:
6b:2f:26:9f:c4:68:97:e2:fb:4c:4a:d9:0c:65:f4:0a:83:85:
f0:51:9a:79:9c:a2:98:b9:79:8b:01:dd:f7:c5:58:6b:f2:ad:
27:b5:05:5f:6e:c5:c1:0e:24:8e:55:c2:e8:c4:e9:ca:0c:ad:
79:e9:22:37:99:d2:6d:2c:86:3d:93:26:7c:72:0e:eb:b9:25:
54:8c:98:9d:95:9f:73:54:b0:ba:b7:0d:a9:7e:c8:c7:e9:4a:
1b:d5:29:17:a6:6d:0a:9f:1f:97:bf:0b:b0:1c:27:ba:08:14:
40:9e:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:31:55 2025 by rpki-client