Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/g0Xq41en0MvSc6brqOyCJ-h-0KM.roa
File: g0Xq41en0MvSc6brqOyCJ-h-0KM.roa (raw, json)
Hash identifier: Gw1hdBraaiHJF+U9X5y+4LPKBAd7UP0aCyHshi3rBBU=
Subject key identifier: 83:45:EA:E3:57:A7:D0:CB:D2:73:A6:EB:A8:EC:82:27:E8:7E:D0:A3
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01953C8373BE8BC72A4B2C1A37FE1F5F33F2
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/g0Xq41en0MvSc6brqOyCJ-h-0KM.roa
Signing time: Tue 25 Feb 2025 09:50:02 +0000
ROA not before: Tue 25 Feb 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 185.23.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:83:73:be:8b:c7:2a:4b:2c:1a:37:fe:1f:5f:33:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Feb 25 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8345eae357a7d0cbd273a6eba8ec8227e87ed0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:3a:5f:83:a2:9f:b9:e5:6a:6b:c7:39:28:
95:95:43:a8:27:37:18:e4:d1:ce:6b:29:63:a8:24:
24:fb:17:c5:db:cd:d9:e9:c7:cb:19:4a:29:99:40:
94:30:c4:b1:c1:38:f7:16:82:ab:4a:2d:9e:7e:56:
8f:3e:f8:da:86:fb:6c:ef:04:3e:66:07:49:be:21:
d0:85:91:f6:92:04:c5:10:2e:e3:bd:f0:06:4e:ea:
26:a2:ac:87:65:83:80:23:b8:39:d3:f0:4b:db:37:
65:0d:0d:10:9a:6e:75:b4:c1:b0:97:21:8b:68:be:
c2:fb:dd:bc:f0:41:86:ad:3b:c7:da:d0:66:f0:4c:
47:cf:20:6b:47:9e:c8:0e:32:eb:50:92:91:84:5d:
7e:7e:09:6f:fe:80:f1:f9:88:36:16:b1:bb:19:e2:
3a:27:68:e0:a8:bf:2e:32:c1:64:01:8e:f6:f9:8c:
67:81:eb:cd:1e:ce:ce:a6:5d:26:5b:4a:3d:ee:50:
1a:26:c3:ba:f3:49:da:37:e1:5a:78:57:9b:7d:c0:
69:23:c5:a1:d0:09:a1:10:70:be:19:aa:59:fe:ff:
16:35:3d:e2:f5:97:ba:1c:64:85:bf:7a:2f:60:4a:
ef:da:ca:eb:10:dc:ed:29:63:d5:af:72:ac:a3:cb:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:45:EA:E3:57:A7:D0:CB:D2:73:A6:EB:A8:EC:82:27:E8:7E:D0:A3
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/g0Xq41en0MvSc6brqOyCJ-h-0KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d5:f1:c9:33:f7:22:78:a4:ea:11:dd:51:77:62:19:bd:69:
60:0f:ed:25:78:9e:c9:c2:f8:70:eb:e2:d3:df:54:c4:68:7e:
50:81:c4:f0:71:02:89:32:7e:e9:05:ce:87:af:c5:92:74:0a:
8f:ed:e9:f3:2f:17:9b:7f:66:02:6e:73:6b:50:64:4f:4f:33:
60:43:1c:8e:8c:18:15:14:c9:d5:3e:81:f5:9a:4b:55:a8:69:
ba:cb:ba:71:4b:6c:07:d4:65:ec:e1:31:0d:72:a0:64:99:58:
f9:be:ef:ae:b1:3d:c2:f3:0f:cb:54:12:93:ee:59:2d:fe:66:
f1:a1:58:bc:2c:14:c1:37:df:af:95:18:9f:80:9f:de:4f:4d:
98:78:a5:8f:b5:e5:b6:10:f3:a9:8e:94:99:e3:b9:5a:7e:48:
86:dd:42:cb:7a:2a:33:1c:99:84:c9:8f:8b:49:1e:a1:6f:68:
06:80:2e:63:a4:a2:1b:e5:bf:ab:3a:2b:7f:85:99:f3:c5:ed:
26:3f:a5:6e:27:6f:dc:07:7d:7c:fe:da:48:11:c8:a6:92:14:
a8:67:53:37:30:21:57:a5:eb:cc:f0:02:2f:95:4e:60:94:0d:
f2:a0:5d:d7:d2:1d:16:fa:3c:0c:0e:06:f1:9d:b6:a9:16:cc:
e6:d0:be:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:12:24 2025 by rpki-client