Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/i3He8U0S-TMk840eguUDBWZU4Xo.roa
File: i3He8U0S-TMk840eguUDBWZU4Xo.roa (raw, json)
Hash identifier: OsYymyf31CVGqRQfFqwp+UbHCgnD9LSUz4IXdT5ASDk=
Subject key identifier: 8B:71:DE:F1:4D:12:F9:33:24:F3:8D:1E:82:E5:03:05:66:54:E1:7A
Certificate issuer: /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Certificate serial: 01941FFA0CF9EDF27571300D89F9041A12E5
Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/i3He8U0S-TMk840eguUDBWZU4Xo.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.43.192.0/24 maxlen: 24
185.43.193.0/24 maxlen: 24
185.43.194.0/24 maxlen: 24
185.43.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0c:f9:ed:f2:75:71:30:0d:89:f9:04:1a:12:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b71def14d12f93324f38d1e82e503056654e17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:bc:3d:ac:97:93:0d:07:23:78:4b:39:81:
1a:60:db:ff:6b:0c:4a:2c:6c:8d:ae:31:d2:ea:9e:
91:9c:76:79:4e:89:9a:72:53:ba:3f:9c:d2:dc:7b:
9e:19:02:c4:c5:c0:f5:be:8f:48:29:0f:b4:ff:ba:
91:81:c9:3b:42:bd:1c:2e:71:29:fe:ed:21:b8:a2:
4a:b4:42:49:2f:a8:2a:3b:86:f0:b2:ae:da:64:fc:
09:f9:70:1f:5e:24:3e:81:45:0b:40:0e:2f:98:0f:
d5:fb:f4:65:65:47:01:ef:7b:bd:d6:ac:15:02:f1:
37:08:8e:63:52:bd:57:3a:18:77:bd:89:cb:9a:39:
53:14:64:90:0c:97:0b:3a:3c:0b:3f:5b:22:99:a8:
de:e1:e1:2c:cd:7c:47:f4:df:cc:59:5f:c1:6c:d6:
8e:ef:bb:0f:3d:e8:da:c6:26:12:ca:cc:bd:95:f8:
fd:f7:99:cc:5e:5f:ca:ea:4b:66:8f:0a:bf:ff:7e:
e9:84:21:21:32:6f:d7:e7:f3:db:a7:06:10:88:09:
8d:4f:69:80:4b:a6:62:a3:1f:6d:07:b2:f1:bf:75:
d2:55:3f:74:c5:79:18:10:3b:3d:0a:5d:cc:a9:73:
f7:f0:7d:3b:b2:fa:d8:b1:8e:43:72:d7:76:02:24:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:71:DE:F1:4D:12:F9:33:24:F3:8D:1E:82:E5:03:05:66:54:E1:7A
X509v3 Authority Key Identifier:
keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/i3He8U0S-TMk840eguUDBWZU4Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:1a:24:0f:94:16:d9:e5:bd:6b:f2:60:c6:3c:d3:d3:9b:2a:
4d:85:a1:4a:a9:09:46:c5:69:7a:43:46:6f:6c:84:1f:e9:6c:
60:5a:60:02:ab:fe:d4:71:7b:63:1a:6c:79:9b:ea:6d:fe:e4:
6b:8a:7c:1c:69:89:19:7a:b4:eb:67:d5:18:3a:fe:6e:85:fc:
09:f7:13:ef:03:bf:7b:c0:dd:4c:13:f5:6e:8a:7d:b4:4e:05:
e8:69:90:57:d0:f4:4d:5d:99:29:ba:5b:a6:d3:3c:4a:37:b2:
50:9e:ad:cf:ce:6b:7f:70:d6:bf:96:2d:31:bd:d7:a9:98:f1:
61:cb:43:08:9d:51:99:b9:84:9d:c8:9f:c6:bf:74:b7:57:48:
c3:88:af:e3:c8:3b:5b:1d:53:dd:8f:b0:2a:ed:1b:5e:0a:11:
3b:3e:70:64:81:37:4c:e3:07:77:99:1f:c0:e5:54:4e:69:16:
d3:a3:58:6d:39:74:fc:92:f3:fa:08:7a:7b:e4:06:26:35:7a:
cc:5a:50:bc:04:6e:85:7b:90:43:f3:fd:e2:29:3f:2c:98:60:
40:8b:5d:d7:1a:93:df:e2:c5:2d:04:be:9f:90:a6:72:61:b4:
40:b2:f1:aa:77:fe:52:e3:8c:f9:be:f1:6a:ac:eb:3a:85:28:
6c:5b:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:58 2025 by rpki-client