Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/tyWKDUVqC5IzOiqKJqRpStnyBMA.roa
File: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (raw, json)
Hash identifier: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=
Subject key identifier: B7:25:8A:0D:45:6A:0B:92:33:3A:2A:8A:26:A4:69:4A:D9:F2:04:C0
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 019427B3DC8ECF69394A038C53960FA5A730
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/tyWKDUVqC5IzOiqKJqRpStnyBMA.roa
Signing time: Thu 02 Jan 2025 15:48:06 +0000
ROA not before: Thu 02 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206433
IP address blocks: 57.190.0.0/19 maxlen: 19
57.190.0.0/20 maxlen: 20
57.190.16.0/24 maxlen: 24
57.190.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:dc:8e:cf:69:39:4a:03:8c:53:96:0f:a5:a7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 2 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7258a0d456a0b92333a2a8a26a4694ad9f204c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:d5:97:1a:fd:01:2a:83:9f:b3:89:6d:7d:
ae:16:74:90:b0:31:87:59:ae:48:6b:fb:85:5e:a4:
81:72:19:b9:61:60:30:46:9a:ec:90:06:78:c0:5b:
16:83:ab:e5:45:5a:03:91:12:5e:e5:74:6a:12:86:
34:fd:99:eb:f6:ad:ab:0a:60:24:bd:69:2a:c6:ad:
0b:45:af:75:52:4d:c5:c4:bd:aa:97:0d:ea:07:eb:
39:1f:40:7c:0b:61:e7:7b:59:5a:38:b5:89:ea:29:
75:3a:f1:45:47:4e:c2:99:33:ae:c8:ba:00:e4:ed:
e5:77:8e:73:c8:d8:32:e4:2e:cd:a5:ec:b6:22:78:
ea:10:23:ad:5d:90:87:14:3b:25:38:3e:45:d6:64:
7a:ad:24:f6:ca:08:9b:97:af:bf:e1:db:c7:0e:f3:
a0:22:22:21:9b:3e:49:fb:b5:65:fe:00:fb:c2:c7:
85:4b:6a:a6:0b:4b:8f:9f:1a:8c:74:4a:1c:19:56:
a0:62:73:ab:68:bc:15:90:35:10:96:38:01:dd:5a:
49:c6:a7:bb:70:5e:9f:20:dd:3d:6f:2f:bc:74:ad:
5f:9f:97:11:f4:2f:6e:37:0f:0a:30:62:d2:5e:af:
74:14:fe:6f:a4:12:4a:41:90:a6:df:9f:04:51:94:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:8A:0D:45:6A:0B:92:33:3A:2A:8A:26:A4:69:4A:D9:F2:04:C0
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/tyWKDUVqC5IzOiqKJqRpStnyBMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.190.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:35:a8:2f:71:af:45:0f:9a:88:0a:be:02:ed:d9:00:91:d5:
cd:5a:49:13:c8:cf:37:2e:29:50:66:46:f6:93:a5:81:5d:3a:
cd:42:d9:bd:57:6c:32:6f:62:38:08:6a:47:b5:5c:b1:1f:a3:
ec:0c:d2:69:90:11:3d:cd:d5:25:5a:6f:d7:8a:51:48:a7:d6:
e4:46:ef:34:9b:35:93:66:e5:6e:ed:26:97:5f:11:f0:90:8b:
33:4b:aa:11:31:2f:5f:13:10:3b:c8:41:a8:e8:dc:08:bf:a2:
c5:a8:c3:17:3f:8d:e1:37:c2:96:10:81:d8:9a:f3:0a:ba:f5:
57:d3:00:e5:59:6c:78:08:9f:61:9f:a2:fd:bc:4a:97:03:4e:
d2:7e:b8:d8:44:5b:61:20:c3:bb:b8:78:b1:90:9e:ff:26:ba:
cc:92:a3:ba:5c:41:a1:06:12:7c:4f:f4:67:dd:78:9f:40:07:
f7:ca:f4:58:49:fc:f1:7c:e7:a8:47:ea:5f:44:8d:91:84:9c:
39:87:a6:56:8b:64:0a:05:39:f1:7d:b8:2a:40:81:f5:6a:94:
f6:ab:e4:e3:de:93:ee:4a:c5:9c:64:d0:2c:d9:4f:31:b0:bc:
2c:9b:5d:08:23:78:15:98:df:6f:37:38:32:1c:8e:c3:ee:ad:
e5:dd:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:18:40 2025 by rpki-client