Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa
File: lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa (raw, json)
Hash identifier: V0zSt5aI8VF1NHmDxyjc0WLd9N/L37RndKkVSMmK+5Y=
Subject key identifier: 94:B0:24:6F:AA:54:35:F3:6D:66:82:2E:D4:95:EE:4F:A9:18:82:BD
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019422FC1E67192F2966677707B722F35401
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa
Signing time: Wed 01 Jan 2025 17:48:55 +0000
ROA not before: Wed 01 Jan 2025 17:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3176
IP address blocks: 185.104.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1e:67:19:2f:29:66:67:77:07:b7:22:f3:54:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94b0246faa5435f36d66822ed495ee4fa91882bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:eb:a7:29:97:53:d8:cb:a6:47:b2:f3:ad:
e3:94:f3:a6:49:b6:b3:d2:f9:ff:98:18:ab:a4:28:
e6:6d:34:c5:01:f2:16:60:3b:22:8e:28:b3:9b:16:
bd:3a:d1:ea:10:d1:42:af:d7:a5:25:98:4f:ff:60:
07:23:5b:ab:d3:8b:02:81:0b:9a:2a:01:60:25:5e:
4f:4c:03:46:c2:6f:0e:7b:98:2e:bc:74:37:2f:2c:
df:a9:79:37:a8:42:93:93:a2:cd:2c:c8:cc:f1:a1:
27:4c:ef:09:ef:fc:74:8d:8c:3c:14:8d:19:e4:56:
0b:ba:2e:ac:d9:84:30:bc:9d:ab:3c:0c:3e:9a:3f:
fd:6f:c5:82:ed:10:0e:09:ff:be:c4:d1:ec:d1:d3:
af:44:db:12:c9:ad:98:94:bb:bd:f5:90:1d:0a:06:
08:d9:62:c3:98:88:cc:ea:d7:a2:df:93:d8:5d:d2:
b7:e8:96:11:61:e7:40:ea:5b:a8:3c:f9:73:c3:6b:
ee:b8:ca:38:e6:1a:9c:f6:d3:01:16:44:bf:3e:1a:
d4:25:3b:03:25:a1:a5:aa:cc:a5:38:b6:73:ce:7f:
66:6a:4b:af:c1:42:9d:94:3d:42:a1:ea:ef:18:23:
7b:f1:75:92:c3:4c:3f:31:57:ff:c0:60:4b:b5:90:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B0:24:6F:AA:54:35:F3:6D:66:82:2E:D4:95:EE:4F:A9:18:82:BD
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/lLAkb6pUNfNtZoIu1JXuT6kYgr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.69.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ea:c3:25:3c:c6:24:e8:dd:e6:68:1a:18:d7:9a:aa:ff:b1:
88:f3:4c:b3:21:e1:bf:86:81:7c:8f:f8:30:46:5d:fe:8c:9b:
8e:a5:c9:f1:27:1f:4d:d6:a1:ad:5c:8b:0e:fe:d2:75:d5:91:
3d:49:9f:c7:33:29:f1:25:82:c5:6e:73:15:c1:08:20:51:f5:
17:47:2c:7e:9f:4d:f9:e0:77:c5:ee:7c:2f:78:a2:52:14:39:
66:59:d7:19:90:4b:a2:72:33:68:df:ab:a2:9d:4d:05:4d:9f:
74:11:98:70:13:8b:b0:a2:94:96:d8:bd:33:5f:de:5d:e2:d0:
80:40:81:53:42:a0:8c:a0:e3:79:8d:81:ba:5f:24:b0:8e:3b:
06:c6:6f:f9:1c:0a:f5:eb:eb:f9:cf:0f:ed:95:71:4e:1e:7c:
77:48:a7:ca:eb:62:a8:e9:5f:13:b7:73:ec:96:5c:56:80:5c:
69:e4:a4:6b:60:5e:5b:94:56:af:29:8f:ec:a7:66:5b:21:03:
ec:c6:ce:04:81:47:19:42:c4:ba:79:ce:f8:97:88:50:07:be:
4e:76:e8:6d:53:9a:a0:d0:51:f1:02:5b:d5:08:be:52:8c:f2:
ae:29:5c:2d:30:3a:00:27:6d:d0:a0:f9:f7:c9:b3:b2:09:0f:
95:41:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:11:21 2025 by rpki-client