Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Gy0NaBYy8n5Q_Ogjr8coA3ax8Pk.roa
File: Gy0NaBYy8n5Q_Ogjr8coA3ax8Pk.roa (raw, json)
Hash identifier: PbxVqTlgSV7xueQBCCHQ90CbZKS81+5O6vgcvZ503c0=
Subject key identifier: 1B:2D:0D:68:16:32:F2:7E:50:FC:E8:23:AF:C7:28:03:76:B1:F0:F9
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019423D70C8B5C96D063E9268019AE01E2E1
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Gy0NaBYy8n5Q_Ogjr8coA3ax8Pk.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201864
IP address blocks: 107.181.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:8b:5c:96:d0:63:e9:26:80:19:ae:01:e2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b2d0d681632f27e50fce823afc7280376b1f0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:8d:fa:2e:b6:2a:5f:4d:4c:5a:ac:05:7a:
e4:9e:3a:8d:d0:ac:c7:93:68:08:54:70:02:42:49:
f4:b7:8c:84:3d:35:d5:03:1c:a1:59:9d:a9:f0:72:
85:c8:e0:01:80:f7:a2:eb:21:55:0d:fb:a0:b2:ed:
5b:34:19:fc:a5:8c:ab:25:d8:8a:b3:82:76:f3:76:
3b:c3:21:8a:cc:56:44:4a:bf:50:24:05:39:97:f3:
40:a7:c5:6b:fd:64:47:22:21:1d:95:fe:1c:f6:0d:
a2:ff:47:4f:4f:da:b7:8f:f9:bd:8b:1b:42:5b:e9:
a6:d5:93:64:b2:21:39:a7:ef:05:a2:d4:a9:60:15:
b9:2b:ec:87:25:1c:b7:ea:27:00:06:fb:eb:f1:14:
05:34:9b:cf:cf:f8:7d:a8:59:69:da:fe:ab:ff:71:
1d:b0:14:7f:0c:bb:32:0d:0f:a5:16:b3:99:42:c0:
c2:50:9b:c2:d8:38:f8:2a:a5:97:cb:ff:02:2a:49:
59:0a:66:1d:1c:a0:af:9a:3f:89:c4:30:63:3e:31:
f0:e9:eb:71:45:40:bb:d0:a1:a9:5f:22:e7:b6:a0:
4e:d1:3b:b2:f5:f3:6a:7a:30:b6:09:1b:c2:e2:1a:
fe:8f:1b:e1:97:12:59:21:3b:11:eb:64:21:f0:05:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2D:0D:68:16:32:F2:7E:50:FC:E8:23:AF:C7:28:03:76:B1:F0:F9
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/Gy0NaBYy8n5Q_Ogjr8coA3ax8Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:12:b9:ed:c5:12:b4:96:94:b1:0e:de:09:7f:26:3b:ba:7d:
6a:ed:b4:c2:f8:be:20:e8:06:fe:67:2c:91:81:77:a9:80:21:
ad:39:21:6e:c4:bd:bc:ed:f4:fa:9c:34:e4:f1:28:e2:e6:ea:
db:14:d0:64:89:d9:94:87:35:22:87:e6:d5:33:32:24:29:e0:
97:a7:ae:f5:31:d8:89:45:7d:79:97:a5:5e:4d:53:e0:8b:b9:
4a:99:29:45:6d:6f:24:69:e1:7f:c4:b3:ef:9c:cc:20:f1:9f:
4f:0d:36:b1:89:fc:17:01:22:b7:0f:79:2a:d9:a5:fe:05:59:
01:68:b1:9d:ed:4e:80:40:99:97:f7:3e:00:31:43:98:5f:8e:
1b:40:c4:64:10:99:33:53:b8:6e:86:00:60:0c:ec:94:19:50:
7c:e9:e3:cb:e2:e7:77:59:0c:30:ba:4c:41:f1:cb:17:1c:0a:
bd:1a:b0:78:ed:67:73:cd:a2:b7:24:ed:ac:90:22:c1:7f:33:
d9:cb:d3:23:df:89:af:08:71:2e:ac:86:99:6c:f3:6a:dc:a4:
34:05:bb:45:40:b3:fc:12:45:97:7b:6d:be:fe:a8:d4:2a:6c:
5d:a7:bd:a9:65:04:12:c9:2d:17:2a:e6:dd:f4:f2:50:50:77:
a8:10:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:42:44 2025 by rpki-client