Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa
File: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (raw, json)
Hash identifier: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=
Subject key identifier: 6C:96:8F:BE:5A:4B:C0:75:25:F5:93:1E:0B:3E:90:8E:EE:DD:09:0E
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 019423D7E1D2E1D2F3709A5B804F3B605BC9
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.138.242.0/24 maxlen: 24
2a07:10c0:c57::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e1:d2:e1:d2:f3:70:9a:5b:80:4f:3b:60:5b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c968fbe5a4bc07525f5931e0b3e908eeedd090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:a9:d7:64:4e:2f:a4:91:17:b4:a2:eb:d0:
e8:f5:01:bb:f5:01:fd:ff:a9:d2:46:c6:44:ef:0c:
62:32:c9:a8:29:ca:12:7f:4f:02:2f:50:9a:3a:8e:
04:e3:b3:fc:f7:b6:c9:72:98:97:11:61:76:c7:8f:
5d:0d:a2:f3:e9:38:50:65:f4:64:4b:74:a2:88:be:
38:3b:2e:d5:08:64:6f:68:85:b7:ca:c1:07:b4:8e:
2d:25:da:e3:cb:47:aa:c1:69:d6:66:55:3b:4b:84:
3b:4a:a3:80:01:0f:17:9a:2d:33:2d:77:4a:5a:56:
27:13:c1:40:6b:03:30:e2:b1:2a:63:64:77:ea:c3:
81:87:2b:ac:09:7e:2e:7f:12:be:b2:10:08:41:ec:
05:4a:df:86:d1:31:c0:fe:a6:44:a7:4e:75:6e:7a:
83:11:e6:58:07:72:7c:69:00:c4:38:ad:23:aa:a9:
37:83:80:bc:93:a7:19:cc:3b:16:d7:79:58:c5:05:
f3:d1:1c:79:e6:d2:f9:0f:30:48:f3:db:bb:73:ca:
b3:68:e2:9c:16:1a:2e:6d:9c:8f:3d:5a:70:30:00:
91:ee:9d:60:94:1a:a3:5d:d6:2c:28:f5:6e:45:2d:
07:c7:a0:83:85:f9:9a:de:76:fd:44:15:08:10:6f:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:96:8F:BE:5A:4B:C0:75:25:F5:93:1E:0B:3E:90:8E:EE:DD:09:0E
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.242.0/24
IPv6:
2a07:10c0:c57::/48
Signature Algorithm: sha256WithRSAEncryption
84:b8:09:02:b5:a0:a7:76:ab:cd:7e:86:76:38:b3:9c:c3:88:
6b:0d:a1:36:a7:c4:86:fc:88:7c:0f:5a:16:9f:26:f6:52:46:
95:22:e7:96:0d:42:e3:f8:3f:04:81:f6:f2:75:df:1d:62:a2:
b2:e9:bf:f5:b5:b7:31:ab:f3:4e:8e:1c:48:cb:e8:08:c8:42:
68:ad:75:51:30:b6:48:73:eb:5a:a8:ee:05:08:f3:be:2b:4d:
1d:63:f1:77:7a:c2:97:84:04:ba:30:0d:1d:3d:70:20:90:76:
32:e5:fd:e0:2e:50:85:3c:85:14:00:36:5e:bc:fe:52:6b:42:
6f:2b:40:fe:83:3c:7d:87:9f:e8:dc:a7:80:dc:3a:6f:a2:d3:
7a:e0:8e:03:16:a4:37:cb:7c:c6:85:c0:4e:d0:fb:1d:93:42:
97:b9:c3:5f:5e:a7:99:ee:28:c6:28:66:77:93:cc:bf:97:c9:
55:cb:29:f3:90:2d:6a:a1:ae:07:8d:af:84:a7:e0:f5:be:7e:
98:ca:e5:cf:33:73:90:31:60:3e:65:b0:ea:9c:12:77:c6:c6:
4e:9f:d0:1a:74:52:7d:3f:84:78:36:33:24:fa:e7:80:e7:b2:
66:87:08:a7:63:23:ea:9f:3a:2f:d9:25:06:86:e0:b2:7d:88:
cf:bd:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:25:08 2025 by rpki-client