Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/iIQaeGWo37d4w_fiU_R29carNk8.roa
File: iIQaeGWo37d4w_fiU_R29carNk8.roa (raw, json)
Hash identifier: FbNS7L7XPQULlvHXJ6Yq35UuABtJRjSmhRiCGjDk29Q=
Subject key identifier: 88:84:1A:78:65:A8:DF:B7:78:C3:F7:E2:53:F4:76:F5:C6:AB:36:4F
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019428283D7AB06F9B02E0A957C0CF0FCC75
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/iIQaeGWo37d4w_fiU_R29carNk8.roa
Signing time: Thu 02 Jan 2025 17:55:13 +0000
ROA not before: Thu 02 Jan 2025 17:55:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21005
IP address blocks: 185.110.236.0/22 maxlen: 22
185.110.236.0/24 maxlen: 24
185.110.237.0/24 maxlen: 24
185.110.238.0/24 maxlen: 24
185.110.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:3d:7a:b0:6f:9b:02:e0:a9:57:c0:cf:0f:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jan 2 17:55:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88841a7865a8dfb778c3f7e253f476f5c6ab364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:d4:07:9c:47:6b:0e:5e:2b:d6:e6:9c:41:
69:21:f4:15:9c:4e:54:80:0c:a8:ed:76:aa:05:f3:
34:44:53:81:f1:b3:a1:cb:1c:07:a0:25:86:7a:d4:
22:43:ec:2d:56:bc:ef:82:97:5c:09:0b:25:59:29:
4a:e2:be:99:9a:56:81:fd:6c:75:ad:9a:00:65:2b:
26:74:51:8e:ca:3d:a6:dc:09:11:df:73:cd:40:e0:
12:be:91:9a:60:34:86:72:05:ad:91:01:ff:5f:ef:
88:e9:3e:34:d2:3a:cc:50:23:70:12:f9:8c:33:80:
b5:83:4f:3d:50:63:59:68:3e:68:20:02:d4:60:9f:
95:ce:85:55:e4:4c:b7:1e:6e:db:04:2e:f0:fc:75:
ec:f3:31:4d:f8:d2:c3:b4:eb:19:48:0c:c4:af:92:
bf:8c:68:39:ae:aa:d6:2f:fc:5e:ad:4c:e3:ea:30:
f9:1c:68:0d:38:47:c5:30:fc:d4:94:12:62:ae:78:
22:c8:86:57:cc:1b:a9:0f:3f:36:70:eb:e6:50:12:
fc:b7:b9:70:1c:40:b2:e7:e0:49:ee:14:ed:f2:d7:
fb:4c:72:3e:4e:88:c5:77:55:49:5b:ab:61:dc:d2:
4d:dc:2f:4d:b1:38:bd:09:e5:69:f4:ec:ea:06:05:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:84:1A:78:65:A8:DF:B7:78:C3:F7:E2:53:F4:76:F5:C6:AB:36:4F
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/iIQaeGWo37d4w_fiU_R29carNk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.236.0/22
Signature Algorithm: sha256WithRSAEncryption
54:79:b6:c4:3f:e5:d4:80:f3:46:d5:ca:36:df:3d:5f:36:bb:
e9:d0:57:4e:33:f1:96:9d:bd:69:22:c7:3d:59:20:a1:ec:b1:
75:43:00:06:97:71:fa:c7:39:be:65:06:58:e8:07:48:96:94:
4b:19:02:67:07:53:14:b4:bb:4c:82:72:dc:d9:15:7f:41:e7:
fd:c4:c7:67:6d:e8:6c:f6:6e:51:31:37:3e:1e:2e:eb:a3:89:
83:90:21:ce:75:16:83:f0:5b:a4:3d:1b:f2:2d:c5:a1:e0:b5:
d0:18:19:5c:26:a8:10:d7:19:4c:3a:b6:b1:7d:e0:07:7e:a5:
19:87:e4:a3:34:1b:53:61:e4:d7:66:e2:3f:4c:9d:0c:de:2f:
1a:30:84:47:49:93:5e:88:84:3c:d4:58:b8:02:06:de:44:b1:
14:55:63:8c:f2:ac:a0:c8:75:a2:6d:b1:c2:b2:fa:16:32:01:
93:16:9d:0e:40:60:7b:e7:93:49:84:72:5f:82:32:1b:ee:3c:
a3:8b:a7:86:1e:a7:b2:11:ee:9d:ea:f9:d0:e3:f1:5c:62:01:
77:66:bb:43:c2:ad:99:ee:65:66:e1:74:d4:dd:65:6c:2b:2d:
f2:76:f4:b2:06:ca:1d:ea:1f:06:32:4b:0a:a4:c8:28:02:98:
25:af:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:06 2025 by rpki-client