Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/hO23WjxsvovLeYLtPCuS-3E0Vpo.roa
File: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (raw, json)
Hash identifier: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=
Subject key identifier: 84:ED:B7:5A:3C:6C:BE:8B:CB:79:82:ED:3C:2B:92:FB:71:34:56:9A
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDABB2031FCFF1B845C71FF5A91BB4
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/hO23WjxsvovLeYLtPCuS-3E0Vpo.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200096
IP address blocks: 185.182.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ab:b2:03:1f:cf:f1:b8:45:c7:1f:f5:a9:1b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84edb75a3c6cbe8bcb7982ed3c2b92fb7134569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:10:c9:ba:81:4a:cf:10:f8:2c:8f:71:64:
72:55:25:ec:ea:ef:45:4e:6e:1d:f3:9f:a7:f1:92:
48:8d:9f:c6:2a:51:2a:de:36:9a:3b:ce:54:60:87:
83:a1:68:6e:85:72:db:1d:4e:23:21:9d:7a:24:90:
f5:e9:49:73:ee:3a:aa:cd:c0:dd:2f:57:24:c9:5a:
c5:49:1e:5f:4c:21:e0:3f:0d:69:d9:23:aa:2b:31:
9c:66:29:f8:f6:ea:85:ce:a3:eb:98:ad:6e:75:81:
0b:50:e9:3d:20:99:04:7a:50:27:0e:85:5c:87:6e:
1f:a6:38:19:07:f5:1d:cd:58:58:77:ef:1f:ad:09:
2f:0a:04:87:56:1a:88:e1:98:76:74:c1:54:5f:2a:
56:52:87:a3:4d:33:bc:1f:3f:31:07:49:9a:c4:ca:
20:20:05:96:b4:e3:23:13:9b:99:f1:a8:14:a6:c9:
7e:18:e3:ff:83:19:1b:40:f4:b8:21:5b:91:18:8c:
05:3c:46:f3:72:6d:5e:91:58:66:56:8d:4f:1e:29:
a6:a3:74:44:ae:e7:7b:2e:f3:01:35:e9:98:44:e2:
c9:36:32:e3:d3:7c:49:3d:eb:df:58:76:63:5e:36:
e6:65:f5:f4:46:7c:8f:ed:57:53:d0:54:6f:9d:4f:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:ED:B7:5A:3C:6C:BE:8B:CB:79:82:ED:3C:2B:92:FB:71:34:56:9A
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/hO23WjxsvovLeYLtPCuS-3E0Vpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:50:36:57:09:d6:5c:12:e8:47:d3:27:f0:31:ee:1b:49:8c:
a9:55:d2:ce:53:25:24:af:cb:8e:0a:35:b8:40:3e:af:c0:3d:
d5:eb:44:a3:3d:2f:8d:52:71:df:d2:65:8e:3e:9e:b7:c3:b2:
8f:45:a5:d8:c1:53:23:95:44:98:9a:f0:59:69:a4:63:38:47:
a3:ce:3e:aa:83:a4:d8:06:c5:83:52:01:9c:3c:67:cd:18:31:
84:51:95:6c:47:b9:64:ee:fd:7e:ce:73:d3:ae:fc:b7:32:78:
4e:d5:33:d3:5b:aa:7f:99:d0:52:3d:da:11:5a:af:b3:ee:d5:
bf:eb:79:14:6b:7f:bb:28:45:e2:10:08:17:cf:5b:85:71:98:
f8:a9:ae:c0:cd:50:0c:d5:ef:99:ef:8e:6b:6d:94:5c:46:e8:
17:ac:f2:4e:d6:07:64:29:9a:89:6a:17:16:ed:64:64:2f:a0:
eb:14:89:c5:eb:cc:c0:ff:31:5c:ff:b5:71:3f:b9:8d:17:1f:
7e:df:56:7c:e2:c3:62:97:32:a2:29:28:81:d5:00:aa:a0:82:
ce:48:93:18:d1:d6:13:af:e3:1f:df:3e:ed:83:73:b2:2a:78:
fe:98:65:2f:af:8d:95:20:4b:b0:4e:16:39:5b:6f:4d:c8:6a:
64:56:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:10 2025 by rpki-client