Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/ds8x3qHhuROEI3eYeW-J-KnoVOY.roa
File: ds8x3qHhuROEI3eYeW-J-KnoVOY.roa (raw, json)
Hash identifier: sZSMC1BrQoLmX+rojH+SOE/CV/DFjkpNZIlB8RClTc0=
Subject key identifier: 76:CF:31:DE:A1:E1:B9:13:84:23:77:98:79:6F:89:F8:A9:E8:54:E6
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019425C20226D5555843E4E3FF0F19C7DE0B
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/ds8x3qHhuROEI3eYeW-J-KnoVOY.roa
Signing time: Thu 02 Jan 2025 06:44:18 +0000
ROA not before: Thu 02 Jan 2025 06:44:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.206.124.0/24 maxlen: 24
185.206.125.0/24 maxlen: 24
185.206.126.0/24 maxlen: 24
185.206.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:c2:02:26:d5:55:58:43:e4:e3:ff:0f:19:c7:de:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jan 2 06:44:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76cf31dea1e1b91384237798796f89f8a9e854e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:64:21:8d:55:b8:01:f4:cb:f6:c6:ec:b1:
6b:1b:15:cc:a3:2e:a1:e6:5d:f0:8f:68:aa:f9:38:
72:de:54:a1:5f:26:2c:ca:30:bd:2f:db:b1:18:f3:
30:92:83:37:4b:bb:b6:2f:e8:da:5f:4b:63:a9:5f:
33:ba:32:c5:e7:f7:66:6f:55:6d:bd:c5:70:dc:ba:
7a:e1:53:8c:c4:95:41:a1:8c:4e:ef:9e:bc:97:8f:
bf:1f:c6:a7:da:23:d4:7a:e8:93:f3:8f:c2:3d:e7:
2b:e7:fa:2a:27:00:83:ec:af:42:55:81:3e:7e:22:
64:77:80:ec:49:e0:cd:30:ba:7a:46:01:04:d1:0f:
67:24:c8:d6:c3:4d:4e:d0:46:52:3c:e2:1a:4c:c1:
30:29:4d:07:dd:ae:de:1a:2c:6b:63:47:9d:3b:69:
19:bc:26:89:c3:c4:1a:19:df:9e:dd:07:8d:0c:d6:
45:5b:fd:5c:3e:15:72:11:c2:4f:8e:b0:b0:a1:be:
22:98:cc:93:f6:cc:e3:7a:1c:bd:c8:89:0d:5c:80:
76:09:17:b9:ed:29:6e:28:c4:db:91:5b:9b:4c:b4:
1f:bb:43:44:65:25:29:4b:d9:ce:fb:43:6b:23:b4:
a5:65:68:e4:52:da:13:a8:eb:46:64:cd:29:ef:a3:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CF:31:DE:A1:E1:B9:13:84:23:77:98:79:6F:89:F8:A9:E8:54:E6
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/ds8x3qHhuROEI3eYeW-J-KnoVOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:f2:7f:b6:5d:5e:a3:ba:bf:18:ad:9d:29:af:b2:e4:0c:17:
4b:b3:8b:fa:32:fa:00:47:44:b2:86:83:7e:2c:9c:d3:b0:94:
45:f6:e0:8a:c5:42:1c:3a:cb:6c:6c:23:7a:df:d7:41:20:9b:
13:d3:fd:23:7b:c8:15:55:48:24:14:b3:ae:7f:9b:e9:63:3d:
54:1f:86:88:2e:2e:92:6e:43:5c:34:c3:84:ee:ea:91:09:d2:
f0:b1:e3:a2:c0:2a:2a:d9:37:7d:cf:45:09:62:f7:26:49:f6:
d1:0f:93:82:37:c4:46:ef:ba:42:89:c6:bd:3a:2a:dc:5f:03:
c6:3e:48:45:b2:f5:77:cd:72:c6:20:02:3a:56:c3:6a:5c:dc:
1e:87:ef:0a:4f:c4:d7:5c:9a:68:00:18:59:8a:dc:2b:4c:68:
98:a9:4f:27:00:74:dd:86:22:8b:21:c5:43:53:c5:9b:76:e8:
58:72:0f:c9:ab:db:cb:58:78:e8:83:74:85:55:9f:ac:05:f2:
5f:d6:5c:a6:33:a4:98:78:47:a1:a7:8f:97:3d:e6:b2:d4:a3:
d9:88:cd:cb:bc:46:1e:90:dd:11:f4:a9:1b:56:ce:6c:e8:61:
64:9f:46:d4:1f:10:26:2d:07:7e:6b:00:d4:7f:16:aa:44:95:
49:0f:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:29:17 2025 by rpki-client