Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/is06NJF_pdLdCky9_vvySjLbIWk.roa
File: is06NJF_pdLdCky9_vvySjLbIWk.roa (raw, json)
Hash identifier: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=
Subject key identifier: 8A:CD:3A:34:91:7F:A5:D2:DD:0A:4C:BD:FE:FB:F2:4A:32:DB:21:69
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 019424B3A5E32E465CE742F57137C482C7F8
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/is06NJF_pdLdCky9_vvySjLbIWk.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.177.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a5:e3:2e:46:5c:e7:42:f5:71:37:c4:82:c7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8acd3a34917fa5d2dd0a4cbdfefbf24a32db2169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:76:83:d6:46:76:b7:4c:7b:5c:54:d2:23:
29:06:67:1a:cd:71:0a:07:b4:f4:c1:4d:72:77:d2:
1e:b3:8c:72:26:7b:fa:e1:58:f1:56:df:f0:5b:d9:
90:91:98:c2:b9:42:e3:8a:46:01:56:ae:06:16:7f:
ab:76:24:e8:cb:1a:be:5f:c9:40:4a:ab:af:56:74:
7b:bd:19:d6:ad:59:f8:33:b7:28:4f:14:21:ff:3e:
c9:6a:b2:f4:c6:c4:83:32:6e:5d:e5:89:39:0e:fb:
8e:1b:03:51:95:4c:25:6c:04:b4:4a:63:81:71:4d:
8b:75:3e:0f:a4:c9:16:ae:21:06:89:cd:67:72:ea:
c6:70:f5:62:38:b5:f9:c3:09:6f:5d:34:5b:a5:01:
a8:5f:c7:41:21:cd:2e:f5:f3:65:86:ed:c9:b9:4e:
a3:87:c8:55:d8:47:36:5f:90:5f:49:5b:63:47:a7:
78:47:2a:ba:93:e3:fe:0e:77:3c:3a:10:22:e2:a2:
76:cd:de:f8:23:ee:76:9b:3b:ed:67:11:1b:7e:24:
64:35:59:1a:fe:42:56:53:75:d8:d1:7b:3d:a6:ae:
14:e5:92:8c:72:37:64:5b:d9:ff:42:65:2d:17:92:
90:ae:09:b0:4a:02:4f:4d:80:d2:18:6b:ef:1f:2a:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:3A:34:91:7F:A5:D2:DD:0A:4C:BD:FE:FB:F2:4A:32:DB:21:69
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/is06NJF_pdLdCky9_vvySjLbIWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.130.0/24
Signature Algorithm: sha256WithRSAEncryption
56:42:12:22:a7:04:7b:1e:2d:3c:aa:9e:c9:a4:ab:d0:14:56:
c5:6a:3d:94:b9:2f:0b:49:49:c2:7e:64:3a:d8:40:d7:ad:8e:
f4:f5:90:63:e9:bf:1b:25:72:7a:bd:18:06:d9:a6:8f:e3:71:
12:52:cc:b4:8a:6a:1a:ab:69:5e:0a:78:31:2d:d8:4d:05:45:
b8:5d:78:c0:8b:44:2b:d5:f6:51:a4:9e:8c:8c:55:e8:1d:07:
14:98:4a:90:48:88:d6:07:0d:7b:8d:c1:fc:d6:a9:6d:9f:9f:
ce:43:df:fc:fd:e1:f2:d8:38:97:88:b4:2c:65:de:cc:75:fa:
e9:21:f5:d3:81:9a:c1:23:04:02:4d:2d:5a:f7:16:cd:19:a9:
de:35:d4:1e:4a:7b:43:64:8d:5c:c3:43:8f:6b:b9:ba:4e:4c:
d5:89:c4:bf:7e:ea:d5:3c:00:70:2d:e7:dd:3c:81:70:1f:3c:
cc:48:7d:a6:9d:84:2a:c1:67:18:f0:15:1b:29:58:b2:7a:9c:
aa:21:25:a8:b6:22:d5:28:35:91:34:23:79:08:3d:64:31:39:
a9:26:7b:89:61:30:39:dc:01:ce:dc:43:51:c2:72:45:c4:48:
ad:46:b3:ce:6d:66:99:b6:80:b3:f1:84:ac:cd:7d:2d:76:b7:
81:1d:b8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:41 2025 by rpki-client