Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/8Ja6nLmqn5rWkD8bJIXyJiseunA.roa
File: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (raw, json)
Hash identifier: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=
Subject key identifier: F0:96:BA:9C:B9:AA:9F:9A:D6:90:3F:1B:24:85:F2:26:2B:1E:BA:70
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019426D9D716B745E2624397FE428D5AC1A5
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/8Ja6nLmqn5rWkD8bJIXyJiseunA.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205067
IP address blocks: 185.230.184.0/24 maxlen: 24
185.230.185.0/24 maxlen: 24
185.230.186.0/24 maxlen: 24
185.230.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d7:16:b7:45:e2:62:43:97:fe:42:8d:5a:c1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f096ba9cb9aa9f9ad6903f1b2485f2262b1eba70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:43:7e:ad:37:2f:ba:47:9e:c4:41:db:2f:
10:14:14:9b:7a:b0:a7:01:1c:74:a0:ba:54:f4:c9:
a4:ce:6a:f3:8e:00:46:c7:cb:0a:36:d2:e9:f7:45:
f3:15:5a:99:2a:c0:4e:fb:de:cc:0a:1a:b5:6d:ce:
90:ce:8a:4b:cd:c3:7c:03:c1:fb:6e:42:ac:72:09:
1b:45:1e:8e:a0:34:a3:5f:bd:f1:ff:0b:99:7d:33:
22:f0:bc:87:d6:d8:b9:4e:61:7c:74:c5:b8:f7:be:
63:0f:f1:b5:eb:d7:ac:b0:7e:dc:75:8b:0c:6e:f8:
fa:3a:31:9f:36:97:d6:a3:58:68:34:67:d9:35:02:
fb:b3:cb:b5:78:c5:f0:81:78:c8:8d:d9:f9:8a:b4:
62:2f:8f:19:7b:9d:92:6d:3a:db:ad:54:fa:25:e2:
b5:c5:55:94:d3:f6:26:86:56:44:e5:8f:01:d9:0c:
19:59:bd:e7:f8:43:e6:13:1a:6a:8c:e3:35:80:bf:
a0:e4:88:b0:8b:2b:32:1d:7f:b0:62:ba:1c:45:e8:
fe:2a:74:c2:6e:86:0a:15:4d:0f:92:48:4e:25:f4:
5d:37:de:62:77:bf:7a:7a:aa:60:ca:98:e3:64:f3:
7f:03:bc:dc:ec:13:f5:77:4b:a2:0d:d2:3e:01:ce:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:96:BA:9C:B9:AA:9F:9A:D6:90:3F:1B:24:85:F2:26:2B:1E:BA:70
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/8Ja6nLmqn5rWkD8bJIXyJiseunA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:cc:78:85:54:ea:00:26:0d:8d:7c:c5:c5:18:9d:fb:eb:e4:
c8:3f:eb:6f:6a:6d:85:7f:09:ca:f2:10:d6:09:04:bd:33:5a:
2c:e0:53:5c:e0:83:4a:5e:a3:a5:83:c5:b7:a3:3c:db:bd:9d:
d5:44:74:71:35:2c:05:0b:f1:30:48:c0:16:c6:cf:ef:70:cb:
15:f4:d2:04:90:b6:4e:50:75:71:63:1f:30:76:25:ef:93:8e:
f4:6d:29:74:cf:34:df:17:75:03:8f:31:c9:66:53:05:12:ed:
fb:2d:12:56:e3:b9:a7:5c:24:1b:7b:b9:3e:7a:f0:e2:8c:21:
65:4f:9a:bd:64:c8:ed:93:52:4b:c3:25:8f:aa:01:3c:9c:de:
3a:6b:9b:2a:d3:d2:71:39:8b:99:fc:78:6d:6a:07:d2:98:85:
c7:5e:07:56:06:6b:7d:b6:d8:be:5f:3e:d8:e1:4e:b9:69:41:
c1:26:52:2f:68:fd:e3:84:b2:79:56:48:5b:6d:81:de:4b:fb:
37:a8:02:5d:ad:98:c2:40:96:fb:d4:10:56:47:96:ab:df:3b:
9d:22:89:dc:5b:b7:eb:16:00:75:88:a4:0d:e6:d7:1b:17:a8:
90:ec:85:cd:a7:60:a3:10:49:2a:a2:b3:2d:63:be:d6:35:43:
31:0e:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:51 2025 by rpki-client