Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa
File: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (raw, json)
Hash identifier: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=
Subject key identifier: 3F:C5:43:87:FF:5F:75:83:7C:C5:72:EF:B4:93:0E:29:AA:99:68:1B
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 0194228E3825C8A2530F38BF263C70FA2092
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 185.157.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:38:25:c8:a2:53:0f:38:bf:26:3c:70:fa:20:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fc54387ff5f75837cc572efb4930e29aa99681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:f4:74:28:32:19:a2:cf:8c:45:74:b1:7a:
dc:46:01:5a:ef:84:5a:53:98:5f:69:2d:e6:1f:1d:
b4:7f:97:7a:d2:ff:ed:f1:08:59:f7:69:e2:7d:ea:
1d:75:17:fe:8a:aa:cd:26:76:e5:55:b9:9e:9b:e6:
25:5c:7b:d9:9c:41:b3:cb:87:b2:f4:91:5c:da:7c:
2b:8e:34:6d:24:71:66:8b:8e:45:3f:3e:5b:14:0f:
96:8b:b0:58:29:44:eb:84:48:b5:01:08:64:c6:23:
81:63:c3:06:2f:17:e8:c7:8c:7b:12:60:c3:18:07:
55:55:1b:9c:21:55:b0:78:3b:ee:d3:54:e7:07:0d:
e3:7c:63:06:e8:8c:54:39:f7:8b:25:ab:f5:73:1a:
f0:5c:ac:db:5e:da:3e:0f:64:54:3e:3d:a1:3c:8f:
21:92:44:8f:96:c2:e0:04:9f:40:94:7a:18:ac:d7:
45:84:c5:48:5a:84:49:60:ac:f6:0e:c3:0a:7d:19:
7a:b5:c9:76:2a:d1:03:57:45:8a:ee:d5:ae:b2:d2:
6c:13:77:9c:3d:b9:cb:9b:bb:46:6c:5a:9a:9e:1c:
1b:1a:cc:35:b2:b1:a1:bc:9e:6a:1e:7d:95:9b:2a:
92:a3:d6:bf:16:eb:ec:bb:b0:b1:17:59:78:5e:09:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C5:43:87:FF:5F:75:83:7C:C5:72:EF:B4:93:0E:29:AA:99:68:1B
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:30:a6:bd:c2:63:c9:e6:9f:b5:2e:45:a8:54:dd:14:a7:04:
c7:96:28:78:66:de:fa:26:03:0c:af:93:08:82:c8:c9:b2:2e:
80:86:a5:11:d9:6a:bd:30:66:f8:be:74:e1:ef:6a:a3:0f:79:
90:c3:c6:d0:71:b5:44:51:45:50:e5:fc:84:da:c9:c0:07:f1:
2f:55:7d:38:f7:05:27:0d:ff:90:7f:a0:00:e3:d3:d5:82:cb:
b3:63:98:f8:43:2e:88:b0:fc:56:e0:9d:5a:4d:ca:15:94:0d:
0f:fe:65:c7:79:72:e6:9c:5b:32:79:81:6e:98:19:d4:ab:c9:
73:c5:34:45:4d:77:b1:a2:21:10:a8:17:24:02:28:13:ee:95:
01:fd:cf:67:49:7d:75:df:ed:98:87:94:8b:ff:b6:5a:67:a3:
e0:66:95:22:fc:81:62:bc:8f:58:0b:8c:26:65:1c:63:3b:61:
05:68:ed:f6:7f:4d:44:d6:38:e7:4c:3f:5b:a0:d0:7a:87:95:
ef:d3:59:9b:99:2f:d4:82:1f:90:66:a4:a4:06:74:66:3b:cb:
cd:59:26:31:f3:84:b0:3a:74:ab:4e:10:bd:22:48:5f:be:c3:
e7:65:0f:78:99:19:08:d3:97:2e:13:f7:1f:ef:e7:b7:4d:a6:
eb:79:86:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:21 2025 by rpki-client