Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k4iKGO7UoCQelG-VE7Zb37GDHAA.roa
File: k4iKGO7UoCQelG-VE7Zb37GDHAA.roa (raw, json)
Hash identifier: CfgOFR+eRUjr0ITmkPf/YrPGm8/0mSRvig8pVJqGkMU=
Subject key identifier: 93:88:8A:18:EE:D4:A0:24:1E:94:6F:95:13:B6:5B:DF:B1:83:1C:00
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 01941FFA2A619DEDD2D244C9551B7ADB6CB1
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k4iKGO7UoCQelG-VE7Zb37GDHAA.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62031
IP address blocks: 185.198.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2a:61:9d:ed:d2:d2:44:c9:55:1b:7a:db:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93888a18eed4a0241e946f9513b65bdfb1831c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:4b:ff:71:f7:01:6a:49:f1:ac:d6:8d:33:
0c:98:35:51:7f:79:e1:b3:f6:8b:cd:1e:f7:81:af:
7a:5f:67:4f:13:85:57:91:21:d7:54:d3:a4:99:63:
c4:2f:9d:a1:78:af:e7:54:27:5e:41:84:53:3b:ea:
10:aa:37:04:f1:1d:3e:b7:dc:51:ec:e3:fc:de:66:
24:56:49:b6:b3:b0:b3:eb:23:2b:c8:d5:22:ad:ef:
7e:6c:02:07:85:f5:01:ac:9e:27:dd:f2:cc:86:3a:
30:ea:49:ed:67:57:72:fd:18:09:92:80:60:34:7e:
34:9f:ed:c4:b0:3e:ec:e3:a5:d3:6d:0c:bc:1a:03:
cd:9c:0a:82:43:69:87:ad:c6:99:f1:db:99:2f:f1:
f6:e3:2d:0c:27:07:6e:c6:1c:57:01:2e:bd:e3:07:
7a:1e:15:90:59:f2:9c:2d:bf:a3:4c:ee:2d:a5:0b:
9a:2f:f2:02:9a:c6:b9:8a:99:ca:29:bd:34:a0:f7:
39:91:67:83:d3:09:a4:f4:a4:fd:77:0a:c6:fa:93:
0b:e9:e0:f0:68:28:36:d7:f7:b5:c3:fb:12:96:ff:
7f:8c:68:e4:2c:82:10:32:a0:1b:1b:30:70:64:dc:
e8:93:fc:ba:df:37:ea:e1:86:cf:f1:3a:79:c8:97:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:88:8A:18:EE:D4:A0:24:1E:94:6F:95:13:B6:5B:DF:B1:83:1C:00
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k4iKGO7UoCQelG-VE7Zb37GDHAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.16.0/23
Signature Algorithm: sha256WithRSAEncryption
06:8d:14:22:4b:c0:51:f5:a5:27:29:b5:e6:d4:89:28:fe:dd:
3f:64:b4:c6:67:4e:b6:8c:62:b5:db:f0:bd:9b:39:f9:6d:b5:
ec:cb:6f:e0:94:dd:68:0d:68:46:71:4e:6e:0e:8b:71:ea:2f:
bb:bd:0a:27:9b:27:a8:3e:6f:43:06:00:29:06:70:53:51:5a:
51:c8:6d:89:9b:63:bd:c6:33:d8:06:92:95:a6:34:7a:fe:1d:
0b:b0:9e:db:b4:29:2e:53:67:2d:e2:74:dc:59:21:63:1b:77:
c0:f5:21:71:3b:fd:a2:2e:f6:b3:14:08:44:c0:b4:85:e8:e3:
86:f2:d9:89:ba:61:dc:1c:e7:ce:61:d5:83:92:3c:3f:91:55:
d2:1d:4a:a0:05:76:ea:60:4a:3d:90:64:b2:56:1f:a1:de:d0:
c8:9e:64:a8:76:65:09:51:c9:10:61:b2:02:6f:09:03:b3:75:
7e:cb:8c:78:d9:65:34:e3:e3:84:6d:f6:df:fd:04:53:3c:1b:
da:6c:58:51:52:46:d4:73:c0:cf:33:ad:ad:c3:e2:17:1d:b0:
9d:0c:94:ed:8c:1c:68:ea:e4:c9:86:af:2b:90:3a:19:f8:9f:
4d:f2:e5:2a:17:a4:1e:3c:46:ba:87:c4:6d:57:8b:8b:8f:26:
c0:31:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 16:37:50 2025 by rpki-client