Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/14BL-wRZn5qjKkbFlqqqjR24P9o.roa
File: 14BL-wRZn5qjKkbFlqqqjR24P9o.roa (raw, json)
Hash identifier: Q0+ry8DIoIvWS3jg4INnkBPjowRqJvM+1fF1Ae0B9HU=
Subject key identifier: D7:80:4B:FB:04:59:9F:9A:A3:2A:46:C5:96:AA:AA:8D:1D:B8:3F:DA
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 019425212D4F0F7860EEC2A8EECFBDFA1E9F
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/14BL-wRZn5qjKkbFlqqqjR24P9o.roa
Signing time: Thu 02 Jan 2025 03:48:38 +0000
ROA not before: Thu 02 Jan 2025 03:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206334
IP address blocks: 185.189.92.0/24 maxlen: 24
185.189.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:2d:4f:0f:78:60:ee:c2:a8:ee:cf:bd:fa:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jan 2 03:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7804bfb04599f9aa32a46c596aaaa8d1db83fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:a4:77:a1:02:b1:71:9a:31:d6:bc:c9:24:
95:8f:52:92:f4:66:55:62:8b:38:a4:45:ee:ac:6f:
bb:08:1d:64:cf:33:d9:dc:36:19:eb:c4:a6:73:58:
83:7c:6e:33:1e:58:83:42:04:24:c8:d1:73:35:9e:
98:85:f0:58:d2:92:00:9d:e7:ba:48:1d:8f:88:69:
33:0d:35:99:0f:07:50:9c:37:ab:88:80:f5:50:e6:
08:4f:30:14:23:20:ea:53:c8:8a:7b:d5:e8:94:8e:
4d:47:8c:28:9a:ff:7c:2c:0a:66:d4:97:b2:8b:19:
04:bc:28:fc:3a:ce:78:9b:e1:05:d5:54:e4:b0:f3:
7a:c0:74:71:69:51:b6:b9:a7:b2:0f:e5:16:7c:0a:
90:c5:43:25:cf:ae:cc:cf:d0:80:7f:cf:73:e3:7e:
7c:d7:f1:d6:4a:27:b1:45:64:32:61:93:21:c1:ad:
6c:96:ff:e5:f6:5b:fc:a8:0c:1e:67:21:64:84:34:
90:18:fa:3e:95:6d:25:cc:c8:3a:33:d1:7f:c1:db:
f5:5b:9b:9a:72:fd:40:10:16:f7:82:81:82:74:45:
98:08:4f:76:de:5c:39:b6:ce:45:86:7c:7b:a2:1c:
ab:d8:98:a4:76:29:9e:e4:56:16:e4:32:da:c1:f8:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:4B:FB:04:59:9F:9A:A3:2A:46:C5:96:AA:AA:8D:1D:B8:3F:DA
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/14BL-wRZn5qjKkbFlqqqjR24P9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.92.0/23
Signature Algorithm: sha256WithRSAEncryption
10:5c:d3:bb:1a:9b:87:74:d5:64:5c:81:2a:77:45:f2:15:1a:
18:7e:62:1a:43:e6:f0:f5:aa:ca:66:55:a7:72:ed:b1:58:a2:
3b:5d:ad:98:b2:c5:ac:f8:16:2c:c3:69:f2:53:16:2b:ef:55:
60:b9:b0:f4:48:df:b2:20:4b:d1:cf:3a:b9:25:22:86:c7:eb:
8d:75:41:87:36:9d:c3:44:b9:93:e5:d3:7d:97:c4:b1:ee:36:
ea:e4:d0:76:a9:eb:18:1f:1a:e7:6f:ee:93:0b:3d:82:51:02:
fb:b4:b0:01:9c:d6:78:2e:c8:92:a3:f0:22:dd:0a:f0:51:82:
78:3d:35:fe:65:99:ef:65:71:1e:00:57:ad:8f:40:f0:95:eb:
f3:d2:b3:32:e8:71:14:db:ed:85:6a:58:c4:d7:a8:e1:94:e5:
6a:24:35:e7:2f:36:f5:bf:3a:21:29:76:d5:9b:2b:56:85:20:
9c:e4:92:ad:6c:87:c4:78:41:c2:dc:a9:be:4d:9f:b6:3a:c6:
68:f2:8c:de:33:70:19:0b:97:6b:c7:ab:3d:83:02:a8:84:3b:
7f:c9:76:53:01:d7:68:10:30:21:43:95:d3:0f:a1:aa:4b:78:
5f:8d:3c:47:a7:72:5d:e8:74:c4:99:5a:b4:32:20:6a:04:cd:
48:a1:f4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:35 2025 by rpki-client