Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/GgOjLst_2cOjWFXXQ04HdoXttH4.roa
File: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (raw, json)
Hash identifier: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=
Subject key identifier: 1A:03:A3:2E:CB:7F:D9:C3:A3:58:55:D7:43:4E:07:76:85:ED:B4:7E
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019425FDB488D552DC87F1CE454B91E6EDF5
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/GgOjLst_2cOjWFXXQ04HdoXttH4.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60267
IP address blocks: 185.72.15.0/24 maxlen: 24
185.154.56.0/22 maxlen: 22
185.224.48.0/22 maxlen: 22
193.242.164.0/23 maxlen: 23
194.62.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b4:88:d5:52:dc:87:f1:ce:45:4b:91:e6:ed:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a03a32ecb7fd9c3a35855d7434e077685edb47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:81:8b:09:3d:f3:d7:e3:7f:31:55:dd:51:
4f:fd:6b:1b:d9:01:f7:95:45:cb:4e:14:15:bb:39:
73:30:9b:f2:46:66:38:3e:7d:92:25:fd:ad:99:1f:
c9:39:af:7f:cd:58:4f:fa:14:ae:c8:f1:42:fb:67:
8f:3f:a1:26:86:4d:ec:fb:89:49:13:db:5e:9c:7d:
d4:a5:32:f8:ce:49:d3:6f:3e:7d:ae:a5:39:ce:78:
f3:86:d0:b5:96:16:ab:49:8e:53:73:8b:9e:fc:1c:
6a:f8:02:8f:dd:af:b0:6a:6e:07:be:b5:53:26:e3:
0b:86:d2:43:f1:79:a9:80:93:aa:df:06:db:7d:c1:
5d:00:87:e6:22:93:07:10:8d:46:86:20:e8:7c:7f:
a8:bf:21:e8:f9:b4:5d:50:94:e6:5f:09:29:09:87:
21:1f:3d:bd:a1:c2:ee:d6:a1:50:8c:a4:9e:0d:28:
ae:d9:ab:54:5a:37:b8:a7:19:94:a5:41:68:a8:1f:
9c:5a:ae:c8:ab:1c:d2:07:59:a1:bf:ab:4f:89:81:
7b:ea:c1:ac:f1:83:e7:7b:03:e3:f5:d0:f1:69:0d:
5c:e0:bc:a5:71:f8:1c:81:08:22:b6:2b:dd:f0:27:
a3:08:2e:bc:d4:93:c0:a0:9f:cc:3b:b7:c8:6f:af:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:A3:2E:CB:7F:D9:C3:A3:58:55:D7:43:4E:07:76:85:ED:B4:7E
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/GgOjLst_2cOjWFXXQ04HdoXttH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.15.0/24
185.154.56.0/22
185.224.48.0/22
193.242.164.0/23
194.62.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:e8:b7:be:e1:89:3b:b2:4b:f1:8c:e3:0c:45:70:0f:56:52:
08:c7:aa:08:ba:ff:b4:25:8e:20:b2:9c:32:ed:47:6b:3d:96:
0e:27:cb:cb:a4:98:66:53:16:75:3a:4e:11:1d:20:d1:a6:9a:
b5:0f:2f:ea:2b:24:ba:90:cc:fd:fc:8c:a9:6b:23:3a:a9:06:
26:04:ab:24:fc:05:db:dd:58:52:9c:9a:f8:4f:13:06:66:68:
39:e9:cf:13:de:81:99:24:c0:e1:26:24:8b:1a:76:d0:e8:92:
3d:97:7c:b2:87:52:c2:32:83:86:67:1b:96:ad:80:d2:da:54:
9e:71:0b:0f:34:ea:a4:f9:13:55:14:2a:25:6c:db:85:e8:c2:
61:ce:1f:74:1f:2c:f7:51:23:a4:6b:0c:e6:df:a7:28:e6:3e:
e7:11:6a:b2:f1:0d:75:57:cd:5a:d4:0f:77:6a:c2:1b:de:14:
be:69:9f:50:0d:e1:c8:6d:09:a2:08:a8:b7:4f:bc:61:c1:e5:
4e:c3:35:27:86:09:2e:64:62:81:ac:f0:22:b0:c5:6d:f9:c1:
0f:39:c2:c2:67:d8:4e:c7:22:ec:1c:9b:88:7a:55:0b:07:ba:
98:aa:c3:e9:48:04:35:d0:51:6b:6b:1b:4c:c8:24:9d:83:c5:
e1:c2:ad:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:49 2025 by rpki-client