Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/mS1g5aNaOIe32m5_FgfjTc6VbP4.roa
File: mS1g5aNaOIe32m5_FgfjTc6VbP4.roa (raw, json)
Hash identifier: DRqrjZnRKpeQWBmj82tLSsN99MhvkwnNbbxykbvBnVg=
Subject key identifier: 99:2D:60:E5:A3:5A:38:87:B7:DA:6E:7F:16:07:E3:4D:CE:95:6C:FE
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01941F8C163CB9A11EFFEEF6466BE866E127
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/mS1g5aNaOIe32m5_FgfjTc6VbP4.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 185.67.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:16:3c:b9:a1:1e:ff:ee:f6:46:6b:e8:66:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=992d60e5a35a3887b7da6e7f1607e34dce956cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:d3:f7:f0:e2:24:18:c1:42:f2:bd:9f:2e:
85:c9:95:ad:f1:2c:33:37:09:ee:15:5a:95:53:eb:
af:ae:d3:b3:24:18:cc:dc:df:97:c3:a7:35:ad:60:
d8:59:f6:40:62:ac:a3:75:8a:0c:5c:29:d8:30:52:
f0:c8:d5:bd:f4:65:f3:3c:88:cc:2a:e5:81:0b:6a:
2d:71:31:0a:e0:fd:aa:b0:9d:a2:cc:2b:61:fa:91:
78:3a:46:ef:36:71:4d:b1:41:f2:2e:e5:62:c1:3f:
87:ee:94:6b:21:9b:31:ab:c7:9f:29:21:cf:2e:b1:
54:a5:74:80:b6:ab:b7:de:0d:6a:df:91:20:4d:99:
f2:f1:49:b0:55:13:bc:a5:d4:f2:12:7d:23:e0:bc:
be:ff:08:08:73:39:8d:c1:4f:3a:21:c0:74:3b:64:
64:e4:5b:75:20:98:54:dd:60:47:ab:a9:b4:ec:56:
ba:39:5b:b4:fc:16:67:7c:13:16:f9:a4:18:99:6a:
b9:ee:c9:f3:74:b5:93:50:43:99:a6:db:9e:f4:c8:
c2:a1:04:9f:13:5d:14:d9:9d:bb:30:5b:2e:e0:1d:
fe:ed:34:88:d1:12:86:9c:b4:be:8b:b1:f7:45:8b:
e3:74:76:1a:46:e5:29:7d:35:98:80:7f:4d:5f:89:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:60:E5:A3:5A:38:87:B7:DA:6E:7F:16:07:E3:4D:CE:95:6C:FE
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/mS1g5aNaOIe32m5_FgfjTc6VbP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.124.0/24
Signature Algorithm: sha256WithRSAEncryption
86:35:b6:bf:30:f1:36:f5:a4:46:88:01:0c:c9:30:b8:34:18:
62:a6:28:da:8c:89:48:af:49:fa:56:a6:2f:4a:23:f5:ba:a3:
cc:87:e8:e9:ff:68:f0:b1:a5:9f:dd:49:df:f9:b5:ce:13:69:
d1:93:ef:28:31:d5:99:da:ad:49:a9:bf:4b:e9:1c:10:4b:a7:
36:ef:ae:ad:c3:19:87:a4:bb:88:c7:78:39:80:12:e6:e8:da:
31:66:5a:7a:bd:5e:d4:c7:c8:01:45:16:fb:60:b8:e4:dd:2b:
bc:83:21:51:e6:0f:d9:ee:60:ba:9f:ee:2c:6c:95:92:9b:c2:
a3:01:e1:37:11:95:db:7f:d3:64:cb:8e:f0:97:47:f7:f2:e9:
91:c3:33:47:e5:73:c9:ad:3f:c4:b5:cb:d4:a3:ed:67:42:86:
79:64:ec:6d:35:70:49:e3:34:08:7e:4b:2a:71:ae:60:a7:ec:
56:59:1b:10:d2:17:bd:54:7b:02:95:40:a6:c3:81:91:59:c2:
15:f4:66:3c:5f:da:b8:43:d2:1c:0b:1b:26:fe:f4:d4:17:db:
d8:4a:30:88:ac:b4:80:cb:0a:18:20:5f:09:27:e0:97:6a:3f:
29:93:3e:bc:a6:ed:c5:64:ab:3d:32:1f:31:78:ca:2e:a9:86:
e8:07:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:54:27 2025 by rpki-client