Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/x3gx9ZmWcqYUYgwfNJ2-ikitNlU.roa
File: x3gx9ZmWcqYUYgwfNJ2-ikitNlU.roa (raw, json)
Hash identifier: PoBxEk65XDNrDKrSzgJ3WZEqYfdrz8UsTQyDZWKAGW8=
Subject key identifier: C7:78:31:F5:99:96:72:A6:14:62:0C:1F:34:9D:BE:8A:48:AD:36:55
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0195659CF5E076D96ECF29714E0F9F09E46D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/x3gx9ZmWcqYUYgwfNJ2-ikitNlU.roa
Signing time: Wed 05 Mar 2025 09:22:20 +0000
ROA not before: Wed 05 Mar 2025 09:22:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:9c:f5:e0:76:d9:6e:cf:29:71:4e:0f:9f:09:e4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 5 09:22:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c77831f5999672a614620c1f349dbe8a48ad3655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:bd:9a:65:5e:ff:00:a7:da:27:96:eb:d4:
c4:e5:2b:3f:4a:02:2d:cf:8c:5d:fd:8d:fe:be:46:
40:5c:30:17:7c:f3:0b:62:1b:69:58:d6:18:75:73:
6f:c6:4b:1d:72:48:e5:7b:9f:76:42:63:73:b8:42:
5c:df:3c:9d:ea:1b:b1:83:a6:e3:82:78:d8:1f:b8:
9d:8d:d4:48:43:6a:fe:93:4a:ec:00:e9:5f:21:dc:
68:01:79:54:77:a6:7d:d4:3d:b9:b1:3c:5a:de:7d:
1b:7f:26:13:42:7a:3d:0e:bc:97:43:34:b4:86:9b:
23:3b:49:84:f2:da:b0:42:c8:5a:0d:9e:f0:24:50:
77:b1:78:aa:b2:38:dc:3a:32:45:a1:fd:f7:93:39:
7b:f4:fc:a6:e9:fb:a6:5b:54:c3:09:07:e5:df:7b:
16:f4:15:5f:b4:d5:59:96:69:d2:f9:a0:23:3b:a3:
91:90:ce:26:c9:02:14:51:28:f9:09:6d:48:13:c4:
07:2f:54:50:fe:e0:df:76:11:5a:e3:4b:49:3b:35:
5b:3d:24:a1:50:79:89:bb:39:1a:3f:f8:74:30:b5:
f4:f7:fc:a7:6a:97:aa:32:fb:bc:ec:74:51:5e:f3:
62:5e:ab:e2:2f:03:77:6e:f4:e5:56:89:18:68:57:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:31:F5:99:96:72:A6:14:62:0C:1F:34:9D:BE:8A:48:AD:36:55
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/x3gx9ZmWcqYUYgwfNJ2-ikitNlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:d7:09:ea:71:2b:74:8c:46:03:aa:b9:2f:16:4f:48:bb:b5:
ca:5d:b8:12:dd:1e:ae:11:31:a1:94:4b:f0:87:86:44:fb:33:
68:16:8f:80:7f:72:01:8b:0f:65:df:97:f3:d9:ec:31:fb:fe:
4e:65:aa:a6:31:01:f6:5b:89:c3:45:b2:12:19:13:5d:d1:28:
d4:4a:a7:3a:6e:82:c3:90:db:5b:00:60:09:f2:f1:39:04:74:
a7:60:e2:3c:89:11:ae:c9:71:d0:c5:d2:d2:47:c0:f2:ff:b5:
60:5c:84:d2:c8:1a:70:c1:78:95:60:ee:1e:f9:c9:e4:b0:07:
50:1c:c3:bd:5f:20:ca:6e:ec:21:a4:c3:84:24:aa:d2:ff:ba:
10:92:63:a8:ea:2a:4a:6d:57:86:62:13:fa:f3:49:82:74:4f:
1c:2e:56:d1:8e:4f:58:21:db:d9:c8:c1:3c:87:2f:82:80:b8:
bf:95:e8:d9:bb:f3:a1:e5:40:57:71:cc:f1:9f:9b:83:16:54:
78:86:89:c5:8a:82:40:3c:1e:9f:17:53:2d:fa:a2:04:4a:ef:
04:5d:50:a7:85:76:73:1e:da:e0:5c:db:b5:08:d8:54:c8:2a:
c5:b4:8a:08:ba:ff:ac:a2:ae:ed:2f:99:0b:91:eb:fd:00:db:
3b:1c:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:54:13 2025 by rpki-client