Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ai_GuoCfPyoaBb5vO4FL0He75yM.roa
File: Ai_GuoCfPyoaBb5vO4FL0He75yM.roa (raw, json)
Hash identifier: anew0DPejtgafE+KMqoXgVvwTOjrUNU5y1R8AA5ih1U=
Subject key identifier: 02:2F:C6:BA:80:9F:3F:2A:1A:05:BE:6F:3B:81:4B:D0:77:BB:E7:23
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451E158C4C015258FDFE70C6F111C4
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ai_GuoCfPyoaBb5vO4FL0He75yM.roa
Signing time: Wed 01 Jan 2025 23:48:16 +0000
ROA not before: Wed 01 Jan 2025 23:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50969
IP address blocks: 185.140.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1e:15:8c:4c:01:52:58:fd:fe:70:c6:f1:11:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=022fc6ba809f3f2a1a05be6f3b814bd077bbe723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:04:00:6d:1c:c9:e6:82:00:16:6a:24:be:
db:72:18:00:99:d7:9a:94:f2:c3:17:0a:0d:47:f8:
73:7f:b4:c1:6f:01:c2:5f:1c:a9:17:57:b2:07:e1:
e7:34:75:86:85:f2:8a:db:77:4c:84:b6:b7:23:cf:
4f:0f:43:0a:63:95:5e:4f:39:64:a9:da:67:46:56:
ac:c4:51:c3:80:e0:94:23:af:d1:70:75:0f:3b:dd:
ae:61:4b:00:4c:7a:e9:85:71:42:86:03:fb:ad:bb:
04:66:45:36:9b:29:c0:43:a9:6f:77:0c:f3:64:12:
87:26:bb:00:8f:e2:e6:62:85:a9:be:cd:72:fe:5b:
75:e2:bb:0f:14:4f:da:91:b0:b8:12:07:97:e7:f0:
e0:66:77:af:9e:3a:e0:cd:ef:fd:89:c8:bb:73:f4:
e9:c4:99:d1:0f:b8:41:c3:52:4b:64:5e:12:9c:88:
e4:41:e7:2b:61:11:f6:91:e4:43:c6:1a:83:cd:20:
e2:50:b9:29:29:01:88:ab:ad:63:87:a3:94:73:db:
57:4a:5a:b8:7b:87:0f:8d:c4:ef:bf:b6:35:cc:83:
60:6e:35:83:ef:45:5c:f8:57:85:8a:00:4b:26:64:
fd:46:bc:2f:33:a2:15:55:24:c6:60:a8:f8:96:8f:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:C6:BA:80:9F:3F:2A:1A:05:BE:6F:3B:81:4B:D0:77:BB:E7:23
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ai_GuoCfPyoaBb5vO4FL0He75yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.172.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c6:40:db:ad:a1:a5:52:13:61:41:6c:31:3f:f9:dc:31:79:
b8:a2:d2:26:23:53:2d:bc:1a:c0:83:d3:be:46:10:6e:75:73:
ff:b6:c5:5d:16:19:83:ba:46:86:40:da:6a:7b:0f:37:92:c3:
f3:48:c9:b0:1b:d2:da:ae:d1:42:ca:ee:06:a7:95:57:81:bd:
c6:fb:2e:7c:35:b0:3f:16:3e:3b:98:a6:2e:a9:3e:91:de:31:
a2:be:e2:c6:82:4b:e0:cd:77:2e:e5:7a:cb:0a:bc:62:d0:13:
a4:dd:55:ef:13:73:ac:c6:f1:33:18:3f:6d:90:7c:df:20:54:
16:f3:99:de:a4:25:bd:f4:7b:8d:76:d8:49:25:fe:2f:6f:39:
ac:ce:22:66:86:fa:b1:a8:0e:02:f8:34:12:97:2b:69:10:40:
56:0a:dc:05:f2:ef:7f:06:e9:15:13:67:41:c6:70:38:2c:f9:
46:19:a5:85:e2:26:28:ea:57:10:1d:92:77:06:16:18:1c:ca:
f1:0e:5f:39:b0:79:0b:7f:c5:1a:50:40:59:38:af:6b:57:93:
6c:bd:a4:39:a9:1b:a4:1a:f4:b5:bd:59:e6:b1:ab:2b:5c:61:
5b:5c:b3:0d:db:8f:73:8a:95:0f:e3:04:2f:cb:00:2e:55:a7:
85:b6:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:59 2025 by rpki-client