Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/rnkd3aH7pF24TCTJAylZcN41MhA.roa
File: rnkd3aH7pF24TCTJAylZcN41MhA.roa (raw, json)
Hash identifier: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=
Subject key identifier: AE:79:1D:DD:A1:FB:A4:5D:B8:4C:24:C9:03:29:59:70:DE:35:32:10
Certificate issuer: /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial: 01942826D9EB263C1F65C68C70A03BCB7796
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/rnkd3aH7pF24TCTJAylZcN41MhA.roa
Signing time: Thu 02 Jan 2025 17:53:42 +0000
ROA not before: Thu 02 Jan 2025 17:53:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199525
IP address blocks: 185.65.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:d9:eb:26:3c:1f:65:c6:8c:70:a0:3b:cb:77:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Validity
Not Before: Jan 2 17:53:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae791ddda1fba45db84c24c903295970de353210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:ef:47:c0:0a:57:21:a1:03:50:be:51:16:
82:42:11:67:03:28:aa:20:4b:59:ae:85:9d:3b:ae:
a7:47:b3:a0:a1:a6:a2:65:b1:14:bf:10:ee:49:d7:
e2:8c:26:1d:dc:4f:db:93:de:7d:33:ad:0b:7f:45:
e2:6e:7b:b3:c4:3e:f9:0f:29:6b:e9:2c:d2:2e:1f:
57:83:5c:36:5d:cc:33:52:29:26:36:8d:f7:de:b8:
62:0f:df:29:ac:83:a0:bf:b0:ed:c6:e6:3b:28:87:
07:1d:fb:f1:4d:4a:c6:e1:92:a7:66:f8:0c:22:59:
04:3c:07:e2:61:1d:d5:0e:fa:99:8e:50:d5:af:c7:
92:91:b3:fb:25:00:8b:66:3b:b3:53:4c:ce:a2:e9:
8f:5f:55:38:c1:d6:0c:f4:0e:c2:3a:29:5a:40:c2:
e6:25:49:71:31:c1:cd:0e:d6:06:24:1f:0d:69:9f:
6d:d4:c1:5d:ce:6f:cc:f6:d1:47:d4:c0:5f:cf:8b:
46:bf:46:cf:fe:f6:62:52:1d:b8:93:d0:e8:88:56:
e9:9a:b7:d4:34:30:2b:5f:89:f4:b7:0c:a4:db:d4:
37:8f:59:d7:15:76:3d:1e:44:14:78:36:d4:80:15:
3b:99:9a:5b:56:d1:a7:b7:45:0d:f3:24:ea:e2:ce:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:1D:DD:A1:FB:A4:5D:B8:4C:24:C9:03:29:59:70:DE:35:32:10
X509v3 Authority Key Identifier:
keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/rnkd3aH7pF24TCTJAylZcN41MhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:74:3f:68:7e:bd:9d:20:dc:43:cd:a2:4f:2e:e8:71:b2:e9:
3e:4b:93:5a:4f:dc:3c:4f:c5:49:44:9f:d0:c7:51:b6:2a:bb:
26:2f:a6:1c:57:d5:b9:cd:15:0b:ab:83:a3:d3:fb:04:06:d9:
b2:4a:6f:8a:c3:b4:fb:eb:38:cb:13:67:4b:f6:3a:5a:53:4f:
e8:8f:90:62:14:f5:48:d6:e7:db:d9:27:bf:01:53:b6:ca:a2:
b8:d5:ed:7e:c9:7a:99:a0:c6:63:9e:64:5a:53:55:75:f8:10:
98:bc:3f:b0:9a:ce:62:24:22:fb:1d:fd:04:49:31:3a:dd:cb:
50:60:9e:bb:15:8a:96:e2:78:6d:09:15:92:45:b2:ce:bf:07:
8f:76:5e:b2:3f:79:73:54:ff:8b:0d:d9:aa:f6:ac:69:e3:b5:
21:88:b8:92:65:38:00:b2:0e:98:2c:8f:11:13:14:6a:05:61:
a8:07:69:0e:51:d6:f9:68:f8:a2:ed:5e:9e:fb:40:96:8e:1c:
41:1f:63:95:54:9e:1f:ca:12:0d:16:b9:85:e1:a5:ae:63:ce:
9d:39:d0:c9:0d:8e:15:d1:c2:17:08:32:b8:ca:a0:54:d2:5c:
24:45:ab:85:f1:df:8f:04:39:b4:37:f3:c5:c7:02:ea:57:17:
0f:35:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 10:43:49 2025 by rpki-client