Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/dYsfx3N8F8Pa41InMzgd7Y-Nwv8.roa
File: dYsfx3N8F8Pa41InMzgd7Y-Nwv8.roa (raw, json)
Hash identifier: +2ick/BrqTQkAWkGD2npFbQdv9qSaL8sDhmWgVr+qIo=
Subject key identifier: 75:8B:1F:C7:73:7C:17:C3:DA:E3:52:27:33:38:1D:ED:8F:8D:C2:FF
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0194EF4F042CCB57E305A10772FB7CB914F6
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/dYsfx3N8F8Pa41InMzgd7Y-Nwv8.roa
Signing time: Mon 10 Feb 2025 10:02:00 +0000
ROA not before: Mon 10 Feb 2025 10:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31493
IP address blocks: 185.76.36.0/24 maxlen: 24
185.76.39.0/24 maxlen: 24
212.124.192.0/19 maxlen: 19
212.124.192.0/20 maxlen: 20
212.124.208.0/22 maxlen: 22
2a00:19e8::/29 maxlen: 29
2a00:19e8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ef:4f:04:2c:cb:57:e3:05:a1:07:72:fb:7c:b9:14:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Feb 10 10:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=758b1fc7737c17c3dae3522733381ded8f8dc2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:ca:86:91:70:df:e5:4e:8e:e5:b0:31:a9:
1b:fb:bd:77:55:fd:d4:f0:a1:6f:14:10:51:77:4a:
a3:ee:21:68:ce:24:0a:aa:00:31:92:ac:2d:c3:f3:
e8:53:17:e4:77:9b:5b:6b:0f:9e:2a:d0:7f:a4:92:
fa:fc:30:f9:c1:c5:2b:81:65:7c:63:23:03:20:54:
be:63:a5:07:84:25:9f:e3:31:72:66:27:61:2d:6a:
87:66:bf:77:00:df:d5:83:ff:55:e6:76:ca:a8:06:
7c:f3:5f:2d:5c:ed:c8:f6:43:0e:fd:e2:34:5e:78:
48:da:e3:45:0d:19:33:f1:2b:fc:f5:0a:f3:49:73:
52:66:20:47:97:4c:0c:f7:70:62:9b:53:25:49:28:
5a:a8:2f:30:01:0b:32:86:1b:eb:34:0a:02:da:f3:
92:91:a3:50:c2:16:58:16:7b:8b:5f:44:e9:87:eb:
09:d9:28:fd:44:55:47:20:e3:cb:76:1a:32:b7:33:
2b:9f:c7:cc:4d:e2:08:5b:10:c5:24:6d:8d:83:e0:
1b:a3:e6:d9:1a:76:ba:07:3b:fb:64:4d:3c:85:97:
ba:09:7f:60:7c:ef:56:ac:e5:ff:19:bb:b6:8e:6f:
78:eb:d6:c0:ae:24:b7:e0:cf:de:8d:2d:4b:c9:ff:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8B:1F:C7:73:7C:17:C3:DA:E3:52:27:33:38:1D:ED:8F:8D:C2:FF
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/dYsfx3N8F8Pa41InMzgd7Y-Nwv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.36.0/24
185.76.39.0/24
212.124.192.0/19
IPv6:
2a00:19e8::/29
Signature Algorithm: sha256WithRSAEncryption
2a:7f:bd:d1:ec:11:6d:a9:9f:84:f4:64:b0:af:77:52:45:c4:
dc:34:52:79:e2:77:f3:fc:eb:e4:81:43:c5:73:98:a7:72:7d:
12:15:f6:a2:30:4d:e8:30:14:8a:db:69:13:b9:b8:bb:fa:e2:
d2:32:d7:04:9a:6a:a2:fb:43:e8:d6:85:c3:2e:0b:10:ca:df:
94:7e:13:a0:08:ad:80:61:fa:8a:93:12:0c:73:59:cc:54:8f:
64:97:2c:99:54:10:8c:6e:1c:89:14:12:e8:65:57:8b:22:14:
ed:db:e4:9f:dd:88:16:a7:ee:34:50:15:a7:e6:99:47:7d:ff:
c4:dd:8b:84:d0:d6:17:64:a4:1f:2a:a6:ca:99:29:fc:5f:3f:
fe:da:71:15:4c:a8:9b:0d:bb:08:e5:3d:49:03:8c:57:8a:09:
86:25:e2:84:5f:42:9d:b4:33:f4:50:24:62:79:3e:7f:8e:10:
bf:53:3b:29:a1:7e:0d:51:87:cd:72:11:93:09:19:ed:c6:11:
16:68:d7:7d:4e:9a:d8:b9:f1:f3:96:80:8a:57:b2:5d:0e:08:
b7:5b:96:d3:b1:d9:51:e4:43:3b:14:43:6a:f5:6c:38:91:93:
d6:e6:95:3c:3a:6d:bc:c1:03:7b:31:4d:5e:52:d3:b3:7d:80:
a2:ba:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:05 2025 by rpki-client