Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IEy4FG5w7vw5fwWLJmUDSYwDaHM.roa
File: IEy4FG5w7vw5fwWLJmUDSYwDaHM.roa (raw, json)
Hash identifier: yyew7EQmZw1cR5FC5jaEonANxJjuYsh1ytGgvuE1p98=
Subject key identifier: 20:4C:B8:14:6E:70:EE:FC:39:7F:05:8B:26:65:03:49:8C:03:68:73
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01958FC1FF18411465C3B28EF6AE98A60673
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IEy4FG5w7vw5fwWLJmUDSYwDaHM.roa
Signing time: Thu 13 Mar 2025 13:46:50 +0000
ROA not before: Thu 13 Mar 2025 13:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209178
IP address blocks: 185.233.19.0/24 maxlen: 24
185.235.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:c1:ff:18:41:14:65:c3:b2:8e:f6:ae:98:a6:06:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 13 13:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=204cb8146e70eefc397f058b266503498c036873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:c9:f0:2c:6a:e5:a9:cc:99:14:00:14:11:
36:5f:1a:dc:a4:46:be:9b:8b:ae:6c:a3:ce:a6:63:
af:15:60:af:63:b3:65:6f:fe:9e:55:ae:d7:12:a4:
5e:1f:d7:4b:51:96:e8:21:2b:ea:12:d5:6a:1f:cc:
f0:21:f7:cc:a8:7e:ee:c2:18:2a:a4:00:14:2c:5a:
3e:0a:94:e3:06:25:06:81:c6:02:40:29:18:37:a2:
f3:c0:23:f2:e5:fa:88:f7:8f:11:9b:24:98:fb:da:
98:39:27:b6:41:66:fb:f1:b3:69:a9:8a:eb:c4:6f:
8c:55:e7:17:9c:1c:63:25:0a:de:58:14:f2:af:0c:
6d:98:6b:f5:48:4b:26:eb:54:23:bc:19:7d:46:29:
38:dc:d6:17:09:5e:25:b8:3b:ab:e6:86:12:55:57:
16:2a:62:76:5e:98:43:90:62:ea:9e:4f:d1:bd:f5:
1e:13:ed:6d:06:a4:9f:26:cf:35:5b:f4:f2:ba:7a:
11:3a:a0:ed:af:ee:e4:a9:53:6f:d6:be:49:92:9d:
f4:2b:35:39:dc:0f:b4:c4:ef:d2:6c:4d:31:47:5c:
df:f8:83:50:5f:90:ad:98:db:3d:38:26:89:90:58:
a6:dc:d5:a6:ef:a2:aa:39:8c:bc:75:8b:6c:fd:34:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:B8:14:6E:70:EE:FC:39:7F:05:8B:26:65:03:49:8C:03:68:73
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IEy4FG5w7vw5fwWLJmUDSYwDaHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.19.0/24
185.235.165.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:74:76:5d:d0:2c:81:32:b1:dd:89:6e:ec:6c:70:5d:46:74:
d6:75:ef:93:1b:1d:95:fa:08:45:56:ef:c3:48:aa:db:b6:68:
8a:d1:3d:4f:22:99:3d:fa:09:7b:20:e4:2a:e0:97:d3:ab:78:
3b:96:45:61:1d:0a:42:e0:f9:e5:cf:13:0b:d6:e5:c0:c5:20:
26:c6:d3:0c:7e:cb:7c:37:ad:a5:5c:60:88:e3:d0:e5:bb:fb:
ef:50:f1:ef:b0:c3:72:b2:67:b7:bb:83:f0:05:3f:45:db:46:
1b:2c:d0:9a:1e:b1:e6:26:34:21:e1:ee:84:3e:22:3d:46:a5:
6f:2a:27:1e:4a:af:67:29:ae:95:5b:39:67:30:39:fb:24:c6:
0e:ad:6a:6c:83:18:aa:87:a1:a1:e6:71:d0:77:d6:b4:af:a1:
8e:51:a8:76:fd:84:60:d4:ed:64:f6:fd:03:c5:f4:78:64:4f:
6a:bc:84:53:f9:4b:1e:7e:75:c2:20:1d:c8:50:57:1e:ca:ae:
87:b7:3e:eb:94:64:a5:c1:00:30:e1:a8:f9:bb:a2:7b:95:8d:
bc:33:da:96:91:de:d7:0d:33:76:69:04:84:6c:c3:32:3e:02:
94:30:a1:c6:95:85:a7:f0:49:6e:d3:8d:d0:0b:f1:54:17:37:
d8:e2:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:38:32 2025 by rpki-client