Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DX6qFlDMN52p4as27n7T4lkBs-g.roa
File: DX6qFlDMN52p4as27n7T4lkBs-g.roa (raw, json)
Hash identifier: Do8aGt4x8W50dfomADVPVrSe/cOugMYW0gTcuaUxB4E=
Subject key identifier: 0D:7E:AA:16:50:CC:37:9D:A9:E1:AB:36:EE:7E:D3:E2:59:01:B3:E8
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746BF7B4BA4F89BEEA4CF01C6B25763
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DX6qFlDMN52p4as27n7T4lkBs-g.roa
Signing time: Thu 02 Jan 2025 13:48:55 +0000
ROA not before: Thu 02 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216076
IP address blocks: 188.132.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:bf:7b:4b:a4:f8:9b:ee:a4:cf:01:c6:b2:57:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d7eaa1650cc379da9e1ab36ee7ed3e25901b3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:d4:b4:dc:07:c8:53:c8:d5:48:66:bf:7d:
3c:1c:d6:21:91:0d:6b:4b:79:7a:e9:4e:8b:a6:f3:
5d:d9:89:e4:e2:7a:f9:db:9c:45:5a:21:d2:a5:76:
11:e3:54:57:dc:86:e8:a7:de:78:be:19:db:e7:5a:
1d:c1:e4:ad:21:42:b7:77:85:f6:bf:c7:e4:1b:a0:
43:69:a2:47:4b:12:1b:70:e9:d4:6a:02:71:2a:d9:
4c:1e:b6:82:58:c3:2f:10:0e:60:33:1d:78:5d:b2:
f5:78:0e:cd:df:c1:dd:f8:b8:be:b7:a4:e3:ce:34:
6c:36:21:21:d4:dc:c9:13:7d:d3:7a:71:91:47:8e:
ad:55:08:5d:c4:47:c4:94:06:df:26:73:9c:a6:15:
9e:b7:51:4a:9f:0b:c8:80:3f:54:cb:16:8e:e5:db:
c8:61:30:e5:ff:9a:13:5a:05:7c:58:90:2d:3a:f3:
d9:55:dd:4e:6f:99:00:a4:36:5c:46:f3:70:2a:20:
8f:53:8f:b3:77:57:6d:31:01:ff:ea:01:ce:de:99:
02:25:d0:64:af:1b:b1:12:d9:59:86:a8:25:3d:45:
15:90:b1:a9:d5:21:02:e3:d0:05:17:b8:ae:ef:f6:
87:b6:53:8e:6b:c5:32:54:ac:a9:f0:b2:77:f4:6a:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7E:AA:16:50:CC:37:9D:A9:E1:AB:36:EE:7E:D3:E2:59:01:B3:E8
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DX6qFlDMN52p4as27n7T4lkBs-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.160.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a3:61:49:46:5f:b9:17:db:e2:a6:aa:5f:1e:07:aa:71:34:
64:01:dc:ec:c1:64:27:d7:b7:13:e5:07:87:60:08:c4:78:be:
a4:be:4b:2b:b6:df:19:ef:ac:cc:76:07:8a:6f:11:2e:18:20:
e3:67:1d:ca:b8:87:7c:b5:10:2f:a0:35:b3:74:bd:65:04:50:
3b:9c:c7:e6:22:c8:69:5e:ef:05:d6:0d:c5:0b:48:ec:a0:60:
d8:ab:7c:5e:62:57:12:c4:3b:f5:30:29:01:d2:d3:70:f0:e9:
d1:d4:14:fa:86:5f:62:73:31:7a:28:08:2e:62:c7:f4:e9:5f:
42:de:4a:75:08:00:03:5b:f9:bb:3f:31:10:17:ff:3b:3c:0c:
54:65:42:d2:9d:7b:a7:d4:17:9e:47:f9:f7:fb:d1:af:12:5f:
ef:28:e8:ab:ac:24:88:65:09:1f:03:c8:9e:33:09:e3:94:29:
f1:c7:49:25:95:d0:e9:09:4d:04:0b:ea:17:12:57:d7:48:13:
3f:ca:70:96:ad:c8:14:da:91:f6:16:0e:08:29:76:80:11:1f:
d5:ab:48:22:9f:69:9b:7a:34:43:a9:15:dc:48:76:1b:4e:b8:
0c:38:86:0d:ac:ab:c0:fe:3d:1a:5c:96:4a:e0:c2:a6:a8:a6:
e9:34:c1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:17 2025 by rpki-client