Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/I146XOsEXmI_kTddMioc1_CBagc.roa
File: I146XOsEXmI_kTddMioc1_CBagc.roa (raw, json)
Hash identifier: XfMSkgyypkl8JIN+T3bF61lb8ckh4cxY60LUFglH/EE=
Subject key identifier: 23:5E:3A:5C:EB:04:5E:62:3F:91:37:5D:32:2A:1C:D7:F0:81:6A:07
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746AA3F9EF006DE83A495F9744A0D1E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/I146XOsEXmI_kTddMioc1_CBagc.roa
Signing time: Thu 02 Jan 2025 13:48:49 +0000
ROA not before: Thu 02 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205463
IP address blocks: 188.132.130.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:aa:3f:9e:f0:06:de:83:a4:95:f9:74:4a:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=235e3a5ceb045e623f91375d322a1cd7f0816a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:09:6f:6e:23:f5:25:51:f0:76:98:aa:68:
52:bb:9e:b1:e6:09:fd:7d:ef:a0:48:a3:ae:7b:f1:
29:a3:13:cd:07:7b:40:13:ec:60:e3:c0:f3:55:c1:
43:c5:f7:99:24:3f:4f:a6:25:a6:53:7b:3a:3b:f3:
8a:65:99:99:da:19:df:90:8a:9d:c4:c2:1b:c1:24:
f0:79:09:48:d3:00:de:5e:b6:46:66:19:d3:42:50:
a8:dd:92:45:ca:f5:a7:58:ac:31:20:c9:8d:f1:06:
95:17:0f:b4:a3:2a:22:f1:82:d3:89:63:f4:67:41:
28:bf:ae:99:e3:bd:9a:29:e8:8f:6d:65:d7:e3:26:
3c:59:34:aa:96:33:8d:c4:6f:91:6f:bc:6e:85:d6:
1e:6c:6f:52:95:43:9b:97:63:50:9d:58:fc:98:38:
06:7c:b0:96:36:80:a8:73:30:f0:a5:50:a5:53:19:
34:73:50:1a:ef:8e:0e:14:5a:73:21:09:b0:3d:7c:
48:3d:f0:dc:bb:b9:bc:f6:91:6b:f3:94:56:c2:b6:
cc:66:24:c2:af:b2:f6:67:f9:4f:7a:04:2d:43:a9:
db:bc:26:52:31:3b:de:d8:2c:3d:de:f0:1a:51:05:
a7:d2:54:47:29:c7:68:08:2d:27:59:ca:42:78:16:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:3A:5C:EB:04:5E:62:3F:91:37:5D:32:2A:1C:D7:F0:81:6A:07
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/I146XOsEXmI_kTddMioc1_CBagc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.130.0/24
188.132.165.0/24
188.132.202.0/24
Signature Algorithm: sha256WithRSAEncryption
16:8e:fa:26:5b:a2:76:dd:2d:43:6a:72:fe:7e:7f:be:ac:4f:
c7:47:f8:e7:7c:f0:34:9c:65:18:0c:2f:6d:32:8c:81:76:26:
a6:6c:43:f3:51:08:4c:30:b3:59:3a:1a:84:62:49:43:bd:2a:
a5:61:e0:79:5c:a7:fb:c5:a1:bc:ba:c0:ea:d9:b1:00:18:a4:
ad:30:71:a5:8c:6d:50:45:57:49:79:b2:9c:54:58:e1:01:22:
90:0c:75:18:0d:db:34:32:d9:65:d5:e5:0b:52:9b:b0:e0:89:
0f:85:81:46:10:9c:c2:21:cd:c9:ea:a9:18:3c:3b:54:b0:7f:
1c:03:a2:1d:0b:64:16:19:ff:eb:40:a6:61:b6:9c:fb:1f:c5:
c0:54:32:24:7b:47:58:20:3d:af:9f:29:7d:83:2d:0b:f6:c5:
b6:88:87:c7:7a:94:56:d2:ad:58:6c:a9:30:99:70:90:8c:ee:
9d:bf:c2:95:4d:b9:01:3e:c1:8f:53:e7:53:fd:95:ff:1f:06:
4d:13:f1:0c:c7:86:0f:3b:94:6a:ea:ed:ad:9a:1d:d9:e2:f2:
d2:c1:5c:54:d5:e5:92:16:e2:cf:b3:9c:ba:73:3d:6d:a9:d3:
29:1a:4e:cc:78:8b:51:d3:63:9b:24:22:8d:ad:83:5b:48:c7:
c5:81:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:58 2025 by rpki-client