Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/0iqw0_DRAXXz4sreW3NPTcIykK8.roa
File: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (raw, json)
Hash identifier: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=
Subject key identifier: D2:2A:B0:D3:F0:D1:01:75:F3:E2:CA:DE:5B:73:4F:4D:C2:32:90:AF
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 0194258E822D99C40030F09F44C376123623
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/0iqw0_DRAXXz4sreW3NPTcIykK8.roa
Signing time: Thu 02 Jan 2025 05:48:03 +0000
ROA not before: Thu 02 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61437
IP address blocks: 185.200.156.0/22 maxlen: 24
2a09:a940::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:82:2d:99:c4:00:30:f0:9f:44:c3:76:12:36:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Jan 2 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d22ab0d3f0d10175f3e2cade5b734f4dc23290af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:02:cc:69:ae:e7:e4:fd:9a:46:f3:3d:1f:
5c:62:b1:38:e7:7c:46:e6:3f:05:99:bf:85:e1:b0:
7f:39:69:23:a3:0a:15:e6:e5:dd:96:cc:ff:cd:9a:
29:b8:ae:ee:b3:d4:aa:9e:bf:59:2a:47:83:f8:e3:
cb:39:24:1d:c0:7d:44:c5:1e:9f:f7:63:fe:32:85:
fe:b7:73:a6:17:d0:1a:7a:80:69:54:65:fa:5f:52:
f8:59:38:dd:c4:39:32:7c:1e:8e:16:40:77:12:e5:
91:4d:f3:81:d5:da:26:d7:11:ec:5e:38:0f:ea:70:
85:cc:a9:e4:ac:44:0c:58:f2:76:be:8d:56:5d:4e:
26:a6:38:4a:fd:4f:86:3f:7c:b6:3a:c3:4b:b9:7c:
82:a4:9e:3a:28:76:62:9b:b7:2f:66:7c:33:8a:da:
2f:86:5d:c2:25:2e:6a:09:b8:78:f5:94:03:f3:18:
37:2d:fb:b9:53:a7:c5:0a:e5:e0:69:af:23:d7:15:
88:74:d9:81:be:5b:3b:2e:92:df:e7:35:d7:3d:67:
01:0a:df:36:66:f7:65:91:7c:ab:2b:70:4d:84:c1:
9c:95:2a:16:a1:6d:71:6c:53:7a:69:09:56:70:19:
f6:d6:1b:07:59:df:4e:4d:f5:0b:40:2a:7e:e4:3a:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:B0:D3:F0:D1:01:75:F3:E2:CA:DE:5B:73:4F:4D:C2:32:90:AF
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/0iqw0_DRAXXz4sreW3NPTcIykK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.156.0/22
IPv6:
2a09:a940::/29
Signature Algorithm: sha256WithRSAEncryption
92:5d:08:0a:c6:83:a0:68:55:45:f6:34:8c:fb:95:1a:6e:6e:
1b:df:4a:f3:f2:5d:1d:42:88:78:b6:65:ac:23:01:c5:a2:b9:
47:81:5d:89:54:32:22:66:d3:d9:06:71:a0:2e:5f:f7:f3:7e:
e7:b0:3d:1b:d8:59:d4:e4:f0:b5:d6:4b:bc:ec:f8:3e:28:4d:
65:f8:28:0e:10:f6:0d:2d:a3:cb:55:e7:1a:47:1f:8a:9a:9a:
e1:d4:00:f9:b4:c3:4b:75:ff:cc:c5:f1:c0:46:40:99:49:e5:
f7:29:7f:a2:04:b8:2e:95:cd:34:2c:6f:02:2a:e0:ab:72:73:
62:a0:be:03:d4:a1:18:ea:25:fb:33:de:21:97:65:7d:b8:e6:
c1:60:67:29:50:55:6a:8a:d6:23:34:27:f6:c1:8d:eb:38:6b:
76:35:70:1f:01:09:4c:59:c4:25:d4:1f:8e:79:08:03:18:63:
c0:ac:af:d5:6e:ec:cb:1b:cd:3d:1a:b7:f1:57:2d:54:ad:1a:
a0:29:1b:ff:83:04:b5:ec:54:19:d0:00:de:65:ae:e7:af:f8:
f3:4e:38:99:fe:37:51:e1:77:9c:d0:ce:6d:11:11:c5:3a:c3:
43:68:7f:6e:0a:f7:88:2c:9d:b4:73:19:03:4f:d4:b6:1f:54:
89:11:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:18:12 2025 by rpki-client