Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa
File: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (raw, json)
Hash identifier: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=
Subject key identifier: 22:90:89:18:B3:7C:58:D9:B8:01:23:08:C4:D9:C6:64:FB:84:B6:9E
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019426D9B23CFF131224D41A3BC1F7A7A993
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205706
IP address blocks: 185.205.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b2:3c:ff:13:12:24:d4:1a:3b:c1:f7:a7:a9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22908918b37c58d9b8012308c4d9c664fb84b69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:60:7e:a0:0e:86:3e:71:41:1b:e7:ab:cf:
c8:da:f9:22:56:96:de:47:2f:39:03:5e:22:8a:56:
53:b9:b2:d4:39:ad:ed:92:55:28:fb:2f:49:d9:51:
ce:cc:50:bc:17:88:41:2a:79:7b:40:ef:57:44:57:
43:f8:83:0a:7c:10:01:07:c8:09:75:e3:71:a9:23:
72:eb:59:b2:be:fd:05:98:be:d9:6f:97:4e:93:68:
05:9f:e2:77:10:13:61:e5:df:45:8b:18:9f:2a:76:
4d:db:f2:8d:e9:3a:ed:45:74:e6:ba:bf:2b:f8:54:
f2:ac:e6:1a:03:03:cf:14:c0:4f:5f:67:4d:8f:69:
b0:91:7a:dd:ed:79:57:9d:38:37:87:97:e1:b3:9c:
d1:b2:55:bc:8f:b3:a1:58:47:bd:65:03:9d:a4:85:
d8:94:b4:75:df:db:5e:1a:fe:d8:54:98:6a:ef:62:
01:75:0d:60:c0:9a:9a:44:9d:1f:7f:b4:63:f9:72:
1c:66:b1:44:6e:d0:17:af:d9:ee:b0:30:6a:5a:94:
78:c2:3e:43:1f:0d:14:68:a7:b3:03:c2:1e:6f:36:
9a:d9:0f:f7:e2:aa:7d:78:62:19:91:3e:13:f2:49:
af:71:0f:20:8a:45:44:b8:ed:0f:62:1d:b4:54:0c:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:90:89:18:B3:7C:58:D9:B8:01:23:08:C4:D9:C6:64:FB:84:B6:9E
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.152.0/22
Signature Algorithm: sha256WithRSAEncryption
48:20:af:42:93:1a:bd:82:fc:61:18:a7:37:89:c6:30:2a:58:
2b:58:ce:ed:d1:78:77:5d:56:c5:11:c5:9c:f6:b0:ef:17:4b:
88:77:81:3d:1a:7e:14:a7:21:43:f4:14:8f:1d:a1:5b:73:3c:
6d:ba:15:a8:8a:f6:4d:88:78:f4:87:62:6c:d1:0f:f8:f6:0f:
ff:dd:8f:d0:8c:83:91:89:8f:9f:d5:97:6d:e9:84:c1:8e:21:
4b:93:c0:93:8d:f3:eb:57:f7:c1:ed:07:70:3a:7b:91:92:10:
fd:e0:8f:3c:41:1b:d8:6c:e8:ea:04:c3:3c:4d:54:89:63:75:
66:e0:d2:34:30:6d:7c:e5:93:6f:4b:9e:dc:13:9b:c1:17:dc:
01:28:8d:a7:e1:00:5d:2c:61:8d:ae:5a:c8:be:a1:9e:7c:5d:
da:b0:e4:89:73:f1:be:03:16:58:d5:d5:5e:43:af:05:d5:dc:
14:3d:d2:af:0d:c3:73:31:6d:97:44:8d:bd:26:f2:c0:aa:19:
52:9f:8d:07:8c:78:11:89:4b:9d:87:f9:c8:06:f4:33:04:de:
21:5e:fb:42:fe:20:79:ee:40:3c:f7:7c:b0:44:5b:59:ae:9a:
6a:ce:ca:71:24:54:60:b2:d0:e2:23:53:b7:45:6d:1f:ab:d2:
3b:50:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:26:42 2025 by rpki-client