Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/tISHEAHtpJDdCS4l3Yug27J3cB4.roa
File: tISHEAHtpJDdCS4l3Yug27J3cB4.roa (raw, json)
Hash identifier: MfAYQ6HspqhfS9luXY6/Ub4o3vZ2098dY5v7aRHURxg=
Subject key identifier: B4:84:87:10:01:ED:A4:90:DD:09:2E:25:DD:8B:A0:DB:B2:77:70:1E
Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial: 019428262D6F018F363CC0B9BCCB58B2154C
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/tISHEAHtpJDdCS4l3Yug27J3cB4.roa
Signing time: Thu 02 Jan 2025 17:52:58 +0000
ROA not before: Thu 02 Jan 2025 17:52:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 185.179.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:2d:6f:01:8f:36:3c:c0:b9:bc:cb:58:b2:15:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Validity
Not Before: Jan 2 17:52:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b484871001eda490dd092e25dd8ba0dbb277701e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:ca:27:41:e1:66:7c:5d:04:56:e9:18:1c:
d6:fb:b9:1b:da:74:ac:8a:e3:50:fe:75:37:3d:89:
20:d7:69:2e:46:d7:79:4d:b8:95:dd:ad:2d:c3:04:
d1:ec:24:83:8b:cd:d4:27:40:6e:aa:e8:17:3c:df:
c6:65:13:63:b0:b5:88:73:73:08:a5:74:8b:dd:94:
6e:5b:f8:f2:28:e5:d1:63:d8:f7:38:d2:e4:2a:07:
fe:94:4d:62:a9:e9:1e:4b:68:83:99:2a:22:b2:c8:
e2:d5:70:49:89:90:54:88:21:db:68:60:d3:75:79:
6d:1d:48:ed:82:d9:5f:23:0d:14:72:e5:84:da:c2:
80:4c:53:48:d6:e4:c3:78:5b:d8:64:35:12:c2:5b:
42:6a:f5:87:5f:0a:67:7c:94:d7:4e:aa:a4:6a:8b:
e1:c5:bc:1e:f2:da:92:4b:eb:28:55:ea:7b:51:0f:
93:76:4d:ad:81:b8:28:22:62:c0:6b:06:3a:ab:d0:
1e:e8:6b:25:d8:e4:8e:97:6e:dc:1d:d6:ca:18:cf:
d9:f4:82:f7:4f:da:99:3a:dc:0b:5a:44:68:9c:15:
ca:c9:83:98:b3:cf:38:a5:75:72:35:89:7f:7b:75:
31:11:fd:e7:56:0f:d5:de:78:a3:0d:19:be:00:96:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:84:87:10:01:ED:A4:90:DD:09:2E:25:DD:8B:A0:DB:B2:77:70:1E
X509v3 Authority Key Identifier:
keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/tISHEAHtpJDdCS4l3Yug27J3cB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.24.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:69:f0:a2:91:80:a5:08:83:0e:a9:cc:46:04:bc:6b:46:be:
02:39:fc:cc:a4:44:a1:61:ba:b8:44:ab:b2:b7:0f:e0:af:b3:
db:2a:d8:fb:89:07:3b:68:2c:ae:3d:81:39:2b:bb:7e:b4:6c:
eb:60:6b:5c:30:f2:b3:e2:9b:f3:b2:14:52:e1:a7:d1:d0:bf:
48:f4:7a:cb:74:31:23:5e:07:bf:c9:e8:3f:dd:cb:60:11:51:
01:05:27:56:42:13:34:18:04:00:8d:03:6d:ca:5c:bd:7d:7c:
10:4d:e8:5b:15:7a:31:46:e7:cc:21:04:27:3e:75:97:b6:ef:
1f:48:fd:87:c0:e7:fe:1b:56:47:13:6e:1e:02:d1:78:8b:a0:
96:f7:bf:ad:41:da:11:f1:79:05:ad:22:6f:c4:be:a3:97:bf:
4a:b6:1a:d2:12:63:ad:58:50:e9:ab:58:51:33:3e:61:eb:e5:
09:74:d6:d8:9c:1e:5b:88:77:91:e7:6e:61:1b:d8:5a:a1:a5:
b5:3a:d5:a5:cf:df:56:f1:ad:dc:22:49:3c:93:9c:43:94:f1:
09:37:61:4e:6c:5b:1d:0e:bf:9f:c8:96:74:f9:c9:cb:71:30:
92:36:cc:53:b9:43:7d:7f:59:9a:d1:37:74:e0:5e:9a:0b:b3:
a6:c7:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:17:27 2025 by rpki-client