Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/9c0rgR7sx5b0INcSJYu5W29d3Lc.roa
File: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (raw, json)
Hash identifier: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=
Subject key identifier: F5:CD:2B:81:1E:EC:C7:96:F4:20:D7:12:25:8B:B9:5B:6F:5D:DC:B7
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01941FFA1E98F65E0F59E6A9A9DB7B50A5DD
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/9c0rgR7sx5b0INcSJYu5W29d3Lc.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.144.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1e:98:f6:5e:0f:59:e6:a9:a9:db:7b:50:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5cd2b811eecc796f420d712258bb95b6f5ddcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:67:ef:3d:92:f7:33:89:80:18:4d:ec:cc:
33:6c:2a:27:18:e7:53:38:2f:b4:cc:88:24:52:15:
82:3a:d3:9b:af:db:ce:e4:09:96:a6:9b:3c:c1:14:
a0:0e:03:e1:d4:ab:0f:df:88:1d:c1:80:fe:52:c8:
87:af:62:ef:40:7d:1b:41:2e:ec:e9:ff:59:b5:66:
ab:ea:da:c5:b5:96:9b:4b:76:a6:3b:14:03:9e:0e:
3d:8b:09:54:a2:d7:0a:1a:2a:cb:b9:be:a5:22:42:
5a:4d:4e:de:a8:40:48:60:c9:67:09:76:12:13:de:
d9:92:45:59:10:4f:1b:44:1f:71:6c:d8:37:d1:03:
13:50:7c:87:cb:e7:38:b1:87:03:a2:6c:fe:6a:88:
58:5b:6c:88:bc:a9:9b:aa:41:ed:09:d3:cc:e0:1f:
1a:c7:33:95:e9:7a:5b:f9:f4:da:a2:1d:cb:e6:91:
e0:7d:17:2a:3d:9d:08:4c:6c:de:2d:54:88:65:a9:
20:d1:f1:b0:02:16:0e:1e:18:5f:a9:55:4c:7f:43:
8e:40:a0:83:9d:f4:30:d3:3f:d9:fa:5f:9f:b6:d4:
c0:34:3c:c9:34:80:06:6e:fc:7e:26:12:d6:20:70:
be:b2:5b:cd:d2:d5:96:bd:e0:ac:b7:53:f1:c1:55:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CD:2B:81:1E:EC:C7:96:F4:20:D7:12:25:8B:B9:5B:6F:5D:DC:B7
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/9c0rgR7sx5b0INcSJYu5W29d3Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e1:ef:33:be:a1:b3:d3:ae:cd:da:e9:89:36:dc:8f:da:64:
8b:95:38:de:2d:d0:0c:02:08:a4:e7:db:56:46:72:d9:57:2a:
f1:f1:12:83:88:32:d5:54:3f:6b:dc:a3:c8:36:67:56:d2:9c:
f8:2d:be:46:47:15:af:58:15:c1:ce:7f:0c:2d:d8:ee:59:2d:
c4:9f:6a:72:ff:e6:0d:fc:e2:e7:75:a9:5f:8f:f3:ec:bd:91:
81:6d:ff:39:29:1b:53:36:a3:e9:48:6f:35:8c:af:5b:c9:7e:
df:de:9f:a9:35:01:7e:d4:8a:20:a9:c4:73:06:69:c1:d6:74:
34:ba:10:b9:9e:1d:d5:d2:8b:3c:2c:c1:cb:f0:71:f0:2b:2a:
ee:6e:4f:d4:54:43:7f:a9:75:df:b9:a1:c6:8d:38:20:d6:99:
e4:98:28:d6:ce:b0:60:4d:5f:97:06:6f:e5:6b:40:a2:2c:17:
6b:69:45:13:cf:83:1c:a3:ad:9e:1a:e6:c8:03:e9:e4:47:54:
e4:74:72:80:34:e4:cc:5e:ef:a9:e2:3d:52:d6:32:9b:57:83:
06:fe:53:0c:52:2f:d9:8b:5d:7e:05:d6:fd:9e:c6:49:bd:7c:
5c:7f:30:36:31:0b:6d:ea:10:cb:09:c5:fc:c2:6a:37:f2:c2:
1e:fe:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:46:53 2025 by rpki-client