Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/aPIQbORfDqMdRus3FUsayPmmxSc.roa
File: aPIQbORfDqMdRus3FUsayPmmxSc.roa (raw, json)
Hash identifier: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=
Subject key identifier: 68:F2:10:6C:E4:5F:0E:A3:1D:46:EB:37:15:4B:1A:C8:F9:A6:C5:27
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 019420683E4BB2502A25E842AC1D8842E8F9
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/aPIQbORfDqMdRus3FUsayPmmxSc.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214893
IP address blocks: 185.155.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3e:4b:b2:50:2a:25:e8:42:ac:1d:88:42:e8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f2106ce45f0ea31d46eb37154b1ac8f9a6c527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:e7:98:5d:32:17:34:f2:44:5f:49:06:99:
40:f3:1e:1f:8c:c4:48:4d:04:8c:ac:4c:5d:73:fb:
9a:a0:f3:00:60:e5:95:24:a9:b1:9f:6e:ed:9b:21:
db:49:02:3f:f3:55:93:0d:27:c3:af:bb:58:9c:7f:
35:74:78:43:88:65:05:01:eb:db:43:da:d7:6e:04:
aa:5a:78:98:d4:a1:9c:60:cc:7f:de:52:f7:ee:e6:
49:f5:80:20:af:ee:e0:4f:7e:94:ba:1a:58:96:03:
d5:9c:f7:2e:4e:dc:e7:f0:61:ec:c0:90:76:2c:4a:
9c:6f:12:45:a9:36:3d:fe:48:9e:1d:c2:5a:68:fe:
eb:a8:31:6d:51:ce:8f:3f:9c:44:fa:9c:28:7d:5d:
04:4e:28:03:2e:2b:de:a8:71:12:d9:26:5e:40:9c:
b5:61:81:cb:74:a2:50:4c:c2:50:e8:eb:49:02:75:
ba:13:b6:45:7f:4c:f4:46:0f:6e:d7:53:23:62:27:
9d:56:cc:56:0b:9a:59:51:20:a6:c4:79:6c:14:55:
a1:a9:d5:88:e3:ad:2f:2c:7f:76:a6:3e:6f:e2:05:
92:74:1a:f4:68:6e:93:18:5c:da:18:1b:32:6e:b5:
d2:fa:7a:b6:62:7f:90:8c:69:52:46:00:d2:14:a7:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F2:10:6C:E4:5F:0E:A3:1D:46:EB:37:15:4B:1A:C8:F9:A6:C5:27
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/aPIQbORfDqMdRus3FUsayPmmxSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0d:89:da:52:9b:d5:87:d2:b2:04:a1:4c:05:ee:34:26:fe:
38:59:50:ca:07:4d:50:40:24:af:1b:0b:2b:a1:66:3b:6b:31:
2e:b9:5e:e9:d1:f4:cb:5b:53:d1:9e:d4:c4:78:3f:4f:e8:eb:
f1:77:27:17:df:5e:3b:7a:1f:f0:19:52:57:75:87:b1:10:f6:
f9:f4:71:64:d4:03:0c:de:73:40:a9:30:53:a2:c8:49:5b:ea:
35:5f:c2:08:fb:c9:e3:05:84:72:28:b3:de:5b:99:1c:46:13:
f3:4f:01:13:b0:51:f1:f7:ee:c8:f6:1f:a7:15:ce:98:ae:44:
0e:ca:94:d5:c8:c6:4f:c2:34:4c:97:f5:6a:4f:68:c5:d3:75:
89:dd:8a:6a:c6:7d:db:c4:c5:4c:25:4f:89:fb:43:fd:26:db:
90:4c:c5:9d:5a:c1:7c:15:56:a8:37:e7:34:73:b2:ea:39:4f:
5b:01:b5:c0:c4:64:fd:60:ce:22:f3:f3:58:83:04:27:5a:44:
72:53:ad:9e:33:69:15:a6:87:49:ef:6a:d8:c2:d7:0c:ca:dd:
84:b0:b7:5d:62:bb:f4:be:dc:44:8f:cd:fe:6a:df:a7:22:6c:
51:62:48:52:91:e7:37:87:86:27:d9:b1:10:68:ff:25:01:df:
a2:c0:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:21 2025 by rpki-client