Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/spdGIzhTrbhuAEJDJbRt1N-7qFE.roa
File: spdGIzhTrbhuAEJDJbRt1N-7qFE.roa (raw, json)
Hash identifier: 9xqu8xfZf7rOvuoB/ZxtphnY4kiRl04ujljXMwl/JDU=
Subject key identifier: B2:97:46:23:38:53:AD:B8:6E:00:42:43:25:B4:6D:D4:DF:BB:A8:51
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019422200269405943F2438E25D149E58457
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/spdGIzhTrbhuAEJDJbRt1N-7qFE.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59642
IP address blocks: 185.143.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:02:69:40:59:43:f2:43:8e:25:d1:49:e5:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b29746233853adb86e00424325b46dd4dfbba851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:fd:34:33:ba:92:1a:37:ca:71:9c:e3:86:
4b:57:a2:f2:97:37:85:d0:fd:72:d2:fb:d2:05:22:
b6:5c:9f:01:6a:af:8b:4f:d2:49:37:3b:7e:80:0f:
99:b8:61:77:ab:47:6c:dd:8f:3f:1f:f9:64:30:be:
dd:26:f1:67:74:3d:37:a9:83:1f:07:00:86:c4:e4:
9d:bf:6d:ad:a1:f6:f8:cb:76:28:f6:68:6e:cd:41:
b1:9e:e1:fc:49:9f:54:1d:7f:59:b2:f2:40:8a:e0:
13:e0:0f:bc:b7:c1:e1:12:be:d5:a2:3d:c8:44:42:
2c:1e:5b:50:72:67:42:76:c3:94:3d:dc:a0:81:55:
ea:3d:86:5e:9c:22:69:57:cd:d7:fb:e3:61:46:8c:
24:4b:47:9d:64:b6:68:e3:0e:ba:48:89:f9:26:46:
44:2d:ad:f7:54:c2:a8:bf:27:65:7a:b1:66:d4:e0:
85:f3:b1:f9:31:83:48:00:fe:ba:bf:03:b8:dc:eb:
51:76:2f:9c:19:bd:a0:13:6b:5e:35:ea:b7:8c:ed:
a3:38:96:99:7c:05:56:d3:8e:ff:f0:57:06:8e:f8:
dc:ff:5e:8e:51:e1:f1:f7:ae:6d:73:43:57:1c:7e:
f1:91:b1:b2:86:df:12:fa:c7:cc:71:52:38:67:65:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:46:23:38:53:AD:B8:6E:00:42:43:25:B4:6D:D4:DF:BB:A8:51
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/spdGIzhTrbhuAEJDJbRt1N-7qFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ad:d1:27:46:4a:b0:88:85:fb:95:aa:72:0e:d9:ff:ea:fa:
bf:7b:57:6c:1e:91:06:23:18:83:4f:8b:1c:5e:cf:ae:d2:2f:
e0:d8:30:22:8a:13:2a:a7:18:0a:b2:c2:73:99:ce:a7:7e:48:
60:12:b4:6a:4d:83:44:0c:c0:2a:57:84:42:88:a4:74:fb:d5:
8f:d2:67:57:a9:f5:d6:80:82:43:f0:f7:c1:e0:82:f9:29:3b:
65:85:06:3c:4f:3e:50:94:1e:dc:be:54:88:76:8b:c2:35:c5:
e0:65:0e:58:69:60:a8:ad:45:62:ed:d7:ed:48:db:4f:af:c4:
c0:e7:1e:8a:af:7d:ba:77:2a:7b:88:c5:6f:ce:4a:8a:2f:75:
a8:2b:33:fd:34:19:f1:61:3b:64:79:16:13:86:a5:81:ed:31:
0a:3d:40:20:02:a6:eb:3a:4f:02:0f:fc:24:66:03:6c:0e:a0:
e0:fd:5d:bd:b0:f7:ef:5e:bd:82:38:2b:c0:bb:1c:f5:17:01:
3f:5b:87:c9:eb:8c:36:e1:6c:ff:7b:ef:5f:b6:85:54:e0:52:
51:88:73:a1:da:c1:75:9c:c0:e6:d1:69:cc:15:90:9c:ba:76:
56:41:57:ca:ab:63:c5:13:73:24:f3:1f:9c:55:56:9e:3a:f8:
1d:1c:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:32 2025 by rpki-client