Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/An_xJWf4RJw4Ylw59J21Md85Jws.roa
File: An_xJWf4RJw4Ylw59J21Md85Jws.roa (raw, json)
Hash identifier: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=
Subject key identifier: 02:7F:F1:25:67:F8:44:9C:38:62:5C:39:F4:9D:B5:31:DF:39:27:0B
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019423D706C3FAB3A5F2066462DE3F98EFEC
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/An_xJWf4RJw4Ylw59J21Md85Jws.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 185.68.44.0/22 maxlen: 24
185.68.44.0/24 maxlen: 24
185.68.45.0/24 maxlen: 24
185.161.232.0/22 maxlen: 24
185.161.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:06:c3:fa:b3:a5:f2:06:64:62:de:3f:98:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=027ff12567f8449c38625c39f49db531df39270b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:a4:c7:d3:3b:22:98:b1:3c:bd:c3:35:72:
f2:ac:37:e2:0d:35:f0:3c:d6:c4:75:23:cb:79:60:
1d:4d:f8:54:a1:91:d3:a8:ab:cb:07:45:85:73:0a:
ef:94:7b:f7:a3:2e:39:bf:46:26:21:df:e6:5e:34:
d2:ff:82:b8:d6:10:b7:24:b2:ba:56:0d:ef:19:5c:
8e:61:d1:8c:b5:76:6e:1e:f5:d4:26:0d:af:4d:e0:
e6:38:e7:81:71:a7:e5:f9:3a:37:d6:ba:36:9e:47:
32:9b:9e:8e:bd:6d:f4:7f:ff:e8:8f:07:14:0e:04:
2a:3c:08:3b:a5:9b:86:11:be:5b:4b:59:5d:72:5a:
c6:ed:6c:e0:0e:29:d4:30:69:08:6f:87:38:91:88:
c6:d3:78:13:c5:03:79:77:ce:54:2c:4c:8f:08:1b:
f8:75:eb:82:71:ad:d4:71:d7:47:83:12:67:1b:03:
32:3a:fa:79:62:11:c6:24:2e:58:06:4d:ca:b5:60:
0c:e2:ad:01:15:b3:9c:0e:e5:41:46:19:c0:db:91:
43:d9:39:c0:d8:cc:b9:45:d4:76:dc:ed:76:c1:af:
54:b8:82:de:06:a3:a2:40:77:1c:6a:cc:76:09:a4:
bc:53:b7:f1:66:49:72:7a:57:ac:ae:27:f6:e4:cf:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:F1:25:67:F8:44:9C:38:62:5C:39:F4:9D:B5:31:DF:39:27:0B
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/An_xJWf4RJw4Ylw59J21Md85Jws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.44.0/22
185.161.232.0/22
Signature Algorithm: sha256WithRSAEncryption
27:d7:0f:15:50:12:4c:69:48:3a:b5:e8:4c:37:c5:08:02:89:
32:41:f4:99:ea:21:ec:49:2f:21:9d:1e:c8:e7:dd:72:95:30:
b6:fa:4d:e3:3b:04:51:36:fb:87:00:28:13:92:ee:13:55:d7:
fb:0d:1d:e5:8f:54:c6:d6:0e:0f:3a:94:d1:b4:3d:ae:79:0f:
0c:79:57:ae:5a:64:df:0d:81:67:7c:ac:6e:27:97:6e:18:58:
b5:07:53:1a:35:2a:d4:4b:3f:dc:71:e3:73:a5:5e:1c:7b:d5:
77:86:c6:3a:7f:0b:4c:db:13:74:d5:8b:71:23:db:e9:00:38:
f0:3f:43:94:08:47:70:2b:98:c7:7c:0e:73:2b:e0:3e:c1:3d:
43:36:ab:9e:1c:08:3b:2f:fa:99:c2:e2:e7:39:7e:3d:07:3f:
04:47:12:14:39:cd:a6:23:30:13:36:7c:19:91:05:34:b8:07:
10:bb:9d:17:2c:14:5b:10:83:34:e0:40:01:b4:d7:88:7e:e2:
0d:67:5a:70:36:0e:6c:54:a4:ca:c3:8a:da:a8:29:57:e2:45:
bd:66:54:13:5c:be:ac:76:24:2d:36:6a:c5:a1:cc:74:a2:eb:
c9:5c:1e:76:81:d9:32:19:36:82:62:13:0d:8a:4c:4a:55:ba:
1d:cd:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:06:28 2025 by rpki-client