Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/po_LVWpbKXE3R88IVy-uZ3WJPNw.roa
File: po_LVWpbKXE3R88IVy-uZ3WJPNw.roa (raw, json)
Hash identifier: K+p2Dato5TDcm+bOMSRlFPytRWT6WZtTR14LVyHGo2g=
Subject key identifier: A6:8F:CB:55:6A:5B:29:71:37:47:CF:08:57:2F:AE:67:75:89:3C:DC
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 01952A13E9051A12C4081911AD032C691187
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/po_LVWpbKXE3R88IVy-uZ3WJPNw.roa
Signing time: Fri 21 Feb 2025 19:55:02 +0000
ROA not before: Fri 21 Feb 2025 19:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.170.155.0/24 maxlen: 24
185.207.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2a:13:e9:05:1a:12:c4:08:19:11:ad:03:2c:69:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Feb 21 19:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a68fcb556a5b29713747cf08572fae6775893cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:d4:09:d1:ed:94:6d:77:01:ba:6a:2d:b2:
d8:63:35:03:c8:55:3d:51:93:b7:fa:ca:8b:f4:9b:
97:2e:c3:1d:8e:c8:5a:50:b2:ea:5d:f9:77:22:1b:
61:60:be:55:48:37:1b:5f:15:a4:22:50:8a:11:86:
7c:f6:0e:54:90:a8:20:71:0b:ca:f3:b0:c7:82:ad:
d3:90:1e:df:4f:2b:4b:b1:ce:5e:13:42:14:4f:a4:
0e:99:6b:c5:a3:5a:ea:5f:f2:0c:1a:f0:c2:52:4c:
50:8f:47:24:e9:3f:b8:f8:53:e5:ee:90:a8:4e:db:
5c:dc:d8:bd:aa:8d:99:06:19:7e:a0:05:b1:a0:b9:
f7:42:0d:de:19:2a:6c:09:74:3f:b7:03:3e:78:ff:
9b:58:78:b4:47:e1:b5:bd:5c:3e:9d:a6:65:aa:07:
56:76:4d:97:96:aa:a9:28:af:13:a1:91:fe:f3:44:
94:c9:a8:80:1a:9f:aa:7d:98:d4:30:54:93:84:8d:
92:2d:26:b0:6b:ba:75:56:80:a6:60:43:94:17:bd:
e3:be:4a:f6:7b:42:2c:cb:3f:fb:81:64:98:29:1d:
41:fb:c4:96:a7:ea:42:2d:f8:56:19:f0:3b:13:0e:
b3:32:81:ca:d1:e7:4a:17:75:ca:b9:7f:05:0a:cf:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8F:CB:55:6A:5B:29:71:37:47:CF:08:57:2F:AE:67:75:89:3C:DC
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/po_LVWpbKXE3R88IVy-uZ3WJPNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.155.0/24
185.207.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e3:e6:c8:52:13:19:71:08:dc:97:6d:a2:21:17:7a:df:93:
08:50:ce:54:1d:d6:af:df:79:ac:02:ac:72:a3:4d:f6:67:50:
7d:6c:19:69:28:5a:f9:4d:26:12:bc:92:ab:72:79:14:8f:81:
f7:ef:bb:74:07:66:1d:48:13:e3:ed:b0:98:2e:b7:86:08:c1:
59:29:e5:c4:54:a4:85:22:14:13:03:b1:96:c2:1b:80:43:b4:
e6:15:15:cf:dc:25:7c:cd:a3:b0:f4:85:60:9e:2c:7e:71:95:
b7:b5:37:92:4b:be:9f:b6:ad:86:f3:63:af:d1:63:57:53:4a:
74:2a:d9:ae:ee:a2:d8:6e:b2:a8:31:6f:2a:41:8c:9e:0e:20:
f6:26:52:16:af:65:63:9a:cc:3d:43:a8:17:2e:45:7b:cc:eb:
11:f5:6a:2d:64:6d:5f:52:dc:34:5b:b8:be:75:21:96:27:e0:
2e:58:53:17:db:f6:4e:ef:50:4a:a7:85:ac:e2:79:33:05:75:
d4:5f:e1:79:a6:c7:f4:48:43:d9:40:7e:d6:b5:e7:00:88:58:
41:1d:7c:41:84:da:c8:02:11:47:82:48:2a:7e:af:c5:52:94:
53:cd:d1:da:38:a0:9c:ad:f9:c5:2d:ee:c9:5d:ab:ad:3b:c8:
6e:1e:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:06:06 2025 by rpki-client