Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/jWNgVTvc3owe3kF91r8d7uRQV_o.roa
File: jWNgVTvc3owe3kF91r8d7uRQV_o.roa (raw, json)
Hash identifier: uQLZ/d2z4o+33Z42D6wrDoH9q/yv6pAWgOV+vjfJeYw=
Subject key identifier: 8D:63:60:55:3B:DC:DE:8C:1E:DE:41:7D:D6:BF:1D:EE:E4:50:57:FA
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019422FB0D0B2BC92678D96EFA4C62E4B432
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/jWNgVTvc3owe3kF91r8d7uRQV_o.roa
Signing time: Wed 01 Jan 2025 17:47:45 +0000
ROA not before: Wed 01 Jan 2025 17:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201080
IP address blocks: 185.167.16.0/22 maxlen: 22
2a0b:3200::/30 maxlen: 30
2a0b:3200::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0d:0b:2b:c9:26:78:d9:6e:fa:4c:62:e4:b4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Jan 1 17:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d6360553bdcde8c1ede417dd6bf1deee45057fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:03:80:4c:d8:ae:83:aa:b4:80:7f:79:4e:
44:7e:0f:72:e9:ca:39:0a:0c:b3:03:af:fb:bb:16:
bc:ff:ef:03:88:f1:4c:12:54:11:b7:a0:ae:41:02:
46:26:a8:3a:8f:4d:5d:f9:4b:70:94:5e:88:de:16:
f1:9b:52:d6:d0:33:ad:dc:ab:89:cc:84:df:76:a2:
20:1c:d9:07:84:af:55:c6:5a:45:5d:f1:05:60:d7:
a6:a7:57:54:e4:01:f3:47:e3:94:e9:e3:19:66:97:
54:03:0f:ae:dc:bb:10:d1:e1:74:6d:f9:5f:b5:e9:
5d:35:4f:fb:33:9e:21:98:3d:27:af:5b:e6:6d:8f:
b3:3b:b5:ad:a1:cb:26:db:b6:2c:2c:01:98:09:9c:
05:87:66:8b:f3:fb:2a:0a:fe:64:91:5a:ca:e0:0b:
f7:ef:9a:0e:64:53:64:a0:a2:cf:8f:a8:23:2a:31:
f4:84:d7:1d:7c:74:e6:00:ed:73:1b:e5:3a:12:1c:
87:25:37:b7:dc:34:1f:1d:1d:84:07:45:33:4d:3e:
74:ae:e0:03:d2:7f:d0:4a:57:11:9d:fd:12:9d:a5:
0e:4f:b6:c7:e2:84:fa:20:9f:7d:9a:43:94:1a:9b:
b1:34:31:7d:cb:d0:0b:55:3e:37:a1:1c:d6:db:9e:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:60:55:3B:DC:DE:8C:1E:DE:41:7D:D6:BF:1D:EE:E4:50:57:FA
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/jWNgVTvc3owe3kF91r8d7uRQV_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.16.0/22
IPv6:
2a0b:3200::/30
Signature Algorithm: sha256WithRSAEncryption
3b:8d:f4:7e:ae:88:2a:40:bf:be:f5:0b:30:eb:42:5c:e1:1b:
50:11:80:43:e3:26:0c:2c:23:92:0a:c8:1c:96:2a:f8:8d:5c:
11:fb:50:43:4a:0e:9f:80:05:a1:dc:46:d1:14:90:ca:6d:2a:
f7:c4:dd:7f:9c:32:e2:c0:c0:5e:c7:37:21:a0:ac:42:75:3a:
dd:e0:53:fa:17:d9:d0:d5:9b:df:5f:5e:e6:35:9f:5e:ad:d1:
2d:86:21:83:98:6c:89:df:c2:35:70:32:78:8f:4a:b3:9d:ff:
4f:29:0c:f3:3c:e1:db:d0:5d:65:fa:69:1d:40:e3:8d:c8:9a:
7e:78:d0:4f:d3:c3:85:fa:8a:30:4a:e9:5e:4c:57:dd:05:e3:
d9:e3:78:73:9e:d5:64:19:86:fa:74:a7:86:05:5e:37:5f:38:
9f:0b:2c:50:82:76:96:5d:6e:1b:16:b4:b8:a8:d6:6d:cf:81:
54:29:05:ca:c6:a3:2a:3b:d2:b6:87:c2:25:6b:1c:72:01:7c:
16:7b:bf:c2:eb:64:03:db:a0:4a:1b:cc:b5:50:d0:6c:ae:ba:
07:66:f0:ff:f6:24:63:44:5e:42:33:22:e3:89:3f:ac:fb:61:
1f:a3:e3:9b:e0:bd:eb:18:9a:36:73:18:55:ca:db:14:cc:54:
2f:21:05:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:00 2025 by rpki-client