Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa
File: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (raw, json)
Hash identifier: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=
Subject key identifier: AC:A1:F0:97:70:9C:F3:1E:63:C8:91:B5:CC:4F:F6:6C:B1:2E:B9:D5
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 019421441DCC1AA575225DA700D1F81F781F
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59497
IP address blocks: 188.191.232.0/21 maxlen: 21
188.191.232.0/24 maxlen: 24
188.191.233.0/24 maxlen: 24
188.191.234.0/24 maxlen: 24
188.191.235.0/24 maxlen: 24
188.191.236.0/24 maxlen: 24
188.191.237.0/24 maxlen: 24
188.191.238.0/24 maxlen: 24
188.191.239.0/24 maxlen: 24
194.8.144.0/22 maxlen: 22
194.8.144.0/24 maxlen: 24
194.8.145.0/24 maxlen: 24
194.8.146.0/24 maxlen: 24
194.8.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1d:cc:1a:a5:75:22:5d:a7:00:d1:f8:1f:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca1f097709cf31e63c891b5cc4ff66cb12eb9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:a2:d2:02:1e:f4:1b:77:80:61:c5:f0:79:
84:25:89:4d:4d:67:c4:57:c4:a9:a1:84:98:44:21:
0a:8b:f2:63:13:c1:fe:8e:91:78:84:44:8d:5e:f4:
01:f1:f2:59:e0:0d:3b:0c:b3:4c:44:97:e6:28:27:
d3:31:4a:7f:0a:b2:60:ed:b7:b4:4d:fb:45:52:51:
ea:52:33:29:a2:67:7c:b5:2a:1b:af:ad:5e:35:c2:
ff:47:37:fc:21:d7:d1:1b:cc:da:56:12:0b:dd:fb:
4f:d8:fd:d1:83:25:c1:2c:4f:d4:25:b1:28:d6:fe:
ee:2c:b6:21:1c:4b:3a:2c:7d:c5:28:07:a5:5f:2b:
ec:0b:44:5d:2c:ad:4a:af:b3:07:b8:87:c5:a3:43:
e2:cc:72:ad:61:34:59:e5:19:10:94:44:82:e2:7e:
be:d9:20:5e:b8:e1:7f:d4:c0:dc:e0:6b:f1:8f:60:
fb:7d:68:44:3c:1a:b0:7d:45:5e:e2:71:62:42:40:
ec:3a:6f:fc:b1:6f:8a:a4:c9:2c:d3:c3:2e:0f:57:
f5:6f:e7:c0:c4:68:63:6b:18:01:d0:39:f9:c5:e0:
51:ef:c9:1c:a1:2f:a5:3e:0b:aa:38:ae:5f:e0:07:
a5:f5:13:4c:85:6b:39:af:ab:c8:f3:d9:7d:e3:87:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:F0:97:70:9C:F3:1E:63:C8:91:B5:CC:4F:F6:6C:B1:2E:B9:D5
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.232.0/21
194.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
70:16:b8:0c:99:a8:7f:5a:11:c4:b2:00:47:48:d1:d9:c4:93:
d4:f7:27:3d:bd:a4:6a:53:85:09:15:bf:c5:c3:0c:93:d5:a1:
d6:2c:a1:3e:23:93:75:6b:66:09:50:ef:83:a0:82:53:8c:5e:
9d:41:49:a4:50:10:4e:06:2c:c4:71:79:11:c0:76:35:fb:50:
a8:fa:23:fe:e0:2f:ee:22:1e:2a:09:13:e4:ff:9a:69:a0:8a:
78:48:b1:ea:9f:07:a0:60:b2:6b:74:85:ed:05:b1:4b:29:27:
29:f9:e5:6e:0d:b5:54:8a:d2:30:87:70:0e:0b:b8:b0:8d:4b:
1b:30:40:7f:e9:d7:8f:cf:87:6e:aa:84:5c:92:d8:42:55:5d:
9a:76:bb:05:5c:d7:4e:50:5d:4e:3e:45:c6:60:db:43:0e:ab:
90:8b:2d:18:72:03:ea:6f:74:a0:59:fe:44:9e:ea:26:4e:d3:
e7:0a:21:e4:75:51:6d:f7:df:a2:09:12:48:49:3b:61:63:5e:
16:90:27:f4:30:ad:22:2a:63:2c:52:92:6c:b6:40:c0:d4:9e:
53:5c:18:2d:d3:d1:41:33:a0:5b:10:e3:51:0f:1b:9d:99:3e:
8a:5b:e8:19:a2:86:de:17:56:43:1c:0f:ab:8c:0f:40:9e:88:
9f:cf:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:35 2025 by rpki-client