Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/9yjOyCjaNQvZmslgCNfY4UdjDvM.roa
File: 9yjOyCjaNQvZmslgCNfY4UdjDvM.roa (raw, json)
Hash identifier: BLcuMbjq4mGuK5Vn41A+M+OAou14cd2H96ukojI5mmM=
Subject key identifier: F7:28:CE:C8:28:DA:35:0B:D9:9A:C9:60:08:D7:D8:E1:47:63:0E:F3
Certificate issuer: /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial: 019423D7024596815A49E16BC03BDFF3CF1C
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/9yjOyCjaNQvZmslgCNfY4UdjDvM.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.73.32.0/23 maxlen: 23
185.73.33.0/24 maxlen: 24
185.73.34.0/24 maxlen: 24
2a05:3f40::/30 maxlen: 30
2a05:3f44::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:02:45:96:81:5a:49:e1:6b:c0:3b:df:f3:cf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f728cec828da350bd99ac96008d7d8e147630ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:22:fb:80:c1:18:a6:6f:5f:62:b5:96:f6:
b6:2c:d0:3b:11:33:68:86:a3:74:b5:75:19:18:d9:
74:f3:ab:5a:53:5e:5b:f0:7b:82:ef:2f:cc:ee:1d:
13:e9:93:9c:14:18:27:43:65:8b:35:f3:d8:d7:cf:
b7:ad:33:a6:a9:ee:90:e2:67:93:6c:48:25:25:fe:
49:39:aa:b9:23:0f:a3:ec:a8:bb:7f:4a:d9:d9:9e:
01:b5:82:1c:38:c7:df:d1:99:de:0c:90:27:49:ef:
f5:10:62:60:4c:e2:b3:b4:45:8d:c1:f3:64:6c:40:
c8:a8:cc:dd:6e:2e:ee:84:dd:3c:98:bd:de:a8:97:
dd:c2:10:ef:6a:21:9c:1a:41:82:a8:39:95:46:2c:
c1:51:91:ce:e1:17:1f:96:97:3a:47:ac:52:a6:88:
d0:20:d6:3d:34:99:ae:ae:10:62:79:11:a2:c9:b0:
30:7b:f2:cc:90:34:a2:f0:69:0e:86:c2:06:d8:99:
77:83:f3:ea:de:cd:70:8d:42:51:ef:5a:c3:83:5d:
8f:08:34:03:12:e8:97:ea:89:04:cc:42:24:5f:80:
22:3c:36:ab:8d:6b:85:11:d5:6a:e5:1a:38:65:ad:
9e:25:b9:9e:b0:67:c6:ad:bb:86:6c:30:77:76:93:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:28:CE:C8:28:DA:35:0B:D9:9A:C9:60:08:D7:D8:E1:47:63:0E:F3
X509v3 Authority Key Identifier:
keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/9yjOyCjaNQvZmslgCNfY4UdjDvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.32.0-185.73.34.255
IPv6:
2a05:3f40::/29
Signature Algorithm: sha256WithRSAEncryption
02:90:64:07:ca:25:43:d9:9b:72:96:d2:9e:5c:f4:95:2f:11:
03:4c:c1:df:1a:c5:67:ee:9f:39:08:5b:6b:4c:59:e8:73:57:
2c:5c:a9:f8:1b:b9:b3:78:6b:ba:4c:70:d4:24:d6:a4:c4:35:
51:8a:be:81:0e:b2:8d:26:61:ca:d7:8e:a3:ab:3a:17:23:69:
65:87:60:a8:f5:82:d4:91:cd:44:40:34:09:38:d8:51:9c:bf:
c7:4d:6f:75:03:f8:cd:73:59:87:05:d8:72:1e:64:00:af:09:
b0:e1:0f:f0:94:8d:fa:51:eb:9d:1f:c3:11:a4:f4:26:66:38:
76:d9:a2:82:a5:4a:78:a2:c8:90:89:1e:c1:e5:79:df:63:1f:
b8:37:af:67:e3:83:10:5a:2b:22:9c:29:f7:74:92:eb:12:26:
b3:16:e3:03:ed:ab:dd:4c:0f:37:8b:1d:ec:5b:e9:16:87:09:
05:a1:13:9e:0f:56:7a:2c:53:62:77:53:61:aa:6d:9e:99:8d:
e9:17:84:78:c5:ac:e6:ed:25:39:d7:6d:2e:c4:9b:6d:1d:aa:
d7:b5:9b:8f:d4:a4:85:33:bd:55:81:a2:8f:b9:99:93:be:98:
6e:ee:b4:bb:a1:81:8c:f9:c5:99:af:51:47:77:01:0a:b9:cb:
d9:87:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:19 2025 by rpki-client