Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/cpGnORo3FcHj_TQuxkaI5d8-w2U.roa
File: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (raw, json)
Hash identifier: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=
Subject key identifier: 72:91:A7:39:1A:37:15:C1:E3:FD:34:2E:C6:46:88:E5:DF:3E:C3:65
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 01942143F67C6F5A58CD2742BF6395DEE3E9
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/cpGnORo3FcHj_TQuxkaI5d8-w2U.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47176
IP address blocks: 185.238.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f6:7c:6f:5a:58:cd:27:42:bf:63:95:de:e3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7291a7391a3715c1e3fd342ec64688e5df3ec365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:51:e6:ea:35:a3:55:12:1c:67:1f:8b:85:
88:b3:fb:60:f6:73:78:d5:c4:d5:d9:51:5a:6d:12:
49:81:4c:7a:b6:07:e7:bd:4d:d0:d5:64:07:99:eb:
3f:87:d7:a2:28:79:75:b4:6d:b2:f3:ff:6b:f5:19:
26:59:46:e5:a2:fd:6f:6e:ba:71:93:ee:dd:7a:16:
6e:76:41:3f:d7:bd:59:65:4f:55:76:97:af:d7:64:
8c:4a:a7:66:b7:3b:39:aa:be:bb:db:05:3a:f3:e0:
e4:d1:30:c7:ae:69:75:42:d1:85:74:c4:c0:e7:dd:
83:cc:1e:ce:50:52:f7:b8:f4:b7:da:e8:46:14:1e:
6d:65:da:b6:c2:d3:ce:a9:05:b7:3c:6f:16:5e:a1:
c7:5f:24:a6:7c:22:78:f8:89:61:d8:22:5b:3f:aa:
96:1e:ab:ef:91:75:af:a9:8d:27:0e:84:e8:b4:b9:
ce:82:e2:ab:9a:b7:99:3c:4c:48:ab:1e:29:ca:07:
b8:48:6a:c8:e8:61:18:62:1b:15:6d:2c:7a:be:df:
41:d5:39:83:f9:61:1d:34:69:76:fb:32:4a:4a:6c:
f9:2a:bc:96:8d:cf:e0:42:ed:99:ba:6b:8c:a2:fc:
c0:5c:87:00:6c:95:dc:e7:7d:94:52:22:db:9f:8b:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:A7:39:1A:37:15:C1:E3:FD:34:2E:C6:46:88:E5:DF:3E:C3:65
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/cpGnORo3FcHj_TQuxkaI5d8-w2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.12.0/22
Signature Algorithm: sha256WithRSAEncryption
46:c4:bb:1c:bc:2a:43:a6:a8:8e:26:22:c4:7a:40:4d:ef:97:
d6:d6:34:b8:cb:bc:ee:bb:9e:7d:5f:bc:86:fa:5b:31:56:9e:
3b:b5:25:1a:64:d4:83:64:37:48:fe:da:40:53:ed:8b:f5:f4:
80:98:19:38:b0:2b:e5:15:94:18:b5:33:14:84:c0:d9:9d:af:
d0:e7:45:ca:30:e8:77:8c:11:13:9d:0a:6f:fe:f5:66:f4:c1:
84:6a:54:3b:c1:eb:fc:c0:da:26:65:9c:e9:85:11:8a:d9:fa:
3e:eb:4a:8e:e2:e4:2b:2e:ff:d4:0b:ae:0b:04:82:01:f8:b2:
ca:ea:4b:6e:ae:0c:ce:89:42:1d:d4:bf:e1:a2:5e:80:38:16:
dc:e4:a3:8f:d9:59:5f:22:15:f1:40:69:a3:1e:3c:93:d0:c6:
21:bc:3f:45:d8:86:df:e9:bf:05:a0:71:c2:92:f2:83:c3:11:
82:fd:32:73:43:ba:72:d8:d5:63:f1:17:7f:15:cf:9b:f8:bf:
37:8b:c3:35:b9:0f:59:6e:85:62:32:ac:fd:bb:21:fb:a5:c9:
b8:0e:5c:75:e1:4b:47:16:4e:f2:0e:54:cb:1a:12:c0:c4:db:
7c:cb:da:33:a7:d9:e0:38:0b:9f:96:fd:2e:81:28:33:5c:1e:
b9:cc:6a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:16:47 2025 by rpki-client