Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/gBycawi1ika7Vj_3TGa6n8ZyOcc.roa
File: gBycawi1ika7Vj_3TGa6n8ZyOcc.roa (raw, json)
Hash identifier: eGdxhHwT3weYIz4n0K5fQnn/ZNevVWIphIjoit3SpJE=
Subject key identifier: 80:1C:9C:6B:08:B5:8A:46:BB:56:3F:F7:4C:66:BA:9F:C6:72:39:C7
Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial: 0194221F5BAFA8401BEAC9A254B5BBC69272
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/gBycawi1ika7Vj_3TGa6n8ZyOcc.roa
Signing time: Wed 01 Jan 2025 13:47:47 +0000
ROA not before: Wed 01 Jan 2025 13:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3215
IP address blocks: 185.42.232.0/24 maxlen: 24
185.42.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5b:af:a8:40:1b:ea:c9:a2:54:b5:bb:c6:92:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Validity
Not Before: Jan 1 13:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=801c9c6b08b58a46bb563ff74c66ba9fc67239c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:f8:d6:80:bf:a9:be:65:c7:1e:c0:35:57:
ee:eb:93:f2:7c:09:de:ac:34:79:57:69:b1:ab:c6:
9a:b7:c4:83:f1:89:8e:8f:5e:80:7b:02:4d:e3:76:
32:5d:9d:d9:dc:0d:aa:77:89:7b:f8:28:1a:1d:51:
9e:b2:6e:d4:b5:47:6b:b2:fb:ad:dc:ab:f0:62:77:
73:fc:01:bc:4e:a0:37:67:dc:a6:ae:de:6c:2d:29:
9b:b9:a9:99:f0:d3:f8:f3:39:84:50:32:a5:54:40:
f2:ae:96:22:6e:7b:d6:4e:05:70:21:1b:60:78:35:
54:85:96:d1:41:29:6f:0c:38:29:78:7c:50:d0:a8:
fe:1d:ea:1c:8d:0b:b6:c3:b8:21:f5:18:a7:e6:f1:
3a:1d:32:b2:ba:4e:e3:5f:6f:fe:15:e8:47:91:7b:
72:c9:f3:f1:d3:c2:d4:b1:be:5b:6f:da:d9:65:c9:
d9:95:8b:04:76:31:41:d0:33:e3:d1:db:9d:1c:34:
02:e8:6d:61:25:5f:ec:40:22:12:31:40:d7:41:af:
8c:b1:47:96:06:6f:4f:0e:1b:55:db:9b:ad:98:55:
28:90:4c:20:73:18:fb:db:3b:18:16:95:58:a1:99:
ea:37:3b:71:4a:a2:80:33:7e:59:41:37:dd:41:4b:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1C:9C:6B:08:B5:8A:46:BB:56:3F:F7:4C:66:BA:9F:C6:72:39:C7
X509v3 Authority Key Identifier:
keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/gBycawi1ika7Vj_3TGa6n8ZyOcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.232.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:e7:66:5d:ad:d7:75:d6:c3:c7:ea:41:3d:24:e1:51:b2:34:
1b:d2:d3:a6:79:11:f9:09:d5:e7:e7:bd:75:57:09:9e:a9:f3:
d2:79:f3:49:11:46:72:e9:55:23:76:18:5f:31:0a:30:d3:99:
c8:78:4a:3b:b7:35:38:fb:06:67:be:0c:f5:5f:b4:e9:0c:2b:
8a:54:aa:78:1c:63:6d:54:73:ef:0c:8a:85:33:73:40:8b:0b:
5d:cb:31:2f:50:9f:11:22:d2:bd:06:4a:e0:3e:a1:f3:bd:e6:
af:a2:5d:47:aa:76:4c:e5:b1:90:71:75:af:96:52:28:5c:26:
36:67:7b:12:d1:f7:73:07:8f:72:b6:53:67:5d:6b:6f:53:b7:
3a:02:ef:0c:7f:ac:49:a5:80:fb:84:5e:bd:fb:a9:ad:f7:a4:
c7:9d:12:61:ec:45:ea:91:55:a9:f5:ea:52:b8:07:a2:7a:80:
d0:99:0a:9f:b6:89:93:ab:b1:81:6b:4c:cb:08:1a:24:eb:1b:
85:3f:8c:cf:44:30:87:a5:ff:37:97:bf:dc:e6:65:84:0d:59:
54:5e:f2:4d:0e:ec:9a:a4:e4:06:56:82:de:52:74:b5:92:e8:
39:4b:1c:32:8f:4c:65:c0:8e:20:b9:30:34:1e:ca:2a:46:50:
aa:ee:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:26:35 2025 by rpki-client