Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/loy5Snyw-iUVPzzHRVWXXXo15_o.roa
File: loy5Snyw-iUVPzzHRVWXXXo15_o.roa (raw, json)
Hash identifier: HapHLXp4oAYGR81r+nU701ZcjYxsNP2uFcUwMFCofYE=
Subject key identifier: 96:8C:B9:4A:7C:B0:FA:25:15:3F:3C:C7:45:55:97:5D:7A:35:E7:FA
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019427B6373D9FFC08CDD0EB6E826073D1CE
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/loy5Snyw-iUVPzzHRVWXXXo15_o.roa
Signing time: Thu 02 Jan 2025 15:50:40 +0000
ROA not before: Thu 02 Jan 2025 15:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.23.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:37:3d:9f:fc:08:cd:d0:eb:6e:82:60:73:d1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jan 2 15:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=968cb94a7cb0fa25153f3cc74555975d7a35e7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:7a:39:8a:6f:f0:48:7f:f4:2b:5e:31:29:
d7:1c:71:b6:28:cd:5d:ce:e4:45:4d:09:25:87:c1:
b3:aa:4e:2a:b8:73:e1:fa:80:7f:de:53:94:26:fb:
5f:0a:94:66:9d:09:03:9d:1f:23:ec:a3:92:44:67:
b5:ed:99:28:9d:87:e9:67:71:36:5e:82:bf:68:d9:
4d:9d:35:1f:d7:61:6a:ff:41:a1:6e:7d:05:6e:36:
69:a2:3f:9b:31:2e:fd:c3:7d:a3:73:76:aa:66:ac:
45:4d:ed:bd:55:4c:f5:96:c0:6f:18:f9:30:13:96:
96:3b:44:82:1b:64:50:28:a0:ca:0e:9b:82:07:8b:
ce:a3:da:0b:59:6b:84:fc:20:6a:ff:ed:d9:82:b6:
48:5e:7b:a7:94:5d:3a:60:53:22:68:84:27:54:ce:
4a:8b:5b:20:ce:18:e9:9e:8d:27:10:7a:ef:31:2a:
24:42:f7:21:69:48:3c:82:b9:70:ca:9c:7d:78:60:
d9:92:82:72:a8:82:cf:5c:85:24:b7:24:88:75:16:
05:2a:ca:6d:ef:3f:23:ef:2b:6e:49:8f:b1:9b:80:
67:40:86:34:f2:ca:df:96:9a:7a:05:ba:14:e2:83:
54:1c:38:e6:96:00:1e:0a:2a:51:dc:2c:31:cd:9d:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:B9:4A:7C:B0:FA:25:15:3F:3C:C7:45:55:97:5D:7A:35:E7:FA
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/loy5Snyw-iUVPzzHRVWXXXo15_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.237.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2d:a6:2b:f2:45:c0:60:51:81:e9:b1:15:06:f8:cb:5f:85:
0b:40:97:da:51:92:66:88:d9:63:4c:d8:78:56:23:f4:14:e2:
46:32:ff:f0:da:3c:dd:72:1c:4c:4e:41:c2:cc:45:c9:c8:6d:
3d:fd:51:ff:c7:81:d8:19:17:20:59:a6:57:11:a6:47:ea:c4:
f7:da:fb:e2:58:41:4e:00:c0:b6:85:c3:88:e8:a1:30:f8:47:
48:82:3c:9c:6c:f2:28:64:47:49:ce:c3:b8:1f:1c:99:7c:79:
7b:48:4b:cf:d2:b1:07:bb:c2:07:0a:fe:8f:fe:de:b8:8f:03:
9f:78:2a:79:94:19:8b:a4:c6:d5:05:a2:76:a8:3f:88:04:81:
ef:1c:4c:7d:fd:fc:7e:0c:fb:06:86:23:72:d3:c5:5b:ad:db:
01:f2:7f:ca:00:74:68:ac:f7:93:0d:d8:33:92:bc:63:67:c3:
cd:e6:50:36:c0:e5:c0:a9:52:19:cb:56:35:48:4a:e5:cb:fd:
d9:a6:5a:67:eb:0b:80:08:01:c6:3e:bb:d3:b3:fa:21:4e:2e:
ad:21:74:b7:2a:cc:f6:18:7b:38:21:c7:70:e7:a7:a9:b8:cf:
40:6b:de:c8:7d:04:a4:6c:bb:fd:eb:a3:f6:53:40:e0:a9:e5:
ad:e7:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:56 2025 by rpki-client