Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/P--cyCsEXWTpmdtjtbooGfKZW34.roa
File: P--cyCsEXWTpmdtjtbooGfKZW34.roa (raw, json)
Hash identifier: NViLGPpX2PnuVnmOA56Cf2Dp8n102H0opZdujn8vzcs=
Subject key identifier: 3F:EF:9C:C8:2B:04:5D:64:E9:99:DB:63:B5:BA:28:19:F2:99:5B:7E
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 01942444AF24B2969EDA6824377BC1E29AF2
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/P--cyCsEXWTpmdtjtbooGfKZW34.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35297
IP address blocks: 176.105.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:af:24:b2:96:9e:da:68:24:37:7b:c1:e2:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fef9cc82b045d64e999db63b5ba2819f2995b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:e1:ff:a5:87:06:fc:8e:f5:b6:14:9a:9f:
04:c6:33:60:90:65:8f:5e:f5:1d:16:09:d0:0e:ae:
9a:4f:9d:8d:fb:97:1e:c9:da:61:36:c8:e0:52:a8:
cf:21:0d:c4:d4:ac:e4:bb:56:82:04:db:a5:4f:57:
d8:69:9c:2b:c1:12:ca:57:c4:7b:d7:af:ac:53:06:
59:b5:11:39:8c:d4:40:c8:f7:26:a1:ae:7c:15:99:
f4:a6:2c:b0:4d:0e:48:22:84:44:5e:7c:59:f0:93:
2d:58:d4:9b:f0:9c:f9:cb:34:17:e0:ed:ac:1e:97:
43:9b:a9:6c:32:7b:2b:68:b4:b9:26:c0:3c:50:46:
58:4a:fc:bb:a7:df:0f:b8:45:3f:da:1d:94:de:53:
b1:a0:25:39:34:b7:b6:a8:61:93:a3:8c:f8:a5:7c:
ea:95:1c:2b:5a:87:c6:b2:15:77:b7:67:95:fd:f1:
54:09:05:72:4f:89:12:c0:4f:43:de:8e:d8:49:a6:
8e:e5:d3:76:11:1e:0b:17:c1:b1:d9:1f:75:e2:fa:
19:57:7e:87:cf:d3:93:95:8d:e3:2d:ac:30:bf:04:
1e:ab:61:dc:58:48:e1:a2:dd:b0:20:16:34:67:fb:
99:a3:48:eb:25:6b:dd:70:20:db:f9:f9:07:81:ce:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:9C:C8:2B:04:5D:64:E9:99:DB:63:B5:BA:28:19:F2:99:5B:7E
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/P--cyCsEXWTpmdtjtbooGfKZW34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ff:7a:f5:8c:07:ce:13:7e:69:9a:7a:c3:26:b0:9f:92:47:
b8:76:76:50:57:b3:29:fe:df:90:12:a0:02:aa:11:1c:c1:20:
09:52:42:69:fb:d3:79:8f:2e:2f:ab:ca:ed:7d:45:0f:4f:8f:
30:2c:ef:48:41:13:5a:86:2d:ca:e9:45:bd:ca:08:3f:c1:42:
61:68:41:93:8f:fb:0c:af:e3:e1:43:48:27:d7:d3:58:7c:35:
e8:bf:30:3a:68:c3:20:d3:70:17:9b:7b:d8:e8:fb:0d:db:ab:
93:cd:45:9d:06:e8:ee:13:24:8e:05:f0:91:e3:15:0c:25:39:
8b:d7:c2:98:ed:77:a7:62:d8:70:d2:1c:71:95:12:ba:99:66:
cc:86:f3:d1:d8:7c:67:a3:57:1d:fc:85:bd:b6:fd:e0:8b:a2:
44:d2:d3:9e:12:21:0f:93:bd:c3:46:da:40:11:1c:8b:4d:59:
71:02:44:23:42:92:d9:ec:a7:a8:53:1c:1d:19:58:4a:4e:65:
5a:8b:d4:0a:72:78:a1:05:04:64:d3:d5:1a:98:ff:09:c6:b4:
b2:9a:42:b9:e0:1e:a0:fc:ab:42:1a:8c:6e:57:07:b1:b0:26:
47:15:cc:3b:c1:5b:9a:2b:e9:9c:1f:2e:28:24:49:db:68:ae:
05:e3:e2:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRK8kspae2mgkN3vB4pryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMTY1ODhiZDFjY2IyZGQyMjFjNmY4NzgzODU2NzQ3NWQ3
ZWYyOWIwHhcNMjUwMTAxMjM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmVmOWNjODJiMDQ1ZDY0ZTk5OWRiNjNiNWJhMjgxOWYyOTk1YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu3h/6WHBvyO9bYUmp8ExjNgkGWP
XvUdFgnQDq6aT52N+5ceydphNsjgUqjPIQ3E1Kzku1aCBNulT1fYaZwrwRLKV8R7
16+sUwZZtRE5jNRAyPcmoa58FZn0piywTQ5IIoREXnxZ8JMtWNSb8Jz5yzQX4O2s
HpdDm6lsMnsraLS5JsA8UEZYSvy7p98PuEU/2h2U3lOxoCU5NLe2qGGTo4z4pXzq
lRwrWofGshV3t2eV/fFUCQVyT4kSwE9D3o7YSaaO5dN2ER4LF8Gx2R914voZV36H
z9OTlY3jLawwvwQeq2HcWEjhot2wIBY0Z/uZo0jrJWvdcCDb+fkHgc50LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD/vnMgrBF1k6ZnbY7W6KBnymVt+MB8GA1UdIwQY
MBaAFKAWWIvRzLLdIhxvh4OFZ0ddfvKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JaWWk5SE1zdDBpSEctSGc0Vm5SMTEtOHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZWM1NjktOGNhZi00MTk4LWJhZTEt
NzczMTIwZmY3YzBmLzEvUC0tY3lDc0VYV1RwbWR0anRib29HZktaVzM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80ZWM1NjktOGNhZi00MTk4LWJhZTEtNzczMTIwZmY3YzBm
LzEvb0JaWWk5SE1zdDBpSEctSGc0Vm5SMTEtOHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGmlMA0G
CSqGSIb3DQEBCwUAA4IBAQCh/3r1jAfOE35pmnrDJrCfkke4dnZQV7Mp/t+QEqAC
qhEcwSAJUkJp+9N5jy4vq8rtfUUPT48wLO9IQRNahi3K6UW9ygg/wUJhaEGTj/sM
r+PhQ0gn19NYfDXovzA6aMMg03AXm3vY6PsN26uTzUWdBujuEySOBfCR4xUMJTmL
18KY7XenYthw0hxxlRK6mWbMhvPR2Hxno1cd/IW9tv3gi6JE0tOeEiEPk73DRtpA
ERyLTVlxAkQjQpLZ7KeoUxwdGVhKTmVai9QKcnihBQRk09UamP8JxrSymkK54B6g
/KtCGoxuVwexsCZHFcw7wVuaK+mcHy4oJEnbaK4F4+L2
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:02:31 2025 by rpki-client