Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/gAUG9nMSNjQsq1tequutH3immt8.roa
File: gAUG9nMSNjQsq1tequutH3immt8.roa (raw, json)
Hash identifier: LCBTiYiGcwL+NIVJ6V4OXpEoNBb3bNUukyOlGZ8oVgM=
Subject key identifier: 80:05:06:F6:73:12:36:34:2C:AB:5B:5E:AA:EB:AD:1F:78:A6:9A:DF
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 01942444AF4A927E5945E4366988BEE73EEB
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/gAUG9nMSNjQsq1tequutH3immt8.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57670
IP address blocks: 176.105.160.0/19 maxlen: 19
176.105.161.0/24 maxlen: 24
176.105.162.0/24 maxlen: 24
176.105.164.0/24 maxlen: 24
176.105.166.0/24 maxlen: 24
176.105.168.0/24 maxlen: 24
176.105.169.0/24 maxlen: 24
176.105.170.0/24 maxlen: 24
176.105.171.0/24 maxlen: 24
176.105.172.0/24 maxlen: 24
176.105.173.0/24 maxlen: 24
176.105.174.0/24 maxlen: 24
176.105.175.0/24 maxlen: 24
176.105.176.0/24 maxlen: 24
176.105.177.0/24 maxlen: 24
176.105.178.0/24 maxlen: 24
176.105.179.0/24 maxlen: 24
176.105.180.0/24 maxlen: 24
176.105.181.0/24 maxlen: 24
176.105.182.0/24 maxlen: 24
176.105.183.0/24 maxlen: 24
176.105.184.0/24 maxlen: 24
176.105.185.0/24 maxlen: 24
176.105.186.0/24 maxlen: 24
176.105.187.0/24 maxlen: 24
176.105.188.0/24 maxlen: 24
176.105.190.0/24 maxlen: 24
176.105.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:af:4a:92:7e:59:45:e4:36:69:88:be:e7:3e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=800506f6731236342cab5b5eaaebad1f78a69adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:aa:97:71:06:ac:4c:6a:50:d3:10:14:a8:
a8:8a:16:75:d3:b7:31:64:0e:d5:07:ee:18:d8:51:
a5:59:a3:53:e0:96:9f:ff:9f:c1:53:7e:c3:a1:47:
52:1d:32:d8:06:eb:e1:a1:0e:0c:48:f7:68:21:34:
25:c2:39:03:5b:a5:c0:e1:ea:67:3d:48:b5:d9:21:
ed:68:77:05:62:c3:cc:93:50:00:e7:84:13:67:6b:
87:2d:f7:1a:7d:3f:ba:28:57:03:ec:be:c4:e2:58:
f2:7a:b9:24:65:ed:e2:ef:62:68:ad:76:58:33:1b:
81:12:0c:d5:62:e2:e0:57:e4:ca:6c:20:d6:47:ca:
82:30:bc:09:6c:13:bc:4c:5a:1a:22:9d:db:81:78:
da:01:76:59:ff:a1:74:78:04:32:02:8d:05:4a:31:
ac:1c:b0:22:aa:1c:39:7c:bf:e6:3d:0f:37:2c:97:
f8:4d:56:80:da:c6:d2:50:36:dd:88:f9:c5:9a:96:
f0:15:fa:c2:19:3e:68:c0:a2:2d:57:a3:00:56:0a:
2b:27:44:63:90:66:ae:6d:50:d1:56:81:34:2c:48:
1b:63:45:34:2e:45:7a:f5:41:db:32:05:90:8e:89:
4c:fa:19:0b:60:23:79:e4:e2:6d:60:a3:e3:f1:df:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:06:F6:73:12:36:34:2C:AB:5B:5E:AA:EB:AD:1F:78:A6:9A:DF
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/gAUG9nMSNjQsq1tequutH3immt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.160.0/19
Signature Algorithm: sha256WithRSAEncryption
94:2d:49:95:8b:92:51:52:67:72:9f:9b:f0:ec:b6:36:b1:51:
34:57:a4:d2:7a:30:49:25:24:20:a6:b1:50:88:d4:78:66:66:
7b:dd:be:29:c2:58:6d:2d:6a:da:04:93:97:c1:f0:f8:df:c8:
d5:6a:a5:a6:d5:8d:48:ad:d2:ee:d1:60:f9:d7:0a:8f:9c:f1:
46:b7:7f:93:4f:4c:1d:e6:f5:3a:91:95:0b:64:93:c5:ed:a1:
0b:8d:92:d9:b6:9b:36:86:79:22:2c:7f:88:14:88:bf:86:59:
52:d7:6d:a7:66:ba:15:d1:37:a9:4d:35:19:32:56:f7:c6:9e:
17:51:90:65:6e:c2:72:af:b1:67:23:03:ab:8c:3b:f7:5e:75:
06:0a:85:3d:55:cc:d0:74:0f:6d:90:69:de:d6:ca:20:9a:80:
ba:e7:a5:99:7d:d6:e2:14:b5:1c:7b:d0:95:45:b2:43:02:71:
cf:08:c7:f1:12:c2:8a:dc:f0:9f:b0:43:41:08:3d:5a:b1:de:
57:9c:68:2e:6c:f5:c3:18:1d:08:c9:2b:14:d1:db:2b:63:7c:
10:b7:2f:ed:6e:9f:46:18:31:2d:8c:68:78:4a:61:e9:c1:7e:
01:ec:e4:6c:76:5d:a7:26:c8:b8:a6:65:7d:75:42:12:84:a5:
8d:67:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:32:56 2025 by rpki-client