Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/gU67SonlohhDi8lWe_MYl6yJJsI.roa
File: gU67SonlohhDi8lWe_MYl6yJJsI.roa (raw, json)
Hash identifier: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=
Subject key identifier: 81:4E:BB:4A:89:E5:A2:18:43:8B:C9:56:7B:F3:18:97:AC:89:26:C2
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 0194266C483C6267BFB0F8E31535E4D53BCE
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/gU67SonlohhDi8lWe_MYl6yJJsI.roa
Signing time: Thu 02 Jan 2025 09:50:18 +0000
ROA not before: Thu 02 Jan 2025 09:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24631
IP address blocks: 185.162.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:48:3c:62:67:bf:b0:f8:e3:15:35:e4:d5:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jan 2 09:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=814ebb4a89e5a218438bc9567bf31897ac8926c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:c3:9c:b0:e6:a5:59:a0:e3:4e:a2:42:1c:
66:fc:8a:02:bf:fb:8f:17:b0:e1:69:8f:44:64:7d:
c9:81:25:85:b8:26:c8:99:16:b2:91:51:25:8b:24:
25:da:94:00:93:e1:e7:22:42:0d:50:12:b9:59:c9:
57:76:b9:62:64:a6:0e:d6:e5:3a:88:32:4c:b8:69:
17:0c:c9:9c:a0:5a:99:fd:ea:c9:ac:64:af:d6:f6:
c1:8d:aa:70:ce:93:82:c3:79:17:5d:7a:17:20:e3:
f4:13:d8:09:71:80:d9:8c:0f:fc:f9:00:33:91:de:
d0:38:46:dd:e1:7c:e6:13:41:b0:48:8c:86:46:06:
2f:f5:ad:0e:ea:3f:02:0c:66:56:0d:91:17:ea:c1:
4a:fe:dc:3e:86:ea:2d:46:79:2a:90:5a:27:71:6e:
28:12:f6:68:dc:b9:66:50:80:c1:7f:78:43:6c:03:
bf:21:b3:6e:cd:22:c7:c6:17:e5:54:8d:9a:8f:ac:
22:60:f3:8a:3e:02:15:b9:d6:36:d2:77:cd:12:87:
e6:f0:df:1f:4a:25:18:52:94:dc:41:b6:cd:f1:e9:
fd:9b:32:a1:03:34:60:b7:c4:34:1b:ab:0f:eb:6b:
ea:a4:ba:64:5e:c4:e5:22:2d:08:a4:26:a7:c7:73:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:BB:4A:89:E5:A2:18:43:8B:C9:56:7B:F3:18:97:AC:89:26:C2
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/gU67SonlohhDi8lWe_MYl6yJJsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.216.0/24
Signature Algorithm: sha256WithRSAEncryption
41:dc:0a:1d:14:6f:10:08:eb:29:5f:37:62:a6:8a:2d:f0:6e:
f1:73:6b:cf:84:7e:f9:81:fe:5b:c4:19:3d:9a:a4:43:fc:0e:
00:f3:11:59:3b:25:f5:77:d8:6c:3b:10:c5:08:fb:19:97:ed:
5d:66:36:ca:fa:3f:c3:65:c6:0a:6c:4e:2b:5d:6f:ff:08:b8:
5a:2f:63:f7:53:5f:3a:14:34:7f:17:c7:20:9b:78:e5:9a:de:
2e:e1:ed:17:52:d9:9d:6e:fb:5e:0c:96:3e:41:0d:d7:ea:3e:
bf:80:31:6c:ba:97:10:cd:59:1a:1d:b6:6c:aa:06:b2:96:18:
8e:0f:43:16:09:47:27:6c:8c:cb:03:cf:4b:d3:4a:f2:2e:48:
7b:04:14:f4:e0:0d:4b:4b:13:e3:2f:ce:5a:76:74:3b:f5:fd:
67:b8:62:33:1d:a9:d9:f8:e3:ed:75:ac:51:a2:26:1c:7e:c2:
b2:1c:cb:43:52:8f:90:d0:cc:c4:8b:5f:06:57:09:f8:af:b2:
b1:4b:e3:24:c0:fd:c0:39:e6:a4:71:85:80:74:4e:60:d7:79:
f6:b6:7c:dc:5d:ab:50:ae:bd:ce:b1:fd:4e:71:f1:43:b2:49:
a7:e7:2d:f9:71:a6:82:30:98:c7:c3:ab:a9:cd:77:32:b6:95:
04:c5:eb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:50:20 2025 by rpki-client