Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/k3gz5duj9CFhYELeViKRfCBvdLQ.roa
File: k3gz5duj9CFhYELeViKRfCBvdLQ.roa (raw, json)
Hash identifier: sqXEDoIPEFamPJfQ+MXgutDdyy3EAS9+6SZZLlnP/eE=
Subject key identifier: 93:78:33:E5:DB:A3:F4:21:61:60:42:DE:56:22:91:7C:20:6F:74:B4
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 0194698626BEAED298FF00E59C0DB0B68722
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/k3gz5duj9CFhYELeViKRfCBvdLQ.roa
Signing time: Wed 15 Jan 2025 10:33:06 +0000
ROA not before: Wed 15 Jan 2025 10:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43395
IP address blocks: 185.110.218.0/24 maxlen: 24
185.110.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:86:26:be:ae:d2:98:ff:00:e5:9c:0d:b0:b6:87:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Jan 15 10:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=937833e5dba3f421616042de5622917c206f74b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:cb:1e:de:a3:e9:bc:d5:c1:46:50:d6:2d:
ec:88:9f:bc:ea:70:14:34:c5:e4:7b:8c:ac:ac:7e:
6b:c4:15:80:8d:cd:8c:d2:be:35:72:f6:11:91:de:
2b:89:d1:8d:2d:e4:0e:d9:e6:ad:c6:09:27:18:c3:
59:eb:cb:32:81:5f:63:09:b5:c6:e4:d5:95:9e:76:
30:c7:de:13:64:17:28:60:c9:92:66:01:a9:24:27:
88:86:60:02:ed:7b:06:5e:75:54:5b:98:7c:91:6f:
8f:cc:bf:b4:32:48:88:a4:a7:9e:8f:5d:d4:55:d8:
b1:3d:59:77:20:f0:ad:cd:bf:20:e1:ec:e6:45:06:
ae:9c:f7:c2:42:5f:e2:4b:ac:d7:69:6a:a8:7f:46:
c8:7f:61:1f:7f:8a:75:d5:c5:6e:2d:80:86:14:bf:
58:4a:69:24:ef:fb:72:8c:1e:e1:4a:5a:ee:99:7d:
39:2d:11:28:6d:bc:a5:f1:5f:46:54:1f:72:fa:59:
a3:52:c9:4d:57:33:5a:24:98:6e:d0:21:49:55:df:
c5:2c:7d:b6:eb:3f:4a:41:9d:a5:2c:53:d7:6b:69:
e1:6f:63:5d:70:d2:76:b0:9f:3e:3d:f7:bc:3c:e1:
43:ba:87:57:fb:67:c9:53:f7:fe:3f:b8:07:78:a0:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:33:E5:DB:A3:F4:21:61:60:42:DE:56:22:91:7C:20:6F:74:B4
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/k3gz5duj9CFhYELeViKRfCBvdLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.218.0/23
Signature Algorithm: sha256WithRSAEncryption
16:0d:95:79:eb:da:3f:e2:63:8e:9a:1f:8f:b3:02:c9:18:d2:
e5:fb:67:5a:19:96:8f:20:c2:1d:89:84:af:93:83:e6:b3:79:
e1:3e:af:17:7d:cc:6b:af:01:56:2c:f4:12:47:74:44:e5:6a:
cf:51:14:b1:b7:63:f5:cc:bf:80:cd:73:c6:43:40:a2:a6:d8:
9b:6b:d6:08:cb:d6:0c:fb:3a:94:1c:03:8d:a9:05:8d:24:56:
c6:5f:9f:46:2a:c2:2b:8f:dd:d2:08:64:2e:77:49:65:4c:58:
d5:2b:ff:6e:5f:d7:2b:93:75:69:cd:97:99:8c:33:35:cb:cf:
3f:7e:e2:18:00:8a:a3:b4:72:bf:f7:6e:6f:01:60:fb:e1:d5:
4b:ee:1d:5a:c6:24:32:f6:65:19:54:b8:64:bf:4d:bd:5d:85:
0f:45:05:1c:c7:be:c5:2a:64:f7:9d:6e:73:29:b1:06:c1:b8:
d9:00:b1:bc:fb:86:2e:ba:4c:07:87:d8:88:fb:15:80:93:80:
ce:4e:26:5a:99:0b:a0:c8:25:f5:ec:2f:92:95:a2:be:de:91:
c9:26:e6:cb:c7:39:e5:07:32:08:35:bb:7e:56:f0:10:7d:87:
4e:b0:63:26:02:56:ad:77:68:80:57:5b:a6:a6:d3:88:d8:fa:
a1:c1:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:45 2025 by rpki-client