Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa
File: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (raw, json)
Hash identifier: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=
Subject key identifier: D1:1B:B1:60:2B:3E:65:1E:FB:CD:B4:B6:14:A4:56:67:3B:55:2B:44
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0194244542C97024C095B3EA7083C7FB0AA9
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200639
IP address blocks: 185.186.9.0/24 maxlen: 24
185.186.10.0/24 maxlen: 24
2a0b:6b84::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:42:c9:70:24:c0:95:b3:ea:70:83:c7:fb:0a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d11bb1602b3e651efbcdb4b614a456673b552b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:4e:27:59:7a:95:a9:f2:cd:10:65:8f:7e:
d4:fb:09:7a:21:ee:ed:7e:cc:19:9b:2a:1a:95:31:
b9:41:63:0c:f5:a4:4b:a7:84:3a:6d:37:35:7c:be:
59:98:54:69:6b:3d:1d:b8:6d:99:9a:78:96:56:a1:
0f:5c:9e:fc:9b:2d:46:57:a6:5a:85:bc:df:04:34:
d1:5d:af:ca:c5:7a:35:73:5e:28:99:90:de:6f:a1:
eb:ae:95:08:5c:9d:7f:c9:1d:17:fb:de:be:b7:2e:
52:62:b3:6b:1d:9b:d2:fd:30:1e:ea:e6:09:cd:62:
cc:e6:71:1d:9c:06:00:32:4a:83:df:e2:f5:0d:48:
b7:a9:1f:7a:56:bc:dd:43:7c:10:2a:da:87:20:be:
c7:b9:ec:68:cc:c7:22:bd:34:62:13:40:6f:24:85:
62:33:f9:10:1a:59:be:60:54:6f:df:d7:8e:54:5d:
50:6f:c7:99:da:fa:3b:81:ce:78:b3:4f:cf:aa:d2:
5a:8a:8f:be:97:66:95:c1:89:d9:96:3e:f9:9f:ae:
f1:0b:7d:05:29:8b:d0:b7:a9:ae:01:fb:f3:b5:33:
5d:b7:bd:9b:ca:fd:16:2b:26:47:4e:94:01:55:87:
58:ba:a0:e7:a1:42:e6:25:2b:bf:f9:32:70:ba:d7:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1B:B1:60:2B:3E:65:1E:FB:CD:B4:B6:14:A4:56:67:3B:55:2B:44
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.9.0-185.186.10.255
IPv6:
2a0b:6b84::/32
Signature Algorithm: sha256WithRSAEncryption
36:ee:9f:41:8a:dc:46:1d:bf:21:74:ef:29:65:a3:17:fd:0e:
4c:46:dd:0a:e6:db:a1:f3:06:68:49:b0:35:f0:7e:c6:2c:75:
c6:1e:10:3e:1f:25:d7:24:fc:9f:8d:76:0f:d1:c5:f0:89:9a:
bd:0a:10:e4:20:e5:e4:62:73:ef:c0:be:b2:21:9a:f6:f1:12:
26:ac:4e:d9:57:43:44:1e:f8:f8:5d:58:db:f5:de:76:3e:13:
26:c4:58:20:db:a6:91:22:28:af:28:1c:3b:94:74:11:86:93:
02:7b:61:da:c7:a4:a2:ae:a3:06:07:0c:8f:10:c2:05:4a:05:
26:13:06:22:ea:4d:6c:8c:88:48:09:b5:31:65:cf:f6:2f:5f:
b1:7d:48:b0:11:14:13:f7:ca:f4:b0:5a:39:0e:50:58:fe:14:
f3:40:fc:85:ef:af:98:70:73:e2:e6:fc:10:27:cf:bf:33:4e:
7d:66:1b:e3:5a:87:53:cc:47:13:87:f6:15:03:d6:68:e4:83:
ce:eb:0a:e8:5e:b3:d3:81:56:76:ac:1e:bc:d4:5c:f8:64:31:
4a:2a:51:f4:a6:cb:de:cd:f4:0e:dd:8d:61:71:82:6a:1b:e4:
37:47:5d:cb:d3:9c:9f:64:3d:92:b5:09:62:b8:28:5c:d7:3f:
b3:55:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:59:44 2025 by rpki-client