Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5pncy3sRWfNwDwogl_Ggl9twmz4.roa
File: 5pncy3sRWfNwDwogl_Ggl9twmz4.roa (raw, json)
Hash identifier: x4Ip2Nj7Mp2fqXsum+xvhFyQoSgIkScG363wLfxxjQQ=
Subject key identifier: E6:99:DC:CB:7B:11:59:F3:70:0F:0A:20:97:F1:A0:97:DB:70:9B:3E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9ECF954B1F734EE589DFC97AE317
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5pncy3sRWfNwDwogl_Ggl9twmz4.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61326
IP address blocks: 178.170.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:cf:95:4b:1f:73:4e:e5:89:df:c9:7a:e3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e699dccb7b1159f3700f0a2097f1a097db709b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:48:65:dc:d6:91:dc:74:e0:a1:d4:1f:3b:
f7:2f:a2:08:0f:e9:53:d8:48:85:89:04:e1:56:9f:
f7:c7:3f:7c:e0:2d:88:70:32:68:f0:12:8d:eb:b2:
7b:d0:22:33:14:9e:1a:b4:2d:f0:d0:14:52:0e:d1:
87:11:9f:ce:7d:da:2f:d3:94:89:97:98:3a:ea:68:
26:1e:d8:1d:0a:15:d9:c5:6e:fd:c0:42:76:73:e1:
54:b7:03:46:30:4d:8d:e6:85:f5:0b:d6:1e:2f:3f:
fd:7c:ae:a1:f4:b6:06:8d:5c:c1:80:d8:bc:2d:4a:
1f:7a:1c:bd:c4:3b:2e:7b:3c:33:c3:c5:40:2b:04:
9f:b8:a0:85:91:24:83:0d:be:79:4c:85:7a:1d:ff:
94:e1:18:d4:8e:1c:b4:b5:ee:46:0f:a7:52:39:27:
29:05:89:45:8f:0c:21:e5:f0:3d:74:2a:c8:f8:70:
05:ed:7f:e8:5b:dd:71:56:77:8d:4b:d1:27:c6:79:
8b:de:4d:c7:d1:e8:e7:0f:9a:92:6e:48:5d:14:df:
33:f3:39:2c:8b:8d:06:b9:34:f8:6e:81:e5:6a:cd:
88:4d:03:a8:58:2b:cc:b5:f4:06:bc:a1:9e:01:59:
c9:5c:31:ea:bb:a8:82:94:cf:16:66:b7:bb:b1:b9:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:DC:CB:7B:11:59:F3:70:0F:0A:20:97:F1:A0:97:DB:70:9B:3E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5pncy3sRWfNwDwogl_Ggl9twmz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.186.0/24
Signature Algorithm: sha256WithRSAEncryption
34:48:fa:3a:27:6d:19:68:b5:6b:61:2d:d6:70:01:8c:77:0a:
eb:65:2b:0e:20:80:7f:2e:7f:b1:88:bb:e9:92:04:3a:46:14:
61:7d:08:6f:61:46:1a:9d:a9:3b:b0:f9:e4:4a:a4:12:99:60:
6b:ff:7d:a5:77:c7:03:4f:4f:32:83:be:e5:00:1a:72:f4:79:
a0:58:17:8a:3d:8b:be:05:70:b2:3b:68:3b:41:f4:f5:ca:e0:
e3:0b:3b:43:67:23:29:28:48:ee:28:f8:50:ed:38:d9:c2:09:
aa:54:80:2d:ea:35:81:0b:64:2b:3f:f7:4d:c3:7e:cf:0d:c2:
44:48:3b:9c:be:17:59:97:ce:3e:b2:ac:09:63:7e:0c:53:37:
a6:5f:af:a5:05:a6:ff:1b:b6:5d:18:c2:65:94:3b:f1:a4:17:
fd:ec:2b:25:92:0a:c8:33:55:87:2f:7b:b5:6f:7c:ae:31:9a:
e4:5b:c9:30:9a:48:b9:e7:db:d5:d9:8f:ee:f0:e9:e0:d6:e1:
2d:7a:2c:c2:1e:64:59:eb:18:3d:64:25:b2:65:79:d6:c3:22:
9a:3f:36:a8:06:e6:2f:be:5c:02:8a:1c:72:dd:dd:9a:77:34:
1b:de:26:35:87:91:f1:ee:4d:41:83:c3:81:ed:80:25:46:d2:
3b:87:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:26 2025 by rpki-client