Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IzZgxmBWbZT_9YeMI83e7ff1W4o.roa
File: IzZgxmBWbZT_9YeMI83e7ff1W4o.roa (raw, json)
Hash identifier: TjxEYgmD5xSA2qSuSOc51Lg55FSIYw6esrWkxLJLrog=
Subject key identifier: 23:36:60:C6:60:56:6D:94:FF:F5:87:8C:23:CD:DE:ED:F7:F5:5B:8A
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAA74FD3A56619D96F6B0BC6D46E99
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IzZgxmBWbZT_9YeMI83e7ff1W4o.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204112
IP address blocks: 37.230.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a7:4f:d3:a5:66:19:d9:6f:6b:0b:c6:d4:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=233660c660566d94fff5878c23cddeedf7f55b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:3c:84:a3:dc:ba:4a:c5:54:74:63:54:40:
8a:f5:2b:4d:27:d9:e5:9e:23:08:44:05:75:c1:d7:
b2:ae:99:63:ab:38:97:09:52:3b:34:a6:c9:71:7e:
46:73:d2:4e:4b:d6:85:f1:66:39:bc:2e:6b:e3:f7:
0e:68:66:b3:c0:82:b0:45:21:bb:bf:9a:a0:f7:03:
6d:69:e4:0c:2d:92:f5:b3:b4:6a:fd:2c:10:b9:df:
13:70:6c:43:0e:0e:73:bb:dc:8f:b7:b3:d1:76:2a:
6d:68:93:26:8b:8a:a0:7e:c3:95:4a:7a:29:be:48:
11:c1:c8:90:68:d3:cc:ed:90:d2:cf:9e:eb:2a:17:
d0:cd:f9:9c:f3:86:1e:65:95:a2:8c:c6:76:4c:81:
57:1b:c6:b3:1d:31:ef:a7:e7:1f:45:24:bd:d8:9d:
eb:af:4f:28:d7:eb:76:38:ef:50:6a:7d:5e:e3:1c:
76:5d:91:0b:da:c6:bd:5b:25:d0:7b:14:43:e5:ba:
5b:bf:e2:fb:8f:46:94:ad:b6:6d:8f:7c:bc:27:71:
b9:7e:69:6f:ff:d3:dd:f5:d8:8a:3f:65:a7:9e:83:
79:3b:df:5c:2c:51:01:5e:d2:bf:16:f5:81:01:8f:
d4:b4:a1:5f:81:2a:82:ba:ae:1e:63:24:f1:06:19:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:36:60:C6:60:56:6D:94:FF:F5:87:8C:23:CD:DE:ED:F7:F5:5B:8A
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IzZgxmBWbZT_9YeMI83e7ff1W4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.225.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ae:b4:73:4f:2a:a8:8a:f3:23:eb:d7:e2:51:21:9d:4e:f5:
fa:b5:45:74:02:b9:e2:15:01:b2:ce:f9:97:3c:37:dc:c5:6b:
28:4b:49:04:16:a9:7d:27:57:e0:25:08:1d:30:17:26:c9:76:
b8:b0:d4:74:00:37:e2:c0:6c:cb:ab:4c:17:27:39:ec:f6:79:
73:2d:05:66:77:33:23:76:94:82:60:1f:c8:a1:1c:7f:1d:07:
b6:7a:cc:eb:2b:ef:bf:d8:51:e4:1d:f5:92:18:fc:c8:a9:75:
7c:06:f2:25:66:b0:97:be:22:f6:82:57:7a:41:63:dd:20:6b:
0d:dd:d3:2e:60:a6:09:63:9a:7c:69:b4:73:62:54:12:2f:d8:
28:a9:53:29:fa:f9:25:b4:b3:61:ff:78:50:3b:ba:2d:16:c2:
84:44:59:78:f0:86:25:ea:1e:73:52:78:99:a9:49:8f:2c:b8:
19:45:d4:40:67:14:f2:84:dc:f5:4d:9d:2a:c3:b7:24:5e:76:
e0:e0:b8:2c:4b:e2:f0:6b:34:11:b0:52:71:23:11:bb:b9:6e:
da:5b:83:c5:39:a4:b8:a7:2a:e8:f8:88:12:bc:6a:05:27:a1:
d2:a1:0e:bc:ed:f3:46:c1:12:62:e8:53:3a:a1:98:37:30:3d:
04:a1:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:51:34 2025 by rpki-client