Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R_1_hczgMW1jBKfxoXgq-pYBdeg.roa
File: R_1_hczgMW1jBKfxoXgq-pYBdeg.roa (raw, json)
Hash identifier: Ix62QwnYXLD4Pt2Xfbp+1GqA2hTp8sB5XWDnJQ1s9Jo=
Subject key identifier: 47:FD:7F:85:CC:E0:31:6D:63:04:A7:F1:A1:78:2A:FA:96:01:75:E8
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAB13D3B7A1B5EBE2FCCB6A64937C7
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R_1_hczgMW1jBKfxoXgq-pYBdeg.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210706
IP address blocks: 37.18.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b1:3d:3b:7a:1b:5e:be:2f:cc:b6:a6:49:37:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47fd7f85cce0316d6304a7f1a1782afa960175e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:bc:18:28:89:a9:3f:0a:ee:eb:e7:49:0b:
c4:a3:3c:28:2f:e5:81:a6:61:42:9e:8c:3f:77:c5:
f2:0a:30:77:21:cc:7e:9e:20:76:3d:6c:5f:c9:4d:
51:d2:98:f1:50:b1:ae:c9:b1:16:bc:9f:73:a8:9b:
ce:c2:2d:01:11:40:ca:c5:a0:ee:2d:32:4d:ee:de:
61:0d:4c:b3:84:6e:e2:2a:0f:3f:ab:39:8f:54:be:
83:35:b0:47:a4:ac:b2:83:54:50:e3:1f:e0:b2:6a:
c0:c6:78:bf:f1:2e:1e:61:92:0a:21:37:a7:7d:58:
2a:6b:e4:51:2b:af:5d:9d:1d:43:75:08:03:48:af:
4e:c9:27:66:2b:f1:63:71:7a:2f:1c:a9:7f:0c:cb:
b5:8b:3c:a3:1f:20:68:e8:0d:9a:37:49:39:d9:4d:
b5:e8:47:33:07:97:bf:6e:56:91:db:71:8c:a2:9d:
f3:8f:51:ba:59:8b:68:10:2b:b4:49:09:af:9a:34:
4b:aa:1c:ab:1e:31:da:41:66:b6:c7:7c:5b:27:ea:
e3:8c:25:6e:d3:82:dc:bf:2a:86:aa:43:0f:5d:d0:
55:be:47:44:b2:1a:d6:2e:14:96:02:82:c4:47:b6:
8a:11:d5:fb:94:b0:cc:ad:67:18:89:ed:54:48:9f:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FD:7F:85:CC:E0:31:6D:63:04:A7:F1:A1:78:2A:FA:96:01:75:E8
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R_1_hczgMW1jBKfxoXgq-pYBdeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.18.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cd:88:03:10:a1:0d:b3:f1:b1:e7:00:15:0f:55:4e:24:ea:
e1:84:4e:f8:07:7a:87:31:88:f9:d6:ce:72:84:98:b5:0b:f3:
72:3a:12:af:d0:8e:88:15:72:48:a4:d5:62:40:e8:2d:12:0a:
97:5c:75:0e:17:3d:53:82:72:b2:ee:70:f5:0c:79:25:34:bb:
2a:58:3f:57:7f:08:72:7a:3f:2d:30:f7:f9:cd:48:41:ef:dc:
1b:a6:d6:ce:df:a0:06:43:62:bf:45:2d:cf:c8:d1:a9:b4:c5:
69:d0:3b:79:ab:c6:86:16:2b:d6:0b:3e:f5:99:df:71:8a:de:
4e:91:6f:c7:32:dd:16:86:00:59:f1:55:ad:20:77:c5:8e:b8:
3f:b0:1e:4f:26:c3:f7:73:e2:01:bb:f5:8a:85:96:59:57:f8:
5c:d0:96:7a:ea:74:2d:ca:25:63:f0:a7:bb:48:9d:51:6c:ba:
68:2d:16:0a:25:7b:0f:4d:ef:dd:47:4f:52:31:b2:a2:5e:ab:
b2:25:8f:eb:52:ed:79:46:b7:a6:ff:3d:80:39:a9:2e:fd:50:
94:02:14:25:dc:0d:94:03:ba:cb:88:92:eb:4e:64:e8:3c:46:
b5:0a:1f:bd:03:8b:7a:b8:ce:0a:d2:da:a6:bb:2d:16:5d:e8:
4c:77:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:20 2025 by rpki-client