Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1-VklZtGfRDIv9KG76liQR83-to4.roa
File: 1-VklZtGfRDIv9KG76liQR83-to4.roa (raw, json)
Hash identifier: edjUQqiISv7wfLcTeAAL1KB6ZQeIyU0cQcVsfaTZHug=
Subject key identifier: F9:59:25:66:D1:9F:44:32:2F:F4:A1:BB:EA:58:90:47:CD:FE:B6:8E
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019424456E6F80D18EBB6C76133AEB025B3E
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1-VklZtGfRDIv9KG76liQR83-to4.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 168.199.244.0/24 maxlen: 24
168.199.246.0/24 maxlen: 24
185.101.252.0/24 maxlen: 24
185.171.252.0/24 maxlen: 24
185.171.254.0/24 maxlen: 24
185.226.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6e:6f:80:d1:8e:bb:6c:76:13:3a:eb:02:5b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9592566d19f44322ff4a1bbea589047cdfeb68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:71:bb:8b:4c:87:de:f0:da:e3:ba:6e:39:
21:92:5d:c6:c7:58:ae:3a:16:ac:94:69:fe:a4:4a:
bd:e7:52:e1:a2:e1:41:6d:2e:bd:1d:fc:7c:87:c0:
a1:36:87:84:4e:76:d9:29:49:56:8b:fb:51:f1:bf:
ce:eb:d5:a2:9f:78:ea:cf:0c:a0:06:05:5e:4f:01:
8e:4f:5e:2b:a1:51:4e:58:d9:bf:ef:eb:41:34:f5:
36:22:f7:0f:ba:32:c4:df:f4:27:ac:ad:21:01:3b:
d1:2c:11:b2:e9:62:39:07:d5:17:3e:fa:a9:98:67:
cb:21:a3:5c:f0:29:b9:ec:bc:28:9b:58:ab:d1:5d:
84:cc:7f:d7:79:4e:17:6f:ee:cc:7b:9d:d0:7f:41:
33:40:cc:4c:41:ba:18:bd:fa:0f:7b:dd:3e:e9:de:
6b:15:11:16:01:fd:14:75:f1:ff:d9:27:78:50:a7:
53:6a:ed:d8:43:22:9a:f2:12:16:c2:1e:df:7d:ce:
18:cb:1a:05:04:57:83:2b:73:f7:05:33:f3:f5:40:
6c:4c:e4:7f:8a:a0:bc:08:4d:91:3b:82:ae:6e:fb:
01:1c:3f:35:c8:00:cd:63:d0:97:25:83:48:be:4c:
4b:52:11:96:98:07:6b:fb:25:33:71:d8:ea:4f:87:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:59:25:66:D1:9F:44:32:2F:F4:A1:BB:EA:58:90:47:CD:FE:B6:8E
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/1-VklZtGfRDIv9KG76liQR83-to4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.244.0/24
168.199.246.0/24
185.101.252.0/24
185.171.252.0/24
185.171.254.0/24
185.226.205.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ee:bf:ea:41:80:ae:93:a0:1c:8d:bf:7b:63:22:e1:3d:bd:
ca:e8:2f:ca:8f:c8:5f:c5:9a:55:43:74:36:17:dd:fd:3e:b1:
7c:b4:5b:bb:1c:13:aa:d2:cd:fe:8c:dc:25:24:39:db:9a:a8:
b6:2f:77:0f:47:0c:d1:3f:bc:7d:d1:7e:9a:4e:25:00:a8:8b:
4e:42:29:44:cb:0b:9a:16:a5:d7:cf:a2:4c:22:b8:39:3f:72:
51:9d:39:43:af:cb:85:81:3c:8b:20:6d:4a:8b:61:fd:bc:e3:
8c:b7:25:a9:b2:81:50:12:df:99:91:e2:78:d4:5c:63:b4:4a:
b5:c3:3b:d1:a7:87:86:96:74:a0:0d:04:50:df:f0:9b:35:88:
99:7a:d0:c1:48:6a:98:e4:93:05:29:da:00:75:a5:1e:bc:92:
66:f1:ce:0c:30:1e:ea:e6:3d:f1:21:5d:fa:93:08:e4:85:68:
6c:41:47:9e:85:e3:5e:36:7d:69:90:28:b5:3d:ba:53:b8:eb:
3a:e9:27:93:c0:b7:29:e6:16:02:d3:ff:e4:8e:2a:ef:0e:b0:
6c:b0:3c:18:f9:a4:7b:d9:20:4c:30:14:f9:70:8a:b8:b2:77:
27:7c:95:8a:6c:59:bd:f9:44:45:7c:98:6d:cb:f6:bd:c2:d3:
09:63:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:11:10 2025 by rpki-client