Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4locrxHyX6UeBrTCDBKq3fJjIhU.roa
File: 4locrxHyX6UeBrTCDBKq3fJjIhU.roa (raw, json)
Hash identifier: 57RX/2aGUXBNZq4wqCsxDNWTaoMCixeTd2hAfdAzOz4=
Subject key identifier: E2:5A:1C:AF:11:F2:5F:A5:1E:06:B4:C2:0C:12:AA:DD:F2:63:22:15
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01942445686351077B368906BF12A247C604
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4locrxHyX6UeBrTCDBKq3fJjIhU.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 168.199.128.0/22 maxlen: 24
168.199.160.0/22 maxlen: 24
168.199.192.0/22 maxlen: 24
168.199.212.0/22 maxlen: 24
185.101.244.0/23 maxlen: 24
185.101.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:68:63:51:07:7b:36:89:06:bf:12:a2:47:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25a1caf11f25fa51e06b4c20c12aaddf2632215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:65:3b:2d:c2:8d:61:95:95:3a:8a:4c:8c:
f8:c8:b4:77:0c:b6:ac:a0:7b:f4:da:3c:13:6c:1d:
c6:b7:1b:65:b7:86:ea:8d:e9:e5:04:e1:40:e4:80:
a5:bf:08:d9:81:99:0e:26:37:b2:52:9d:2d:9d:95:
23:d0:50:8b:ea:90:27:e6:13:0d:40:36:1a:7a:ba:
a7:4a:c9:cc:ed:6e:a0:3a:25:e0:fb:27:be:b4:f3:
c4:87:72:c1:73:97:b5:2d:aa:5b:01:52:b0:b0:b1:
92:65:93:fb:51:65:0f:fb:ea:cc:00:53:14:dc:ec:
52:04:88:7d:c1:f3:43:fd:2c:da:e3:58:a0:2f:f5:
36:a3:ac:47:88:92:e5:db:ed:6a:48:7b:29:81:5c:
0d:16:dd:1a:40:2a:b8:49:05:f8:7b:8d:2f:07:19:
12:b2:a0:cd:11:a9:7d:9c:ae:af:80:64:ad:ec:76:
0c:2c:2c:5b:11:f7:b2:09:43:05:7d:5b:49:1b:ca:
a6:b2:fe:67:18:06:0b:85:4c:e3:a4:c3:b8:c4:58:
01:38:cc:2b:4a:ae:a6:2e:7f:73:80:8e:ac:8d:f7:
76:27:2f:3c:20:47:21:cf:b5:44:3f:ac:9d:5b:cf:
6e:5e:ef:95:c1:dc:54:64:4c:80:c3:da:42:1b:11:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:1C:AF:11:F2:5F:A5:1E:06:B4:C2:0C:12:AA:DD:F2:63:22:15
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/4locrxHyX6UeBrTCDBKq3fJjIhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.128.0/22
168.199.160.0/22
168.199.192.0/22
168.199.212.0/22
185.101.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:5e:1c:63:43:5f:f4:2f:1a:77:6d:c7:51:08:40:a6:fe:7b:
7d:9b:c1:ae:0d:6b:f2:a9:77:5c:73:95:a9:3b:4a:8e:86:9d:
b2:0f:1d:0d:ab:b6:ff:54:32:1f:c2:75:14:d1:be:3d:13:12:
ed:d2:04:f1:1d:a1:41:e5:58:7b:90:4d:67:de:36:21:41:98:
48:c9:2d:cd:8f:ac:e2:8f:d4:d7:71:1f:bd:2d:74:7b:d9:25:
88:6f:e7:9e:e2:15:d9:15:7b:3b:7e:7a:82:d2:4d:8c:68:3b:
87:1e:07:b0:ed:3f:84:8f:bc:69:d6:75:e1:e5:84:e4:3a:10:
c0:b5:ec:39:6e:43:5e:59:42:82:bc:12:b2:0f:b5:5a:f0:8b:
5e:ee:55:c8:a3:a9:13:27:ff:5a:23:a2:75:d4:8b:78:5e:83:
7c:62:b6:e4:f4:00:b3:8a:b7:2c:4a:d1:3b:a4:d1:8d:f6:1c:
bf:6e:24:90:ca:2d:ee:26:d6:b4:0e:70:e5:67:4d:49:ab:ba:
5a:27:ff:eb:06:ba:3f:cb:05:42:ac:2b:9e:43:b3:b0:15:36:
f6:6e:d8:97:c9:82:90:22:d7:a6:94:88:29:37:5e:dc:b3:c6:
a9:1a:e6:6a:45:3b:63:76:66:44:45:b0:d9:32:ba:13:6b:2c:
f7:70:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:55:28 2025 by rpki-client