Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/C36u7KfhCFOa8XdN016Wy-ytnzU.roa
File: C36u7KfhCFOa8XdN016Wy-ytnzU.roa (raw, json)
Hash identifier: NBROKoh3VnJzs+HifzEAW5oRrothQyJwHy1p6FD7qNw=
Subject key identifier: 0B:7E:AE:EC:A7:E1:08:53:9A:F1:77:4D:D3:5E:96:CB:EC:AD:9F:35
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019424456DF38855709D68FA86A3685FDBED
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/C36u7KfhCFOa8XdN016Wy-ytnzU.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 168.199.0.0/20 maxlen: 24
168.199.16.0/23 maxlen: 24
168.199.22.0/23 maxlen: 24
168.199.48.0/20 maxlen: 24
168.199.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6d:f3:88:55:70:9d:68:fa:86:a3:68:5f:db:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b7eaeeca7e108539af1774dd35e96cbecad9f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:ad:7f:d7:0f:e4:f9:d1:1d:0b:63:6a:87:
98:67:89:40:a6:c2:cd:56:70:2c:f5:40:ce:e2:06:
50:72:36:61:76:6c:d6:93:0f:00:92:b7:8c:44:b7:
3c:ea:8f:95:0e:e0:91:15:14:09:c2:e6:06:db:7c:
d5:42:0b:34:24:51:69:c7:d1:6c:c7:06:b6:c7:2c:
cf:80:9a:91:d5:aa:e1:51:42:a5:7d:db:87:28:b2:
5c:b5:f5:73:a3:d3:5f:7b:f3:03:c8:b7:a6:5e:f3:
d9:e6:e6:39:de:28:0b:1c:a4:c1:da:ca:14:29:f4:
9d:1e:fa:4f:6f:94:3d:d7:b8:84:49:87:da:e0:11:
f7:62:0c:56:8b:5e:ed:74:8c:ba:4a:29:a4:50:2a:
d1:d8:78:b4:a8:0d:53:e4:0f:91:6a:b9:59:a7:3a:
dc:f8:72:e5:89:29:42:89:29:26:b0:b9:05:35:59:
46:64:dd:10:15:af:e4:67:7c:da:09:1f:aa:b2:70:
1e:10:da:9d:20:f3:e4:bd:59:b4:8d:44:6e:90:f4:
35:6b:68:46:de:d6:61:4a:d2:19:e3:11:19:03:b2:
a5:ec:1a:06:06:45:93:b8:2c:1c:a4:dd:be:20:49:
80:f0:3f:e8:cc:05:5c:ec:0d:c3:90:6b:df:a2:fc:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7E:AE:EC:A7:E1:08:53:9A:F1:77:4D:D3:5E:96:CB:EC:AD:9F:35
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/C36u7KfhCFOa8XdN016Wy-ytnzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.0.0-168.199.17.255
168.199.22.0/23
168.199.48.0/20
168.199.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:79:93:ea:f7:f0:32:d8:1d:c7:25:c7:d3:48:7c:34:25:e5:
de:56:e9:bd:82:3d:7f:23:72:1a:ab:0b:38:4a:1d:7b:e6:f3:
5d:e2:96:c3:23:6e:c4:5f:63:5c:ce:ee:98:95:6e:12:4e:b5:
a0:a2:a7:c6:db:bd:58:c5:3d:82:75:60:1d:de:29:37:2f:96:
9c:33:19:cc:ba:31:d0:c0:1e:fd:98:22:c9:c5:6e:8a:e3:92:
55:b4:e9:5a:22:4f:5d:a6:cc:90:6a:be:ed:b4:c0:45:48:dd:
bc:cd:83:72:a4:9f:24:f8:d5:7d:6b:d2:b3:be:8e:40:f9:b0:
98:0a:d6:81:5e:0b:76:69:09:aa:8f:cf:0b:13:a0:53:44:88:
e9:4b:9f:28:88:a6:9a:3c:ce:25:f2:73:7e:ea:2b:cb:82:2e:
08:ee:9f:af:89:49:e7:18:c2:03:11:ac:0d:45:f5:46:64:43:
4f:e5:83:1c:f3:70:9e:44:4a:92:a0:5e:2c:5e:cb:0c:4a:45:
a2:f8:b1:44:7c:64:20:3d:29:de:a6:66:47:4a:cf:ef:96:2d:
78:c3:ed:43:bc:de:41:f2:2b:1c:7b:e0:ab:e7:8f:e1:86:c1:
a1:ab:95:8b:4d:34:8e:96:17:b8:ee:b1:d9:59:f5:e5:f4:02:
1b:af:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:05:07 2025 by rpki-client