Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/sauoJPH8ZCzsvjvGozwJzjKKcxA.roa
File: sauoJPH8ZCzsvjvGozwJzjKKcxA.roa (raw, json)
Hash identifier: B9f46JTfl/pBuc2yfO6KIqonaBN9SLGFTMzKnpf4wu0=
Subject key identifier: B1:AB:A8:24:F1:FC:64:2C:EC:BE:3B:C6:A3:3C:09:CE:32:8A:73:10
Certificate issuer: /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial: 019421B1F0D31EAF7EF749285E68C80C2F27
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/sauoJPH8ZCzsvjvGozwJzjKKcxA.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.222.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f0:d3:1e:af:7e:f7:49:28:5e:68:c8:0c:2f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1aba824f1fc642cecbe3bc6a33c09ce328a7310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:2c:c6:34:76:36:76:c9:71:5b:7c:97:c2:
60:d5:8f:3d:48:25:62:b2:4f:84:11:85:19:e8:aa:
c1:30:97:42:9a:bf:d6:72:48:89:61:19:b1:74:52:
0d:35:b0:9a:97:bf:d1:cd:06:c5:f4:3b:40:fb:ee:
1a:21:15:d3:8b:57:85:1d:3e:3b:6c:51:e3:9d:3d:
bc:1f:70:10:b9:74:5a:33:05:0a:dc:62:1e:23:00:
38:de:e4:ba:40:79:89:c3:ff:0d:27:de:c9:9f:c3:
84:ca:34:0b:a3:8d:09:a5:17:fa:99:eb:2f:6f:d3:
d7:8e:15:bc:ff:70:3a:59:f3:8c:d8:2b:45:72:c9:
35:ea:9a:f1:81:7e:81:16:61:81:b3:a0:0f:8e:e0:
ec:cd:47:57:94:68:95:42:80:f0:44:77:9c:b0:ee:
e3:79:7e:f1:35:d9:77:fd:e5:85:56:06:5a:99:13:
ea:06:33:0c:79:01:d9:9f:29:b5:90:fd:c5:34:4b:
42:6d:e5:ab:4c:6d:64:1c:d9:2b:e1:bf:e6:59:4b:
60:55:e5:7b:8a:0b:aa:43:05:59:8e:7d:a6:ac:fd:
63:b5:3e:ac:15:af:61:08:98:a7:c3:04:8a:a4:db:
77:d5:47:4c:ee:55:af:40:8a:fb:e0:02:1a:b9:94:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:A8:24:F1:FC:64:2C:EC:BE:3B:C6:A3:3C:09:CE:32:8A:73:10
X509v3 Authority Key Identifier:
keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/sauoJPH8ZCzsvjvGozwJzjKKcxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.79.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:8c:75:2f:27:40:1e:c7:af:59:22:3a:87:32:8c:47:88:32:
d9:e4:e5:a0:7d:63:3b:66:e6:9c:33:03:37:29:bc:98:49:ee:
aa:58:b0:c8:f7:bb:15:84:36:a5:44:ef:cb:2d:5a:84:27:31:
fa:ab:ef:9f:2b:5d:07:dc:c6:80:45:cf:27:cb:3a:4d:5a:12:
c6:bd:f0:a7:0b:e1:73:c3:a3:ec:5a:2d:e7:e3:83:84:74:30:
ca:6c:e8:bb:01:06:53:12:e5:27:0c:68:1c:b8:4c:cc:7c:ff:
43:25:f6:5d:e6:ee:10:d3:29:c6:5e:9e:d7:19:7c:41:1a:c2:
27:5b:81:7d:3b:d3:b8:6b:67:3d:1f:e4:38:9e:bd:af:d1:af:
e1:81:d1:58:41:be:4b:a5:08:6d:93:07:99:8a:2e:19:5f:18:
d5:ce:01:f5:1f:12:bd:67:10:b7:4e:d4:bc:62:59:ef:04:c3:
da:e7:9d:ad:f6:bc:9e:69:b5:11:bc:d8:d1:1d:a8:12:79:2b:
25:22:53:75:5e:3b:ef:bd:08:12:7a:94:43:d1:57:90:c6:da:
ba:98:92:12:63:d8:0c:e3:92:40:a1:87:75:29:57:7a:cd:3e:
7c:9f:3f:a3:9e:4b:7e:b7:d7:a9:b0:b7:dc:08:b4:78:c0:10:
73:15:f5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:48 2025 by rpki-client