Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/IyMj_GgdqYfdqdX928jtCKAmPjs.roa
File: IyMj_GgdqYfdqdX928jtCKAmPjs.roa (raw, json)
Hash identifier: kUwftms8VyuATJuEC4wOr9dtfJWaE40ItFucwi9PLeA=
Subject key identifier: 23:23:23:FC:68:1D:A9:87:DD:A9:D5:FD:DB:C8:ED:08:A0:26:3E:3B
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 01972FF1A418BEF1C3B9E5B8CDE81BE130FB
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/IyMj_GgdqYfdqdX928jtCKAmPjs.roa
Signing time: Mon 02 Jun 2025 09:20:54 +0000
ROA not before: Mon 02 Jun 2025 09:20:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6205
IP address blocks: 185.23.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:f1:a4:18:be:f1:c3:b9:e5:b8:cd:e8:1b:e1:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: Jun 2 09:20:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=232323fc681da987dda9d5fddbc8ed08a0263e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:58:fc:10:44:c5:d3:54:6b:c8:04:5d:5f:
35:7c:44:38:97:c9:8a:57:a5:0c:fc:85:91:9e:10:
47:1f:26:49:f4:9b:00:41:5d:2e:72:19:00:d5:1c:
8b:74:5b:1a:5e:10:a3:9b:40:6a:18:ee:4d:27:e4:
f7:aa:8e:ee:59:e8:ba:0e:40:eb:33:d3:95:52:6d:
a5:da:04:0b:7e:7e:7f:f3:01:14:00:7f:25:cf:7e:
b5:f5:e3:88:a4:3e:bd:4b:2e:39:7a:32:54:cc:26:
97:9b:7c:1f:e6:b8:96:71:63:26:d3:00:46:4d:8f:
ce:b5:78:9f:29:bd:44:a4:69:b2:88:9a:04:5f:62:
33:9c:8c:f0:b2:93:63:aa:7a:45:e2:77:86:a2:07:
67:a4:d9:8c:7e:73:4a:a4:16:98:ec:a4:41:8e:55:
fa:d1:c3:18:ce:4e:ee:53:85:08:0a:95:19:00:ea:
40:25:18:32:97:61:75:f2:de:e3:ff:d0:d9:cd:2a:
85:a7:d7:31:9a:a6:10:8b:6f:66:17:2c:4e:be:9d:
1e:c0:6d:3b:7c:db:04:b2:a9:4c:89:da:96:b9:37:
6f:d2:cf:e3:4b:c5:bf:89:6a:f3:a9:ff:62:fa:fa:
ca:89:73:22:88:54:1a:1e:fe:70:a7:e3:2b:9f:6b:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:23:FC:68:1D:A9:87:DD:A9:D5:FD:DB:C8:ED:08:A0:26:3E:3B
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/IyMj_GgdqYfdqdX928jtCKAmPjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:63:c6:b2:2f:59:d0:fb:b2:72:e4:d7:6d:e6:e0:4d:b8:8f:
60:af:82:0c:0a:1e:fa:84:14:05:28:18:52:49:10:02:8e:9a:
37:27:c7:63:79:10:81:2b:de:03:1f:ce:fc:b5:03:4a:d4:19:
b0:1f:7d:0c:2b:8d:ce:1a:b7:77:02:4b:13:60:2c:a7:ee:fc:
81:59:f3:31:e9:15:70:0f:7a:76:19:90:73:b4:1d:94:c5:33:
8e:20:b1:b8:fc:46:b6:5a:74:9e:75:64:86:33:84:16:6f:a0:
88:8a:61:12:52:56:d6:8a:db:9c:d9:81:db:00:6a:af:18:78:
95:db:ea:76:b6:13:36:48:68:55:0c:68:d8:04:cc:e4:8a:07:
09:ea:9d:f4:ab:51:9f:62:2d:8d:19:1f:5d:68:17:1e:54:0f:
ed:cb:6d:f7:44:f5:40:e5:65:4c:3a:60:04:40:c9:01:61:b1:
0b:55:e9:cb:2c:ad:a2:00:f7:c0:5b:38:47:9f:4e:2d:3b:43:
25:13:38:47:ec:1e:77:41:90:ef:57:f7:3c:5e:6f:98:dd:5b:
9d:8a:26:c0:df:f2:6b:52:b7:52:45:0e:b1:0a:ad:01:3c:c2:
83:ce:80:d7:ea:c0:6a:ac:a3:47:e7:2a:5f:e3:38:c0:ad:eb:
4c:9e:dd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:36 2025 by rpki-client