Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa
File: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (raw, json)
Hash identifier: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=
Subject key identifier: 8A:9C:98:30:CA:56:1F:44:E3:83:D3:0C:71:67:31:0D:55:C1:84:32
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019424B3FA82D0FC22726EE2A7802F75647C
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215415
IP address blocks: 185.229.240.0/24 maxlen: 24
185.229.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fa:82:d0:fc:22:72:6e:e2:a7:80:2f:75:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a9c9830ca561f44e383d30c7167310d55c18432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:ef:83:2f:de:94:44:6f:be:32:c0:61:97:
b3:6e:bf:07:43:9b:26:6d:de:dc:17:0f:36:f7:ae:
8e:ab:9a:3f:ff:6a:35:a1:56:c5:b4:7f:88:7c:27:
ad:84:5c:c5:0f:af:cf:15:96:8f:dc:8a:cb:30:cd:
6b:46:c4:8e:10:0f:b2:c3:75:bb:a0:4a:a9:b2:e1:
95:55:50:38:d8:58:2b:cb:d7:fa:54:04:a3:36:6e:
66:3c:22:cc:9e:13:4e:64:8b:c3:d0:cb:1c:3b:32:
43:12:3c:77:bc:0a:b5:14:5a:66:b7:fa:06:13:bd:
f2:dc:88:1b:25:3a:9d:b1:13:56:d8:38:66:59:dd:
9f:36:64:46:69:28:23:38:5e:a8:b7:cc:7a:5d:bb:
de:6b:65:35:ac:48:74:90:cb:bd:9c:51:37:1b:08:
40:f8:4f:13:6d:92:c4:6e:80:ef:5e:91:2d:8b:fa:
fb:be:a4:f0:f6:41:f0:d6:32:c2:be:40:df:bf:42:
2a:68:1d:f1:c9:be:cd:d1:39:da:eb:f7:4b:c2:2a:
b8:b8:cc:67:49:43:56:66:9b:ed:f5:ac:2b:ab:c0:
08:3e:21:49:b7:54:da:77:cf:3f:07:ef:59:2d:95:
48:6d:a5:1d:82:43:02:87:cd:1a:ef:33:d8:ca:4c:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:98:30:CA:56:1F:44:E3:83:D3:0C:71:67:31:0D:55:C1:84:32
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
77:35:b7:d8:fc:a0:fd:a1:0b:8e:57:e5:42:aa:31:7f:fe:9d:
40:43:73:00:85:e8:11:9b:92:aa:f4:29:68:1e:d4:6b:f9:14:
f9:e6:8e:5f:de:cb:8a:d4:f0:30:14:49:64:75:70:bf:19:36:
97:eb:c2:9f:54:f1:af:0e:67:ba:03:95:21:09:cd:db:21:4a:
fe:b9:db:d4:a7:82:25:76:af:c3:95:4d:9f:d3:47:2c:84:e1:
09:b8:33:d1:1c:75:dc:96:f0:48:0c:0c:77:86:db:5f:c8:eb:
fc:6d:79:1d:63:61:fe:cd:a7:c6:9a:45:fd:83:10:74:a1:f3:
5b:20:3c:37:3e:14:8f:0d:3b:64:c2:f4:a2:80:f4:56:dd:a0:
75:82:a3:ac:2f:84:e4:78:0f:27:c3:12:41:7a:f8:20:5e:d8:
1a:c4:58:18:78:1e:9e:8f:d0:79:b0:ce:bd:96:34:45:b7:e9:
d2:05:9f:27:3c:27:6d:41:88:f7:13:9d:26:d9:51:10:0c:71:
49:93:21:1c:a5:c3:28:37:02:f2:1e:33:70:16:17:a3:db:c5:
b7:3c:7d:34:5e:eb:86:7c:d2:ad:2e:46:02:f3:1d:5d:f0:4d:
49:fc:58:20:cb:a5:92:25:fd:66:b1:e5:bd:41:d9:4d:a2:69:
9d:16:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:28 2025 by rpki-client