Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/J5AX7Ye4ZjtlJFShqhgdOlDreek.roa
File: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (raw, json)
Hash identifier: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=
Subject key identifier: 27:90:17:ED:87:B8:66:3B:65:24:54:A1:AA:18:1D:3A:50:EB:79:E9
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 01941FF9FF3B212B73597B499ACB3F74DE0D
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/J5AX7Ye4ZjtlJFShqhgdOlDreek.roa
Signing time: Wed 01 Jan 2025 03:47:44 +0000
ROA not before: Wed 01 Jan 2025 03:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.180.80.0/22 maxlen: 22
185.180.80.0/24 maxlen: 24
185.180.81.0/24 maxlen: 24
185.180.82.0/24 maxlen: 24
185.180.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:ff:3b:21:2b:73:59:7b:49:9a:cb:3f:74:de:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: Jan 1 03:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279017ed87b8663b652454a1aa181d3a50eb79e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:1a:4f:b8:8c:b1:61:42:47:7f:08:b1:84:
60:cd:b5:40:74:ce:ed:f9:c3:09:59:1b:d0:ca:91:
6f:19:20:3e:ce:2e:d5:3b:c9:08:fb:a5:00:10:5f:
16:1c:4b:dc:05:63:25:8f:f4:00:59:65:f3:e4:01:
3b:cc:04:7f:f2:d6:a6:11:75:e6:69:3d:89:26:f8:
45:ed:13:f3:cb:5e:63:af:52:65:0f:c4:d9:04:81:
5f:66:5c:3c:3a:b6:d7:41:c0:8c:56:fd:92:5f:ea:
dd:fc:a4:7a:10:92:1d:a8:09:ff:33:6c:d8:ab:12:
b5:e9:f7:0d:b9:86:cd:01:37:b3:2a:ac:a7:06:7b:
88:90:d8:fb:17:d4:1d:6f:57:31:41:4e:50:c2:bd:
5d:71:25:6c:95:cd:a3:bd:2b:ed:f6:8c:c3:6f:5a:
bc:63:e1:6e:86:a2:17:0a:28:25:17:e7:2a:39:e2:
5b:e2:32:c9:dd:f1:c0:d9:3e:27:ea:4c:f4:fb:a9:
6b:65:59:44:fb:b0:c2:f0:60:ae:1a:aa:82:fc:b4:
14:12:1b:b8:e5:5e:22:0d:e9:55:10:96:bc:6b:7f:
45:40:bb:ce:19:d7:1a:2d:66:83:7d:cd:74:9a:94:
d8:4f:05:11:8f:d3:79:16:33:48:f3:37:9c:cf:26:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:90:17:ED:87:B8:66:3B:65:24:54:A1:AA:18:1D:3A:50:EB:79:E9
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/J5AX7Ye4ZjtlJFShqhgdOlDreek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.80.0/22
Signature Algorithm: sha256WithRSAEncryption
56:7a:09:81:7e:84:ae:21:e8:57:fa:73:b1:f0:10:0b:94:e2:
31:96:16:90:b0:36:20:ed:9a:07:c0:62:3b:5c:19:fd:6c:76:
c3:34:8b:bc:eb:e6:0a:31:27:32:0f:8b:14:1b:ef:d4:d4:88:
88:c3:d3:bb:90:d9:76:a2:d5:6b:66:0c:a3:c0:e0:69:2c:9b:
b4:bb:bb:df:a2:8a:ec:ec:d8:27:36:ce:0e:21:a3:8c:e4:a7:
b6:96:5f:b1:a3:0a:d4:09:6b:18:24:67:46:e8:68:9f:09:b3:
62:6c:00:7d:22:27:e2:fd:e8:88:fc:13:18:a2:cc:84:9b:af:
02:fa:e4:b9:05:80:85:97:0e:24:81:af:ea:0b:4d:d1:c7:8d:
6b:04:86:ea:70:5a:62:8b:99:16:42:87:49:7a:67:02:17:49:
d4:65:c9:d8:fc:6c:9c:21:fa:08:7e:d8:c6:7b:c7:28:10:78:
11:0e:b9:aa:ea:5d:14:36:6e:ca:5a:a3:83:fe:94:48:1f:8c:
3f:8d:51:64:af:07:b1:b1:dd:0b:46:97:22:b5:41:44:27:6a:
33:be:6a:70:3e:e7:32:0a:5f:ae:be:2b:65:9a:f4:c7:1c:e5:
28:6f:d3:c9:6a:7c:e7:9a:5d:27:a1:68:a0:34:01:f5:d9:41:
3b:ef:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:52:09 2025 by rpki-client