Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa
File: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (raw, json)
Hash identifier: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=
Subject key identifier: 57:A8:3D:15:07:F2:F5:D8:11:47:F6:81:50:DA:08:7C:81:1E:4C:95
Certificate issuer: /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial: 019428268025EE457755E704418078F58157
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa
Signing time: Thu 02 Jan 2025 17:53:19 +0000
ROA not before: Thu 02 Jan 2025 17:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 185.29.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:80:25:ee:45:77:55:e7:04:41:80:78:f5:81:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Validity
Not Before: Jan 2 17:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57a83d1507f2f5d81147f68150da087c811e4c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:54:bc:b1:e0:98:41:3d:4c:7d:ab:2e:52:
9d:e5:2e:23:07:e5:29:a5:23:a5:8c:cf:0f:4d:06:
1e:d1:de:fc:18:96:b0:69:65:4b:c4:87:b5:6e:e1:
08:be:b3:90:de:6a:08:7f:30:2f:67:b3:e2:c4:e4:
3b:91:2e:6b:ab:dc:05:b6:3e:6d:99:b2:53:3a:09:
55:50:25:8c:33:71:63:a2:f4:ed:ce:f8:11:d4:ed:
9b:05:92:7e:09:fe:96:8e:e5:2c:0b:84:10:c2:06:
78:53:c8:73:e9:1a:6b:0d:47:10:0b:d4:e3:67:1c:
8c:01:6a:59:46:95:19:11:7b:a9:54:fc:64:7d:01:
91:2f:a2:6a:45:45:5f:8a:2c:85:5e:97:2f:59:5e:
b2:0e:2d:85:87:03:4d:15:7f:dc:ea:dc:c0:d8:2a:
81:b2:12:46:57:51:15:4c:53:f0:b5:22:83:d8:df:
e1:72:33:6a:af:93:61:eb:26:29:e5:1f:cf:68:f4:
ee:9c:1d:86:b1:bd:9a:f1:42:2b:d8:b8:d0:5a:44:
dd:15:f3:7a:c1:47:04:83:8f:86:98:67:7f:a9:a3:
28:de:47:1a:a6:d9:89:2b:ba:ab:2e:6e:78:be:bc:
e2:5b:a3:85:ce:d1:13:b9:49:5e:91:73:f6:b8:a8:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:3D:15:07:F2:F5:D8:11:47:F6:81:50:DA:08:7C:81:1E:4C:95
X509v3 Authority Key Identifier:
keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:80:01:6f:74:50:4d:bf:6a:4b:92:83:99:f1:a8:44:ed:59:
28:ca:57:9f:2b:14:0c:9c:69:d2:da:db:25:e6:f2:8e:77:3f:
1f:d9:b0:10:55:fb:5f:4f:0b:82:1e:4d:23:3b:f4:23:a0:a0:
d7:d2:b5:05:20:46:1e:74:5c:7d:c9:d4:cc:17:ab:65:02:6e:
15:22:30:16:a9:4a:3e:c5:32:3a:a7:fa:82:07:79:98:45:b5:
9c:ae:36:22:5e:b8:b6:0d:08:97:9e:11:52:9b:39:94:40:b2:
ab:d2:c3:35:1d:93:0d:57:21:2c:8f:d1:fd:7b:b5:3c:d2:93:
dd:5f:91:03:07:da:fd:7d:91:62:54:5e:5c:c0:a8:27:b9:cf:
a8:00:b2:46:c3:53:cb:2e:99:1d:51:3d:5a:34:52:91:1d:91:
5f:bd:1b:e1:63:b0:40:47:fa:ec:f9:55:ac:aa:f9:42:57:ec:
2c:18:77:f5:34:39:71:18:64:9c:ed:ec:b4:fe:3f:6b:ca:85:
b6:14:9f:67:9e:99:87:bf:04:91:dc:df:58:c1:23:f5:64:c1:
74:e5:45:26:77:4a:11:a0:c5:30:41:e5:b5:4e:bc:2a:be:67:
dd:ea:9e:13:a3:e6:7a:19:f2:d7:3f:e1:75:07:dd:b5:00:93:
0e:fb:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:55:05 2025 by rpki-client