Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa
File: gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa (raw, json)
Hash identifier: oFJ3MXVl1iMSZ8pMJXy4ddvnZMU6K7cXSyKqIdFC6UI=
Subject key identifier: 83:2B:0C:27:C3:91:F2:6A:3B:AD:8E:56:B9:98:C4:C9:99:BD:9B:74
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019423D6B5CE9EDA8126AA3D3E0F612D8E50
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa
Signing time: Wed 01 Jan 2025 21:47:41 +0000
ROA not before: Wed 01 Jan 2025 21:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137443
IP address blocks: 185.243.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b5:ce:9e:da:81:26:aa:3d:3e:0f:61:2d:8e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Jan 1 21:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=832b0c27c391f26a3bad8e56b998c4c999bd9b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:a4:39:d6:ba:4d:de:e6:82:56:bd:c1:91:
fe:2d:30:ce:11:98:c8:0a:31:f8:ff:68:26:0e:aa:
5e:a7:45:3d:bb:f4:d0:60:0d:62:cb:2e:77:37:31:
75:2e:25:31:33:f5:64:fb:5d:5c:3f:8c:af:a9:b3:
9f:fd:aa:d5:f3:62:e7:7d:c9:50:54:7b:16:c1:f6:
bd:13:61:58:73:be:cd:09:63:58:80:e0:a6:d1:d0:
5f:c6:6a:2f:6a:a4:b6:60:a1:e7:ee:86:ab:62:61:
55:39:bb:ae:a8:44:46:39:04:fa:5e:26:93:e9:fa:
5a:dd:dc:9f:00:9b:f0:b3:3d:ec:f8:06:8a:45:93:
be:23:93:f8:9d:c5:8f:bc:71:eb:d5:1f:6d:f3:d5:
47:cd:9b:17:92:fb:b0:64:1e:9b:f0:33:8c:7c:22:
ac:36:8b:d3:51:aa:4e:c5:48:41:fc:fb:e6:33:db:
04:67:de:e2:5e:07:dc:ff:14:e0:c5:40:fb:be:50:
6d:a6:2c:9d:73:7b:cf:0c:23:c4:fb:cd:23:8e:dd:
a9:a7:d5:95:b8:fa:a1:75:8b:2f:d8:09:89:71:fa:
e9:0f:34:f7:56:a3:47:3a:38:6f:19:43:f1:d1:08:
18:87:8f:d7:5a:26:a3:60:26:26:b1:5a:85:62:f0:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2B:0C:27:C3:91:F2:6A:3B:AD:8E:56:B9:98:C4:C9:99:BD:9B:74
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/gysMJ8OR8mo7rY5WuZjEyZm9m3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5e:91:d5:c8:e7:12:11:f3:bc:0f:c5:3c:7b:9f:00:6c:f8:
dc:bf:f7:05:28:e8:0e:9f:02:24:36:28:64:9d:d4:d2:8b:cc:
00:f9:31:0b:c1:50:7a:76:34:f7:be:5c:21:95:48:0d:1d:a2:
cd:28:91:de:6b:d0:10:dc:f5:29:1f:e2:9a:b2:91:5d:56:9a:
02:e0:5a:28:52:c6:a8:93:7a:95:91:c0:b6:72:25:73:75:2b:
93:3b:89:f5:b2:25:de:3f:13:55:8d:6a:81:34:bc:16:d5:e7:
26:69:15:a0:90:1a:db:79:63:68:66:54:19:18:44:eb:16:98:
47:28:97:01:b2:b4:4f:8a:81:38:fa:6a:6d:84:80:80:d6:9a:
53:64:7f:21:d3:58:c0:53:0d:97:1a:e1:58:60:8c:80:ff:8e:
05:19:ff:b9:1a:53:af:34:85:95:04:64:df:b1:74:be:ca:8e:
3a:ed:e2:9d:80:44:c5:5d:f5:4b:10:8a:44:e2:77:e4:10:18:
4d:ae:a2:e8:35:77:43:6b:c0:cd:5e:09:26:7a:99:76:e9:2a:
7c:89:96:b6:d9:ec:21:5b:0a:bf:07:16:bb:e3:12:a5:4f:b6:
d0:34:73:3f:a4:c4:73:be:f5:8b:f5:03:0e:15:f0:e6:8f:d0:
14:93:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:17:05 2025 by rpki-client