Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/cTTyZG3sGYW4--iA37L_e4KKCac.roa
File: cTTyZG3sGYW4--iA37L_e4KKCac.roa (raw, json)
Hash identifier: jAHavpEeqSxn7Wz6qgij8QBMxDH2bPHO8CwBbW3Q6eI=
Subject key identifier: 71:34:F2:64:6D:EC:19:85:B8:FB:E8:80:DF:B2:FF:7B:82:8A:09:A7
Certificate issuer: /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial: 01942368CCA35271575EF5977A1D8A3734D6
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/cTTyZG3sGYW4--iA37L_e4KKCac.roa
Signing time: Wed 01 Jan 2025 19:47:38 +0000
ROA not before: Wed 01 Jan 2025 19:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2386
IP address blocks: 185.76.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:cc:a3:52:71:57:5e:f5:97:7a:1d:8a:37:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
Validity
Not Before: Jan 1 19:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7134f2646dec1985b8fbe880dfb2ff7b828a09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:a6:d1:ab:0f:db:0d:a3:1a:c4:ad:4d:cf:
44:1f:17:1d:94:aa:76:56:eb:1d:22:4e:76:a6:51:
90:fa:ad:7d:c0:bf:41:a6:a6:ea:37:73:4e:90:17:
d6:0f:85:74:ad:ac:f1:53:9e:44:5a:78:91:de:a2:
87:f4:2b:11:7d:a4:fd:fd:14:82:bf:62:c1:df:ad:
04:c0:c7:70:06:4b:8b:1a:5d:7f:90:2b:b2:a1:47:
59:b9:95:de:5b:58:58:13:b5:13:18:ca:60:31:cc:
65:06:46:5b:2a:f5:e2:6d:b5:c5:4b:9b:ad:1b:90:
9d:0a:a7:c7:34:d6:a4:b5:04:0d:bf:58:21:9c:19:
47:0d:06:50:98:cf:0b:e1:a8:05:41:4b:9a:86:98:
72:7a:73:7b:4c:77:88:6f:52:bb:cd:46:b1:22:32:
bc:9c:87:a4:f4:0b:da:c9:07:13:27:31:40:b9:29:
8f:a1:fa:28:b2:78:d5:84:09:bb:b1:38:ec:0d:e6:
f9:a2:5d:c0:cd:c0:2f:26:50:f1:6f:6f:78:4c:5e:
8c:a6:53:e1:6c:0e:31:0e:ac:db:29:3b:81:d7:7b:
e4:56:6b:0c:0d:e4:e3:fb:02:dc:65:09:b9:45:33:
65:9d:0d:41:7e:68:c9:33:8c:47:06:96:9a:08:63:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:34:F2:64:6D:EC:19:85:B8:FB:E8:80:DF:B2:FF:7B:82:8A:09:A7
X509v3 Authority Key Identifier:
keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/cTTyZG3sGYW4--iA37L_e4KKCac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.181.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a3:a5:27:7d:3f:1f:53:98:93:46:b6:08:ab:d7:bd:ca:80:
b2:7b:74:f7:7f:04:49:95:97:38:a3:a6:cd:84:13:d9:4a:db:
74:d2:2c:72:d8:c0:32:b2:86:a7:d7:7a:5a:c4:77:ac:3e:67:
14:c8:74:4e:b6:ec:b0:00:09:15:b1:10:5c:f5:93:2b:9b:bc:
68:96:01:b0:53:d6:8e:b3:b9:86:af:36:99:d1:82:c7:b4:62:
78:ed:ce:0e:1b:6e:6d:5d:c7:14:82:85:2d:64:ee:de:d4:4d:
3d:a0:be:1b:fe:f4:28:7c:e0:6b:13:eb:60:b2:d4:7f:37:16:
7f:3f:b4:70:1d:0a:4c:99:a0:e7:1c:43:4a:49:94:d8:33:92:
2f:da:65:61:68:c6:3a:a9:34:aa:be:9a:19:32:c0:2a:4c:3f:
ac:41:10:c5:c0:ed:f5:1c:c7:ba:2b:9f:b1:0b:02:e9:7c:2a:
6b:53:86:43:fa:b5:24:cb:72:a8:c2:ae:a9:ca:2b:c4:ce:0e:
d9:cc:ee:19:68:95:41:fa:7c:69:d8:f0:ed:98:b2:44:7c:2d:
3d:46:9a:cb:d5:c1:cb:0f:85:00:67:56:bc:3b:a2:1d:d3:ae:
51:43:3a:a2:7c:3e:17:73:67:11:e2:8a:2c:e1:55:5a:55:32:
06:11:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:58 2025 by rpki-client