Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa
File: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (raw, json)
Hash identifier: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=
Subject key identifier: 8C:18:2F:D7:B3:E5:F9:58:7F:2F:53:C5:DC:A9:81:F2:42:36:6D:A9
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0194228DEB771313B2ADD95BDEC2AAD25736
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 185.194.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:eb:77:13:13:b2:ad:d9:5b:de:c2:aa:d2:57:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c182fd7b3e5f9587f2f53c5dca981f242366da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:80:05:ff:c9:47:f9:7b:3a:d5:46:14:15:
ec:7b:ad:04:4b:8d:d9:93:c0:90:d3:e3:50:e7:69:
2b:01:09:ad:47:02:b0:4b:59:43:25:6f:d5:ac:37:
be:1a:6a:b3:cf:18:34:c4:62:55:35:2f:4a:70:ba:
80:d7:2f:05:64:1a:8c:74:de:62:b8:57:63:a3:6e:
b4:d8:ef:aa:82:c8:80:36:70:5d:3a:f7:a1:37:18:
ad:fd:da:01:87:90:05:e4:1b:f2:1a:d2:44:2f:b1:
b4:a7:3e:81:c2:60:75:9d:7c:91:1d:64:67:3b:ee:
a0:e4:3b:d0:78:57:04:68:5c:5b:3c:45:08:b7:53:
3b:ef:87:c1:df:49:dc:9b:ed:aa:74:12:4b:5c:8b:
38:9f:9b:9d:04:80:91:79:3c:b6:bf:c9:c9:c2:f5:
8f:63:94:16:25:95:ea:5c:a1:4f:d7:0e:f1:4b:bf:
ec:89:33:64:32:cd:ed:ab:6b:95:28:06:3b:65:b9:
46:20:e6:4f:4e:ad:c6:f5:f6:c5:a3:8d:76:5c:ac:
73:c8:bc:68:ff:c1:a9:db:b2:aa:28:3b:1a:44:d8:
76:5f:08:de:ff:4e:19:b6:76:b6:1b:55:17:eb:2c:
7b:ed:c5:23:cc:9f:fb:5e:a8:39:65:0c:09:99:1e:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:2F:D7:B3:E5:F9:58:7F:2F:53:C5:DC:A9:81:F2:42:36:6D:A9
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:39:81:73:cf:75:79:19:c8:31:74:99:92:27:95:dd:04:bd:
e7:5b:31:df:c1:56:58:fe:4a:d2:82:a6:4c:bb:32:d6:bc:7f:
5d:cc:4d:a0:07:28:c9:e1:2b:49:a6:58:8d:c5:7a:df:62:3f:
93:c7:65:a2:07:4e:f8:66:cc:0d:46:ff:a6:70:0e:38:f0:4e:
5d:5d:a9:68:a6:d5:30:6b:aa:b4:93:7b:c3:f7:d6:74:df:5c:
b1:b5:91:29:9f:85:be:a9:3f:06:4a:18:6c:91:d1:66:98:7f:
a3:29:4e:a8:c3:11:ef:7d:38:5c:dd:3f:cf:6b:2d:c8:ae:9d:
d6:ef:b4:12:11:9b:b1:86:2b:4d:92:b3:ca:01:d4:07:f2:3c:
b6:ff:27:f9:d7:8a:dd:ba:b4:c0:9e:a9:36:57:c6:7e:a2:d9:
11:d8:c9:23:82:15:86:c9:a1:2f:7f:99:72:46:ce:c5:9a:72:
6b:34:e2:3b:1d:5b:91:a3:ac:88:21:61:4f:7b:dd:af:5c:b6:
b5:61:8c:62:83:91:78:80:02:46:97:95:04:8e:09:72:52:cb:
ac:dd:55:94:11:cf:5c:83:dc:72:92:4f:20:b1:cf:1b:d8:9e:
4d:58:bf:ac:db:d0:60:05:35:34:a2:0b:9f:fb:a4:52:53:83:
ae:57:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:34 2025 by rpki-client