Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/saFbFhTUuPzFfFtMaOygiXjsdjQ.roa
File: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (raw, json)
Hash identifier: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=
Subject key identifier: B1:A1:5B:16:14:D4:B8:FC:C5:7C:5B:4C:68:EC:A0:89:78:EC:76:34
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01942368F5B74A34785F557E422E879B4BE8
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/saFbFhTUuPzFfFtMaOygiXjsdjQ.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61432
IP address blocks: 185.156.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f5:b7:4a:34:78:5f:55:7e:42:2e:87:9b:4b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a15b1614d4b8fcc57c5b4c68eca08978ec7634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:e5:bb:0a:8f:31:07:2f:1a:64:34:19:3d:
49:ed:9b:b0:e0:b3:b9:d4:3c:04:40:a9:94:28:07:
ec:bc:6a:48:a6:88:83:98:91:c4:c4:e2:dc:dd:e7:
ef:68:57:d9:2b:ea:aa:52:d9:b9:6a:c5:e0:12:c7:
7d:6e:f4:f6:7e:94:b3:6a:2a:f9:8d:c4:0f:54:ef:
87:5c:20:6f:ed:b9:0c:53:c7:60:56:40:34:af:da:
b3:c5:bd:f1:86:fd:d1:dc:3f:ed:93:d2:9c:76:14:
09:e2:d1:84:05:26:59:68:df:f2:61:3f:9a:8b:35:
41:f0:80:c6:e2:c5:c3:29:8e:2b:1d:8b:55:5f:f1:
af:60:f8:3f:f2:83:a9:9b:c1:9e:1a:7b:a8:73:e4:
d0:45:ee:5a:60:6f:cd:80:2b:8d:49:25:c5:51:9a:
44:4a:47:00:e6:c3:c0:b2:57:e2:52:5f:f9:27:51:
11:f4:ac:e7:31:d3:68:86:15:c2:53:49:c3:61:71:
6a:00:9d:cb:66:30:eb:90:4e:1b:8b:d3:2b:d1:1d:
0c:54:8a:44:d1:40:dc:9b:16:a6:a1:7b:d8:f4:e5:
18:85:7c:92:67:61:8e:42:ef:4b:b8:a7:9b:e9:fa:
d2:9d:f7:62:4d:54:06:2a:ac:ca:ed:04:c5:ee:b4:
d5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:5B:16:14:D4:B8:FC:C5:7C:5B:4C:68:EC:A0:89:78:EC:76:34
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/saFbFhTUuPzFfFtMaOygiXjsdjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.72.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0c:1d:af:c2:44:41:f1:32:4d:0c:47:cc:6c:11:07:ac:bd:
70:0c:05:a0:6f:05:08:df:5d:c0:dd:31:ce:4a:80:ba:9d:4f:
5d:5e:b9:2e:7d:c0:c9:b9:fc:66:a0:2a:6a:28:65:ba:be:39:
08:c3:e5:68:25:c1:1a:28:c3:7a:f4:d8:ec:7a:15:ed:1c:81:
d0:62:39:9b:d8:04:ea:1c:81:d0:6d:36:25:6c:45:b3:36:39:
c6:95:71:8c:37:b4:69:79:84:cd:a5:40:42:29:8a:e1:df:69:
55:72:1f:bb:27:84:59:a4:d5:11:e9:fd:42:33:e6:d9:df:a2:
b2:93:70:45:57:d1:fd:8b:15:e4:0f:92:29:e8:be:43:28:32:
09:17:bc:4e:37:ae:34:62:e2:9e:d3:c1:5d:80:f0:71:1e:ef:
d0:9c:d1:70:16:87:c8:17:3e:4c:d6:3a:21:dc:eb:4e:e7:bb:
f0:ab:b1:97:33:ee:9b:a3:4e:7a:4c:0d:bf:60:50:f8:aa:e2:
8e:49:f3:cf:3e:ff:73:e0:59:9c:f7:b0:11:e9:83:e8:6b:b5:
70:f8:eb:8e:6e:94:48:17:9a:87:90:d7:1a:e1:da:ac:4f:ea:
86:ee:b2:d6:51:b2:e5:a1:ff:67:f0:83:6e:ab:53:2b:d6:2d:
e3:93:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:14 2025 by rpki-client