Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/AGmA39KwwTaMo71xV9rDHmreSZs.roa
File: AGmA39KwwTaMo71xV9rDHmreSZs.roa (raw, json)
Hash identifier: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=
Subject key identifier: 00:69:80:DF:D2:B0:C1:36:8C:A3:BD:71:57:DA:C3:1E:6A:DE:49:9B
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCDEA0E23D0CB25B203F0AE40C3037
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/AGmA39KwwTaMo71xV9rDHmreSZs.roa
Signing time: Thu 02 Jan 2025 07:48:36 +0000
ROA not before: Thu 02 Jan 2025 07:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20016
IP address blocks: 185.161.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:de:a0:e2:3d:0c:b2:5b:20:3f:0a:e4:0c:30:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=006980dfd2b0c1368ca3bd7157dac31e6ade499b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:34:30:7a:e2:9a:69:fe:07:ea:67:f2:8f:
d1:8f:cc:61:a1:fe:de:f1:67:0c:de:bc:ae:6c:20:
2a:d4:81:9d:f8:9d:41:6d:c0:b5:4b:93:88:88:66:
40:35:94:ba:75:93:eb:08:41:45:c1:b9:38:98:fe:
e3:a2:b6:2c:24:3c:70:ec:f5:99:07:f8:60:af:89:
7b:c2:a5:22:ea:0f:85:17:cf:c3:7c:eb:07:91:31:
8d:b7:31:42:4a:16:ae:44:09:b4:94:0c:da:10:c7:
8e:f8:d6:13:4f:41:8a:ac:28:f2:1d:e0:ed:86:94:
21:2b:b5:7c:69:6d:5c:af:53:3c:1f:6f:e0:34:0e:
da:7e:79:c4:dc:08:55:2e:84:2f:7a:2a:06:ba:71:
bf:dd:d8:ef:73:ea:78:64:51:d5:7e:e0:8e:4d:d7:
ee:d8:23:d6:04:18:57:67:35:cb:eb:5e:d1:4d:5e:
e5:59:1e:2d:de:d7:5c:1d:7e:fe:06:cd:94:93:96:
a7:44:43:93:33:95:6c:88:85:2c:7c:44:4a:c4:ca:
a4:ce:df:18:42:24:32:b9:45:5e:3f:7c:da:ea:4e:
b4:b8:78:f3:18:8a:36:97:0d:7e:05:96:87:7c:19:
a4:84:4d:7e:58:d7:3e:65:2b:b5:6e:9e:7f:bf:4f:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:80:DF:D2:B0:C1:36:8C:A3:BD:71:57:DA:C3:1E:6A:DE:49:9B
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/AGmA39KwwTaMo71xV9rDHmreSZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.189.0/24
Signature Algorithm: sha256WithRSAEncryption
24:83:31:2b:b7:b9:02:1a:79:11:cf:0d:5e:53:7d:5d:8b:ff:
8e:71:22:a2:cc:73:ca:cc:28:65:28:19:a2:ab:40:d0:42:e5:
6c:e6:26:74:10:d7:8e:9f:9d:b7:bf:19:0e:99:c4:76:50:57:
c8:d1:5f:9b:bf:7b:85:e8:af:40:89:e6:92:ac:4f:e9:07:30:
8a:71:6c:fb:79:9a:e2:a1:9f:16:3a:28:18:cf:a9:58:9f:78:
15:e0:74:4d:00:5f:28:b6:0d:b6:87:9a:c5:62:45:d9:d7:85:
9b:94:86:b5:8b:a8:b4:5c:c7:5c:71:7f:ef:77:ae:ae:d9:6c:
e7:9c:22:14:59:2d:c2:13:8d:be:da:74:80:7c:c7:34:29:d0:
23:a2:e8:99:14:4c:44:bd:0a:ec:4f:a0:4d:d9:a0:e1:2c:19:
b4:54:68:ed:3b:10:65:ad:c1:43:7d:8a:c9:65:9f:9c:52:2d:
f5:29:04:f3:17:f4:bd:fa:0e:66:1f:18:74:20:3b:22:e5:05:
f2:4b:06:10:46:9f:ba:ae:62:57:d6:27:d7:cb:46:ba:7b:d7:
70:a1:19:f9:d6:ec:d7:18:49:10:2a:6e:c5:c7:07:6e:c1:02:
47:55:af:59:56:c1:bd:1d:ab:0d:cf:53:93:57:46:84:38:18:
4b:e0:bf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:50:50 2025 by rpki-client