Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-Xbo4QYaqi0KKePtVfC1Gu0obSk.roa
File: 1-Xbo4QYaqi0KKePtVfC1Gu0obSk.roa (raw, json)
Hash identifier: +IuHcOoQgvE0DB6rlGPPGThIQqopeZAdD6U1HCm590E=
Subject key identifier: F9:76:E8:E1:06:1A:AA:2D:0A:29:E3:ED:55:F0:B5:1A:ED:28:6D:29
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A407554830479440AE0EC4F9ECCC2
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-Xbo4QYaqi0KKePtVfC1Gu0obSk.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44541
IP address blocks: 185.142.142.0/24 maxlen: 32
2a06:7a06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:40:75:54:83:04:79:44:0a:e0:ec:4f:9e:cc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f976e8e1061aaa2d0a29e3ed55f0b51aed286d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:1b:73:a8:f0:b3:0c:c5:87:1e:ff:13:4c:
7f:81:43:f9:b2:83:7c:d1:0a:e2:7a:0f:7f:2f:29:
26:39:fe:cd:de:21:fe:1f:38:d6:00:d1:c0:51:0d:
54:01:d7:cb:5f:48:37:4b:47:33:88:53:12:8f:6b:
4c:35:fb:79:37:68:c9:b1:92:a8:81:aa:cd:e5:19:
44:51:a7:bc:4f:db:6f:46:9b:7b:df:27:77:16:f9:
5c:d4:e3:a6:bc:6e:25:9c:d8:1e:b6:2d:72:9b:6b:
0c:84:22:46:66:c2:fe:d1:ac:23:7d:ed:04:fe:47:
c7:82:32:8a:f9:aa:ff:a2:e2:cb:ca:24:ee:79:af:
5e:92:46:d2:b1:04:d4:13:77:9e:e9:c5:67:7e:2d:
92:80:58:2d:9b:7d:d9:e4:f5:e2:24:92:9e:fd:bf:
63:f2:06:1e:a0:6a:cb:b8:ca:b7:ef:52:ba:61:06:
8d:f7:4c:1a:14:0d:fa:2d:ca:5f:fc:73:01:92:b9:
dc:dc:1f:bc:d7:f0:49:1f:c3:75:eb:4b:fc:05:d8:
a4:1b:95:18:ad:61:c2:93:70:22:83:d2:b9:50:b2:
e5:25:f3:3c:7b:e5:67:ea:8b:2e:50:57:30:2f:4f:
cb:6e:3a:bf:ed:52:5b:5c:a5:da:8d:d6:b7:07:95:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:E8:E1:06:1A:AA:2D:0A:29:E3:ED:55:F0:B5:1A:ED:28:6D:29
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-Xbo4QYaqi0KKePtVfC1Gu0obSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.142.0/24
IPv6:
2a06:7a06::/48
Signature Algorithm: sha256WithRSAEncryption
5f:7e:b2:3a:ee:75:16:fa:f5:88:97:cd:ef:5b:8c:52:d3:fe:
2b:5d:07:ac:d3:bd:35:f8:48:ff:69:a9:f9:9c:5e:90:9a:47:
ad:11:c0:94:35:46:74:b5:a8:eb:15:f6:fb:8c:b1:23:cc:f5:
7a:6d:f5:ac:4b:54:9c:f4:21:91:5e:85:84:dd:79:b0:11:1d:
3f:bf:8a:1e:a4:7e:a9:64:c0:e2:32:14:e6:27:4f:1e:fe:ba:
18:73:3f:4e:f0:c8:ba:ed:22:1f:d9:eb:c9:75:fe:7c:10:28:
82:96:22:76:10:c0:d8:2b:f7:3d:4d:82:dc:6e:09:e0:77:45:
0e:f3:b4:28:bd:48:ca:82:00:47:9e:5b:82:9c:1f:96:fc:a0:
b8:03:51:9d:ee:f0:3e:20:c1:71:2b:3b:ca:dc:c2:fb:8c:08:
bd:06:72:54:a0:81:05:35:16:66:26:33:c3:56:61:50:4a:3f:
53:f7:64:60:07:16:2e:37:39:1c:28:e6:e6:0e:75:a6:c9:9b:
86:c8:27:08:73:51:4d:8a:7e:ff:6e:e1:46:03:af:70:47:1c:
94:7e:ad:93:bf:8c:30:91:f4:e9:e9:28:7a:ba:e1:b0:f8:d6:
53:d3:13:05:8e:dc:8a:0f:91:79:33:61:eb:a4:0e:f4:36:a8:
41:c5:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:16 2025 by rpki-client