Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa
File: CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa (raw, json)
Hash identifier: wxQvo+G+ZM9xHSY4rXReEADz55sy+G82AZg77QhhlvE=
Subject key identifier: 0A:61:86:69:60:7D:FD:69:96:A7:28:42:CC:55:54:94:DE:EB:6F:A7
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 0194228E22699EEF81FFE322FAC6F2675B34
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198360
IP address blocks: 176.103.216.0/23 maxlen: 23
176.103.216.0/24 maxlen: 24
176.103.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:22:69:9e:ef:81:ff:e3:22:fa:c6:f2:67:5b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a618669607dfd6996a72842cc555494deeb6fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:9f:1b:bd:dc:2f:d7:61:39:e3:c4:1a:5d:
bd:4f:b4:1f:1f:19:6f:74:67:8c:03:ef:aa:61:54:
2e:c4:9b:e5:9a:29:08:e9:c1:98:d6:63:c8:c0:e7:
df:a6:f5:40:ab:c7:30:17:e7:69:81:fa:c8:c7:c6:
e7:55:a6:23:21:c2:4f:57:c3:eb:c3:1c:e6:6a:95:
e5:0c:4d:8e:e1:31:b4:c5:3c:b6:61:bc:67:26:bd:
c3:f2:b7:d3:5b:af:45:9b:b8:f2:23:21:eb:01:c0:
16:0c:07:7b:9e:75:76:1c:2a:30:97:4c:d9:e7:0c:
43:a2:12:e2:02:cb:b5:3e:c3:9c:a1:34:5e:91:a7:
1d:f8:ea:e2:9e:74:7c:6c:ee:cf:0a:56:6a:b8:39:
42:92:4f:c8:80:cb:21:c6:1c:00:5e:a9:06:66:19:
64:de:99:58:ac:21:1e:ba:cc:a8:cc:99:57:0e:99:
f3:8e:8b:7f:36:88:93:81:56:45:a7:67:34:8f:98:
75:c6:fa:fe:28:ef:ab:99:10:8a:02:15:33:96:8f:
b7:21:58:63:80:fa:ce:ff:98:d7:b2:0c:70:bd:73:
66:0c:0a:b1:50:a5:9e:0d:c3:f8:6d:45:82:61:de:
9d:c5:66:9b:38:9f:06:ec:1c:cd:96:2c:d3:0e:a6:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:86:69:60:7D:FD:69:96:A7:28:42:CC:55:54:94:DE:EB:6F:A7
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.216.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:d2:1a:92:8f:51:0f:3c:e0:fc:6a:90:44:eb:cf:e0:70:03:
7e:86:b4:47:65:14:66:18:19:e3:51:b5:d2:93:11:77:81:c2:
df:bc:75:6a:6c:e6:c8:40:f1:9b:a1:5f:b2:5a:d5:e9:3b:46:
5f:c4:f4:cd:34:fa:98:cd:cb:68:0a:ed:14:6c:e3:02:cc:22:
8e:e6:b4:20:2d:3a:82:1b:75:f9:0f:fd:5f:c6:2e:d5:97:b7:
d1:a0:78:63:d7:1c:55:ab:19:d5:fe:97:f6:36:35:fb:b7:d1:
1b:f3:c0:a7:52:b9:9b:68:76:c9:69:69:29:b7:54:3f:fc:5b:
78:3f:b0:3f:53:7c:a8:90:ad:f9:be:68:9e:4a:52:0e:9e:41:
e3:b1:e0:06:8a:6b:7e:c0:3d:cd:d0:8a:15:2e:41:86:ba:86:
46:55:79:cc:1f:02:6f:16:d6:4b:c9:77:55:94:d9:56:ca:05:
2c:ff:5c:99:e6:40:fc:07:11:ec:20:cd:b3:56:69:71:22:cf:
b1:1e:40:d2:be:f9:f6:a6:ab:31:35:ae:a8:1a:58:7d:13:a3:
db:58:b2:6d:a4:35:b8:67:39:aa:55:a5:a1:ad:6c:23:ce:fe:
82:b9:09:e0:37:aa:0d:3f:a4:d6:51:8e:5c:ec:48:55:01:8b:
84:42:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:51 2025 by rpki-client