Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa
File: AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa (raw, json)
Hash identifier: 8hVhVqsbKGADU2c8IHCYOqECSdJOghmC2FEZohLEksw=
Subject key identifier: 01:46:CC:04:65:BF:57:2D:86:FB:BB:71:B5:65:0E:F1:CB:5D:3F:BB
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0194282560FFA210FEEA142277E2DBF0420B
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa
Signing time: Thu 02 Jan 2025 17:52:05 +0000
ROA not before: Thu 02 Jan 2025 17:52:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200002
IP address blocks: 185.205.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:60:ff:a2:10:fe:ea:14:22:77:e2:db:f0:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 2 17:52:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0146cc0465bf572d86fbbb71b5650ef1cb5d3fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:95:43:78:30:67:23:68:45:81:ba:96:fa:
fd:81:44:84:8b:2a:a9:25:e5:f7:b5:7b:b9:c4:7e:
6e:6b:25:2c:8e:a4:44:65:56:5a:35:61:a0:7c:7e:
91:18:ff:e0:bb:6c:3e:d5:74:e3:b8:2f:0a:9c:67:
e1:5c:d8:5f:d3:0e:3c:fe:ba:21:00:88:c1:6a:75:
32:fc:d5:a4:a0:1d:31:b3:91:0b:f9:3e:80:a5:25:
c9:29:d5:e5:ff:97:63:cf:05:28:b6:41:08:d9:3d:
4f:d0:ee:5e:81:ff:a7:30:23:91:04:0a:d0:d3:02:
c0:b8:d3:f7:0a:98:0f:be:9e:98:3c:e0:40:b1:c6:
0e:0c:3b:57:9e:fa:c6:1d:24:15:92:61:4b:8a:69:
74:9f:ae:51:ad:58:b7:a4:de:60:cd:65:cb:6d:ab:
de:fb:5d:e4:6b:f8:e0:49:58:5c:7d:9c:d5:16:e9:
01:32:1f:c3:56:2c:d8:6d:2d:23:18:13:ab:64:9b:
48:6e:2e:85:88:78:9e:13:ee:03:3f:46:8d:d7:59:
73:a9:2e:09:90:7a:76:f5:29:fb:43:fc:cc:45:b8:
b8:19:cf:eb:4f:18:d6:6d:32:4a:9d:03:f5:a9:23:
5c:8b:ba:8a:66:2e:41:2f:20:5c:15:01:56:d6:fe:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:CC:04:65:BF:57:2D:86:FB:BB:71:B5:65:0E:F1:CB:5D:3F:BB
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.19.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a8:40:12:62:e9:2f:36:2b:ba:04:29:52:e0:b2:4e:ab:f1:
46:89:bf:cb:63:9a:86:26:b1:fe:87:13:d9:31:a9:a0:45:7e:
1c:42:34:82:3a:e7:5d:fe:56:fe:33:45:63:6e:2a:51:1f:f9:
c2:f7:3c:05:f2:1a:f2:91:eb:d8:8e:22:bc:cb:f2:1d:13:26:
2c:50:27:eb:a5:df:05:d3:fa:a9:ae:5e:bf:6b:9b:ed:d5:50:
d2:70:6a:ad:3f:c8:68:c4:a6:39:d4:5b:d5:e8:b1:35:6c:98:
24:c3:d4:ae:d0:e0:1f:f3:a8:46:39:04:65:1c:e8:17:b2:34:
ee:48:07:a8:1e:32:ee:79:91:08:66:be:52:f8:a7:1f:ed:8a:
c7:41:40:80:f6:b8:4f:7d:f3:1d:6f:b6:21:f3:d2:8f:d8:37:
84:b0:15:f2:ce:dc:60:bc:40:a8:b4:dc:16:d8:18:ed:9c:58:
8d:68:df:c6:6e:82:c4:14:49:13:57:46:12:87:ea:d4:03:f6:
3d:95:a6:66:72:d4:66:2c:b1:30:db:f2:d6:6d:ca:05:8c:1a:
c3:4c:07:38:70:ce:5e:a7:03:ac:a1:21:38:71:d2:83:27:3d:
ed:88:94:64:61:d5:cd:5c:45:4c:04:ee:9f:00:04:d8:a4:c4:
14:73:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:48:09 2025 by rpki-client