Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa
File: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (raw, json)
Hash identifier: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=
Subject key identifier: A5:D4:B0:4B:7A:BF:02:AF:62:20:CF:09:56:30:CA:91:BF:4A:7A:CC
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 01942143C626AFE46893AE2AAEA798418AA1
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60068
IP address blocks: 185.207.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c6:26:af:e4:68:93:ae:2a:ae:a7:98:41:8a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5d4b04b7abf02af6220cf095630ca91bf4a7acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:0b:cb:1d:d9:c7:16:46:6c:51:51:a6:61:
13:c1:9d:09:23:0f:21:ea:ef:7c:fb:f6:1b:86:06:
fc:1e:8f:0c:b6:5f:b5:58:a0:00:3f:d5:58:e7:3f:
cf:c0:bb:d2:84:39:7f:07:fc:1f:08:02:bf:3d:22:
70:42:90:df:89:9d:0d:9e:d8:d9:35:90:c2:ea:4e:
57:72:f6:89:72:3e:55:ac:0c:a9:8e:33:3f:b7:84:
e3:cc:ac:a5:7b:c2:15:1e:de:88:55:69:13:bc:8c:
f9:59:eb:0c:19:d0:44:85:c4:ee:72:02:f8:22:5a:
d0:7d:bd:49:92:59:a5:d6:21:74:c5:f6:6e:b2:ee:
56:1b:67:14:81:91:a4:94:f1:01:4e:ae:33:62:22:
60:b5:2d:88:45:9f:1b:c9:b3:1b:21:5f:e2:3e:ef:
b5:1e:48:3f:ac:a2:48:11:0d:d6:9e:41:af:d0:56:
cb:f0:ad:81:74:31:8c:f8:fc:90:81:12:d5:04:d6:
d7:02:6f:ef:bb:88:03:bb:b6:15:3e:14:ff:0c:bb:
7c:a9:50:5e:ba:fd:c5:54:60:19:57:02:dc:6a:67:
36:74:60:90:4f:ec:b4:46:57:ba:3d:ba:8c:87:8c:
9e:67:b9:50:3d:50:3f:91:23:a0:a7:d0:b7:76:e5:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:B0:4B:7A:BF:02:AF:62:20:CF:09:56:30:CA:91:BF:4A:7A:CC
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.164.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ac:30:f0:64:8a:96:35:69:cb:55:c1:64:20:86:63:c7:51:
5e:c5:d5:a4:fd:ed:0c:ad:c8:cd:26:8d:59:52:8e:9b:68:9a:
fb:92:95:65:97:a7:0c:97:63:c2:3f:d2:df:47:4d:0b:db:e3:
58:bc:dd:92:9a:d9:80:05:7e:fe:45:2e:53:72:cb:63:16:83:
4d:13:0c:1d:7e:d3:71:d1:8f:7b:a5:c1:96:ea:f7:30:f8:15:
47:69:97:cf:75:93:69:13:cc:8c:31:b4:9c:63:ee:8e:f3:2e:
00:22:2f:1e:c9:96:5e:12:e1:76:26:30:7f:0b:4b:cb:ae:05:
46:24:65:4d:eb:3c:04:73:1f:aa:e7:12:59:f7:98:a5:26:30:
d2:ce:b6:3d:5f:23:cb:a6:57:d2:f5:3a:ac:04:be:d6:3d:7c:
37:52:d1:76:fc:7f:09:ec:d4:67:9c:e3:dc:04:8e:23:94:29:
b3:ac:e3:de:44:fb:dd:ef:e0:00:e4:74:90:91:0d:5b:82:b1:
c2:6a:17:a3:92:e7:a3:b4:32:2e:f6:4c:33:5c:d9:a2:83:16:
df:72:26:a7:4c:9f:91:cf:f1:d4:db:81:ac:4c:0c:e1:1f:a5:
df:1b:0a:0a:8b:35:1e:78:1f:4c:7a:0f:ba:bc:48:f4:7c:9b:
e3:8e:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:53:57 2025 by rpki-client