Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa
File: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (raw, json)
Hash identifier: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=
Subject key identifier: 6A:8F:A9:1F:FD:AD:C6:45:D1:9B:7E:85:AA:A6:F4:CD:F5:67:C5:E4
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0194228D62AED575CA2A6D58F88F4EB22CC6
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25335
IP address blocks: 185.105.56.0/23 maxlen: 23
185.105.59.0/24 maxlen: 24
185.116.172.0/23 maxlen: 23
185.116.175.0/24 maxlen: 24
185.122.130.0/23 maxlen: 23
185.127.56.0/23 maxlen: 23
185.127.58.0/23 maxlen: 23
185.129.8.0/23 maxlen: 23
185.129.10.0/23 maxlen: 23
185.130.36.0/23 maxlen: 23
185.130.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:62:ae:d5:75:ca:2a:6d:58:f8:8f:4e:b2:2c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a8fa91ffdadc645d19b7e85aaa6f4cdf567c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:23:be:bb:5c:6e:de:21:34:ab:70:22:6c:
67:55:8d:bd:0e:ac:51:ff:6f:68:2c:bc:61:9b:27:
91:3d:3e:e8:07:43:9e:83:d9:24:83:ca:cf:4f:1b:
e5:14:62:93:af:f2:fa:46:f8:7f:57:cd:95:b2:82:
ca:f2:db:83:db:53:df:20:6d:7d:79:e4:73:77:21:
16:85:90:cd:20:34:ab:65:b3:3d:af:97:e8:a5:1a:
3a:75:7a:06:d3:6c:f6:b7:56:d7:10:11:f8:c8:01:
72:d8:92:99:ff:ec:9a:0f:88:b3:4e:9a:98:08:fc:
78:1f:22:cb:b3:ad:87:c8:68:48:55:03:42:8d:46:
cb:d5:98:4d:b0:3f:b9:44:70:b7:2d:41:6d:3b:8e:
8e:3d:7d:5b:0d:dd:d6:16:66:fe:90:4e:a2:5e:e8:
17:23:7e:84:14:56:dd:31:2d:ab:84:d0:1d:b3:ad:
23:0f:bb:aa:5d:76:0a:86:67:29:f2:79:04:ea:09:
f0:b5:84:a0:fe:b9:73:4f:5e:76:a3:e2:6a:ce:db:
e9:19:15:95:87:aa:a0:15:67:ab:19:a9:7e:c1:87:
75:50:53:7c:60:ec:c2:04:d9:b7:13:4e:63:30:35:
92:62:82:cc:1e:79:d1:ee:12:09:42:59:59:cc:52:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:A9:1F:FD:AD:C6:45:D1:9B:7E:85:AA:A6:F4:CD:F5:67:C5:E4
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.56.0/23
185.105.59.0/24
185.116.172.0/23
185.116.175.0/24
185.122.130.0/23
185.127.56.0/22
185.129.8.0/22
185.130.36.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:9d:3c:9c:38:cb:9a:94:58:7e:37:d3:4b:af:8b:09:5b:4d:
b1:ce:f4:11:b8:43:02:70:19:0b:8a:27:ff:95:7b:c5:f7:f4:
cf:66:c2:66:47:1b:b4:95:15:0a:cb:1a:2b:47:75:93:37:f2:
d0:74:a6:24:7a:b2:d1:c2:d4:13:87:8d:53:29:d3:1c:40:49:
73:e4:1e:02:aa:e9:2f:61:62:e6:a0:b6:ea:d2:72:01:52:cb:
fc:a6:3a:f8:74:b6:cf:72:8b:bf:3a:3b:01:81:2a:13:06:b6:
65:82:c6:1b:43:5d:25:dc:70:a5:d4:b9:ab:51:0e:5e:b8:8c:
bb:b5:1b:da:b0:cc:e5:d9:90:16:31:a3:ff:e9:81:5a:cd:76:
8f:0b:b9:97:0a:e2:25:42:50:bc:c6:e3:e0:3a:95:6c:c9:69:
b5:50:38:03:74:c9:fe:eb:70:0d:c9:97:87:12:96:ba:d2:fb:
19:d0:78:44:3e:02:b1:19:2c:84:5d:18:46:74:24:2a:f5:32:
d6:ea:d0:5b:19:2f:b0:27:b0:ff:06:96:58:4c:fe:04:13:83:
96:27:5b:54:aa:9d:a2:99:d0:1b:e9:8d:8b:59:ec:6a:04:89:
87:d1:18:f3:b6:23:d7:ed:f8:fe:18:1a:82:26:bc:21:bd:e4:
e8:00:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:14 2025 by rpki-client