Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa
File: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (raw, json)
Hash identifier: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=
Subject key identifier: 68:FD:71:80:6C:3C:1F:B8:C2:38:8F:95:49:9D:35:9E:3F:3E:E0:23
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0194CCBCB4FC0ECDCD09DA919987889C2973
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa
Signing time: Mon 03 Feb 2025 16:55:06 +0000
ROA not before: Mon 03 Feb 2025 16:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 185.23.18.0/24 maxlen: 24
185.23.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:bc:b4:fc:0e:cd:cd:09:da:91:99:87:88:9c:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Feb 3 16:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68fd71806c3c1fb8c2388f95499d359e3f3ee023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:0b:a2:7b:4d:28:e0:0d:e4:6e:27:4f:76:
ce:7c:03:bb:26:33:2b:6a:92:92:fb:ad:c6:78:cc:
9f:1b:dc:34:e2:cb:d9:0c:8b:06:58:b1:49:6a:46:
2c:f3:d0:2f:48:a6:ee:dd:da:c1:44:69:b4:33:5d:
c3:d1:4c:7b:62:37:ac:0a:91:45:ec:f9:ce:2b:53:
64:6a:bc:1e:d8:0f:54:af:f8:e3:01:dd:ee:59:1d:
28:e1:2d:f3:16:5f:8c:44:29:fc:4d:92:b2:d3:58:
5f:36:36:7a:87:a0:af:ab:50:0b:9d:2c:5c:9b:c7:
a1:d8:30:08:f8:ac:87:eb:22:d0:a7:0c:19:03:72:
5f:ee:19:ac:a6:53:f8:7d:90:6f:19:5d:db:fc:89:
ba:93:53:d1:a3:1a:25:cb:b2:cd:af:d8:64:92:38:
85:1e:28:4b:71:3f:bc:5e:b7:e7:31:0d:39:19:e7:
b1:98:c8:39:63:68:ec:9c:c7:44:01:7c:18:09:01:
96:5c:40:ab:42:a6:d0:c1:4d:80:73:81:0e:e2:3c:
b8:f3:25:9b:79:f0:d7:cc:a6:a3:89:1a:c2:29:f7:
92:96:28:70:78:96:10:9c:41:d4:dc:c5:af:42:f1:
aa:57:c0:2d:54:40:31:e7:67:22:70:ef:f9:dd:17:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FD:71:80:6C:3C:1F:B8:C2:38:8F:95:49:9D:35:9E:3F:3E:E0:23
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.18.0/23
Signature Algorithm: sha256WithRSAEncryption
27:43:26:13:07:12:b6:4c:51:bc:fd:fe:88:86:c0:58:d2:3c:
4e:33:05:5d:11:f2:a1:e8:a4:56:80:58:32:82:b3:c1:09:8b:
91:1c:03:fb:2d:37:25:f6:63:58:38:61:61:a0:e2:bc:06:d7:
55:52:01:d6:8e:7b:be:ec:0c:ec:f5:56:71:e0:8e:03:0c:28:
32:65:80:c4:4a:5b:fd:43:52:c9:f8:05:f7:29:ca:3e:09:d9:
c2:f6:2f:94:6b:3b:75:28:32:76:61:7a:34:4d:38:e5:d5:ce:
6e:88:0b:8e:16:7f:e1:59:fd:41:4a:43:cd:10:25:56:d0:07:
0b:6e:24:64:66:9f:e9:1f:6e:a1:37:88:79:f1:fe:c6:dd:3b:
7e:f2:65:2b:cc:5e:02:03:4a:61:cb:cd:92:47:b0:6b:f2:46:
d7:2b:72:f2:29:37:50:09:82:88:30:34:85:8f:31:d0:30:f9:
30:f3:2f:76:b7:2d:b3:af:ed:dd:ec:b4:54:35:b8:2c:5b:8c:
90:ec:23:a2:62:ed:fe:01:1f:77:a6:8f:a9:c7:89:00:48:4e:
ed:ae:f1:84:82:a9:13:df:76:0b:56:fc:d0:72:92:26:70:32:
d7:84:f0:86:fb:c1:aa:19:ef:c6:22:6d:35:e3:91:ab:93:64:
21:dc:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:18 2025 by rpki-client