Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa
File: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (raw, json)
Hash identifier: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=
Subject key identifier: 95:20:6B:51:00:44:2A:E4:D2:63:A0:1D:35:3D:59:56:F7:13:47:1F
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0194CCBCB5373ABB086BCE39AA95EEE62D53
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa
Signing time: Mon 03 Feb 2025 16:55:06 +0000
ROA not before: Mon 03 Feb 2025 16:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 185.23.18.0/24 maxlen: 24
185.23.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:bc:b5:37:3a:bb:08:6b:ce:39:aa:95:ee:e6:2d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Feb 3 16:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95206b5100442ae4d263a01d353d5956f713471f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:95:9a:03:de:d1:64:9e:96:af:97:16:25:
3d:c5:de:b9:bb:8b:aa:e3:31:fa:f9:36:08:e3:97:
01:62:03:01:d5:2f:96:56:02:44:bf:7b:b6:9e:2a:
de:7e:cd:8f:29:31:6c:cf:03:dd:f7:69:27:c3:a1:
f9:64:dc:d6:10:9a:73:b8:e4:22:1c:76:12:93:04:
7c:be:fb:07:4e:36:f5:3e:ae:c4:3e:87:21:d0:a2:
39:ed:d3:17:99:a6:7a:d7:b7:46:b2:5c:0f:92:a0:
47:9f:39:02:61:4c:60:0f:1e:25:5b:d9:5f:74:bd:
0a:e9:b2:67:a3:6f:a9:92:2e:78:60:a8:74:fa:79:
50:57:42:c7:24:92:c0:11:18:4a:8d:3c:bf:02:33:
59:e9:cf:30:8d:ef:03:56:06:09:df:10:24:48:ae:
02:3c:66:51:64:ec:de:b3:fa:3d:14:86:81:79:d4:
31:9b:6b:9c:09:54:88:3b:45:6d:77:ea:f0:4a:de:
95:44:9e:6a:79:e5:44:80:11:3e:66:b0:b7:86:f8:
75:a2:55:e0:69:49:bf:6f:f3:88:74:46:55:17:54:
18:aa:6c:67:de:9b:83:f9:a5:c3:d0:01:4b:33:ac:
6a:01:ed:29:0a:77:ca:be:86:90:85:ff:02:25:24:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:6B:51:00:44:2A:E4:D2:63:A0:1D:35:3D:59:56:F7:13:47:1F
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:ef:2d:2c:31:f5:d0:bd:59:7d:04:d1:a5:72:03:33:73:4c:
83:6f:3c:c1:0a:03:41:1f:76:73:14:8b:c3:3a:9f:92:5c:45:
66:56:c5:43:09:09:15:c1:3e:b7:73:71:8d:84:e4:b8:af:45:
4a:19:10:52:cf:6e:ae:88:70:b7:7d:0b:41:4f:03:5e:84:8d:
7d:20:37:66:97:89:0a:89:c5:68:c6:e6:1c:b8:41:f7:14:8c:
a3:3b:a7:e9:a4:2a:19:55:09:ac:b2:16:d3:f0:98:53:37:a1:
56:5c:2e:84:dd:8d:8c:8e:8c:87:9e:1c:e7:90:d6:d9:f1:f0:
8f:41:8e:d0:43:12:0a:42:1c:e0:8e:a0:b1:8b:20:aa:38:e2:
8e:08:7a:96:cc:85:fd:78:ff:ec:2b:18:65:47:a9:e9:81:99:
9b:13:b6:07:7d:24:5c:de:19:d8:be:3b:f2:61:a8:68:91:e7:
d9:b1:f2:bf:75:16:38:b8:f6:1a:df:2b:8b:30:10:67:10:6d:
53:d1:3b:be:74:c4:82:1b:23:48:1e:6a:23:f4:65:2d:2f:0f:
ba:dc:54:a2:1c:26:a3:fd:c6:30:28:93:65:3c:fb:b5:e6:c9:
60:0a:c2:f0:f0:04:da:1d:a2:e3:82:ff:51:a0:dc:d5:81:12:
56:43:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:10 2025 by rpki-client