Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa
File: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (raw, json)
Hash identifier: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=
Subject key identifier: D6:05:CC:E4:3D:D8:D0:60:62:DC:56:CE:C4:2E:FA:4D:B9:23:D1:07
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 0194266C427C80364452F65E520B72DF26EA
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 185.79.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:42:7c:80:36:44:52:f6:5e:52:0b:72:df:26:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d605cce43dd8d06062dc56cec42efa4db923d107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:9a:47:52:c7:cd:ab:0e:3e:a2:9e:8b:c5:
6e:3e:7b:8f:bd:25:de:3f:35:22:45:65:67:8f:78:
4c:4b:cd:99:b1:cd:5a:0e:ba:a5:c7:ac:9a:91:eb:
bc:cf:e7:87:eb:a6:b1:1b:08:4f:bb:16:f4:3b:f0:
c7:77:cd:f6:7c:3e:0f:f1:da:91:2c:fd:ee:5e:e5:
08:c3:e1:1d:c8:af:95:82:66:39:03:cf:c5:78:44:
fa:00:65:0d:36:9f:9e:3f:8b:41:4d:5b:67:99:0e:
c1:26:1c:fc:ba:3a:56:d4:09:fe:85:e3:3e:51:f9:
b6:29:66:78:3c:84:5c:10:22:15:a8:5d:91:9a:69:
76:c9:c9:b5:93:0e:3e:8c:50:b0:2b:12:b4:f6:5c:
27:77:e5:45:ad:fc:53:ae:15:ce:0f:67:23:e3:a8:
37:d9:47:8a:a3:d8:07:a2:9a:d9:44:b7:3c:2c:75:
7e:06:e7:ae:d4:f2:11:12:d3:b5:59:3a:91:bb:a0:
a1:c0:e4:36:51:c7:2e:00:da:75:ce:2a:57:85:63:
6c:bf:d4:a2:78:c5:60:5d:24:41:16:78:1e:a3:94:
21:a4:ed:c3:a1:d7:55:5d:dc:33:a8:36:57:20:d5:
86:50:fc:47:f1:3a:07:2b:b2:25:8a:c3:66:08:c3:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:CC:E4:3D:D8:D0:60:62:DC:56:CE:C4:2E:FA:4D:B9:23:D1:07
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.202.0/23
Signature Algorithm: sha256WithRSAEncryption
49:f0:f4:46:76:e3:24:7a:39:6f:21:e0:9a:14:27:2d:63:bd:
a3:70:8d:2c:22:21:94:0e:bb:32:d9:89:27:79:07:43:33:9a:
47:f9:8f:2a:0e:4f:cb:9f:ad:43:9a:41:15:a8:95:8b:c7:85:
b3:b5:17:0b:ca:f5:0c:8e:2d:70:54:e0:ea:c5:d0:a8:e3:f3:
f8:97:be:d9:55:fe:80:27:8c:88:76:59:10:69:49:15:16:1c:
bb:61:0a:d1:98:62:c8:4c:0a:0e:cd:52:b5:bc:a4:2a:ce:f7:
ac:7a:56:de:45:3e:60:73:12:e6:ae:4d:88:9f:39:92:4e:30:
cb:f2:1c:a6:9e:6d:da:5c:c9:07:a4:b2:a0:6a:57:f0:11:37:
1b:07:12:ad:90:0a:fb:cf:69:0a:7a:b0:59:0a:88:7a:a0:3e:
6f:cf:64:c6:bb:9f:66:af:93:86:9a:42:11:f3:f9:47:bb:17:
4c:52:0f:6d:4c:d6:f8:96:06:9c:08:79:83:5a:1b:84:39:89:
55:fc:81:4b:e9:6c:74:2f:e9:6a:f8:57:12:57:70:96:bb:ff:
3d:93:f9:1f:e4:e8:29:b4:0a:c0:06:c1:09:72:2a:9d:a3:02:
99:54:b7:d8:a6:ad:2a:63:85:38:78:22:62:05:c6:3b:c9:ed:
5a:5a:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:06:38 2025 by rpki-client