Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/iWhZAjriW-wjhpW_I7AAFupd8k0.roa
File: iWhZAjriW-wjhpW_I7AAFupd8k0.roa (raw, json)
Hash identifier: luBfIMH09dvaIbcRpG6juKMigtK01xkZI61aTfT3Bf8=
Subject key identifier: 89:68:59:02:3A:E2:5B:EC:23:86:95:BF:23:B0:00:16:EA:5D:F2:4D
Certificate issuer: /CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Certificate serial: 01942444CAE17BF43E033C562559A283393E
Authority key identifier: D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/iWhZAjriW-wjhpW_I7AAFupd8k0.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61386
IP address blocks: 185.167.124.0/22 maxlen: 22
185.167.124.0/24 maxlen: 24
185.167.125.0/24 maxlen: 24
185.167.126.0/24 maxlen: 24
185.167.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ca:e1:7b:f4:3e:03:3c:56:25:59:a2:83:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bd64cc94a4a8518a71f96ef8b77625afa527d1
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=896859023ae25bec238695bf23b00016ea5df24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:e7:09:c4:1d:00:dd:94:91:fd:a5:15:2f:
8a:d3:98:2c:69:af:c4:9c:8b:10:5a:18:31:62:84:
b7:33:0f:de:c9:fb:ea:e7:8e:c2:ff:df:5b:4a:a9:
e9:51:ee:2e:aa:87:d1:ac:71:54:2a:80:7e:09:ee:
db:fc:22:7b:7c:64:26:55:a0:31:18:cf:3c:2c:b6:
00:70:8f:85:43:87:bf:a6:06:f2:3e:d3:36:18:87:
6f:ab:b0:5e:1d:90:a2:db:b9:3a:63:4e:c6:f2:92:
bc:27:a2:7c:fd:0d:3a:e2:58:27:da:65:93:95:e8:
79:d7:6a:d6:9e:8d:72:f3:5b:32:56:c8:d7:e5:cc:
1d:3e:d6:be:26:25:d5:f4:8d:3c:fc:be:eb:91:d7:
79:df:bf:24:a3:51:6c:07:ab:9e:2f:36:a2:39:a5:
27:0c:a5:70:4d:8f:5a:ac:6e:e9:3a:a5:82:45:53:
52:83:8e:70:4e:03:14:a3:9e:5c:1a:38:b6:f4:05:
d6:79:b1:af:e1:8f:d8:48:99:f6:48:41:00:8b:22:
b1:84:86:94:e1:15:4f:b5:ac:48:d5:17:21:26:61:
9a:8e:14:f9:87:d5:ca:88:7b:54:4a:b7:e2:ac:53:
46:63:bf:89:5e:28:24:22:80:83:bc:90:ff:25:c0:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:68:59:02:3A:E2:5B:EC:23:86:95:BF:23:B0:00:16:EA:5D:F2:4D
X509v3 Authority Key Identifier:
keyid:D1:BD:64:CC:94:A4:A8:51:8A:71:F9:6E:F8:B7:76:25:AF:A5:27:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/iWhZAjriW-wjhpW_I7AAFupd8k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2efa50-f483-4b53-b1e7-0826f36ff28f/1/0b1kzJSkqFGKcflu-Ld2Ja-lJ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.124.0/22
Signature Algorithm: sha256WithRSAEncryption
79:be:ec:03:d6:04:0d:69:6f:f4:65:e2:b9:ae:bf:45:49:b9:
d2:74:f0:04:e8:47:4e:ba:b6:35:82:65:be:7c:ec:ae:2d:27:
4c:29:f9:e4:ba:16:15:d2:74:d0:b0:0e:61:de:69:6f:cd:cc:
1f:6a:41:3a:89:46:33:d0:f9:8d:cf:8c:79:14:30:c6:fd:d0:
16:5e:82:a7:21:a2:6d:1f:a4:c3:2f:8d:90:6d:78:c5:1c:0e:
47:58:43:75:e0:de:88:38:b5:a5:da:90:6a:41:28:19:51:24:
56:60:32:fd:8e:15:cc:2e:f9:fc:19:09:0d:63:b3:d0:30:2f:
63:31:d5:2a:92:ff:60:b4:ec:24:e0:b0:5c:52:e1:88:13:0c:
68:dc:c0:2b:3c:d0:9d:78:f9:cf:48:f6:31:a7:e7:6a:7c:7a:
c5:b7:47:41:5b:5c:fb:87:9c:fb:46:65:e7:6b:ad:52:ba:00:
3d:c7:f1:02:fa:56:8b:52:f6:7e:9e:7b:5b:ed:56:77:68:4a:
6f:09:11:82:49:60:f5:57:9d:01:18:70:10:4f:da:cb:9d:85:
c9:8c:13:b4:87:72:a0:75:6c:71:d0:8b:cb:53:eb:13:ea:42:
ce:72:1a:55:41:61:6d:dc:12:42:5d:d3:10:dc:b9:72:df:71:
06:35:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:33:32 2025 by rpki-client