Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa
File: gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa (raw, json)
Hash identifier: dWZpajXQdBvyOcKFRctLEmEP4L6KG6ufnnlUSRMSxks=
Subject key identifier: 80:09:B0:B5:67:41:02:21:9D:F5:E1:9E:0E:18:7F:E1:4E:FA:41:DE
Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Certificate serial: 019422FBA72013A152F5920EBD9B412C0CF7
Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa
Signing time: Wed 01 Jan 2025 17:48:25 +0000
ROA not before: Wed 01 Jan 2025 17:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31673
IP address blocks: 185.87.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a7:20:13:a1:52:f5:92:0e:bd:9b:41:2c:0c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8009b0b5674102219df5e19e0e187fe14efa41de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:1a:cd:b8:3b:f1:59:96:91:cd:bb:ba:81:
b6:0f:a0:7e:a2:6a:1f:93:65:3a:8c:a6:19:1a:69:
c7:35:ab:a2:b0:f6:c0:47:24:bd:6e:cb:5f:86:53:
a6:2b:ad:65:20:b7:22:3e:4d:a9:f2:00:26:55:4f:
29:f3:01:ac:92:9f:a6:f1:a0:91:8b:81:94:84:68:
81:57:b1:65:d6:af:2a:0a:8e:b4:ec:23:f8:8d:0c:
d5:8c:06:1b:0d:e2:a2:38:1b:26:89:9a:6d:e7:c3:
ba:6e:bf:62:94:1d:f7:8a:26:f7:05:8b:e5:1e:ef:
bd:82:f7:10:f3:2c:0b:f1:24:4c:5d:98:0d:bf:11:
60:3f:f0:3d:1e:1a:82:03:97:a5:ea:16:d5:02:44:
af:f5:72:72:b3:25:f4:c1:b7:95:0d:66:21:9c:ae:
15:e3:82:17:0c:89:2e:7d:bd:9a:0a:a7:5c:26:95:
51:78:ed:56:c5:1f:8a:f1:24:68:1e:b2:10:50:5c:
38:61:58:9c:f3:d1:1a:ec:7b:c0:e2:21:7d:b3:f3:
f1:94:22:ba:85:2f:de:86:ee:a4:6f:23:09:df:d1:
78:94:0f:c7:7e:bc:9c:48:42:fd:d8:d8:fc:fb:cd:
4e:8e:5b:00:40:9c:c3:b0:10:79:b3:4d:fa:3b:ca:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:B0:B5:67:41:02:21:9D:F5:E1:9E:0E:18:7F:E1:4E:FA:41:DE
X509v3 Authority Key Identifier:
keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/gAmwtWdBAiGd9eGeDhh_4U76Qd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.152.0/22
Signature Algorithm: sha256WithRSAEncryption
20:f3:0b:d2:0a:50:8f:84:ff:5c:1a:ed:4c:56:a0:e8:17:6a:
e2:0f:7d:36:25:c4:8b:d6:6b:65:3e:80:68:37:07:2c:e4:ee:
5a:d6:19:f4:05:de:a6:6d:a1:0d:81:00:0e:52:f3:50:d2:f9:
cc:6a:b7:2a:8f:08:5e:85:1c:ec:c3:1b:97:fe:47:80:bb:82:
14:f0:96:50:f6:26:67:a9:e4:0f:00:9b:43:e5:e5:ed:51:f2:
c6:ce:90:0f:03:37:f2:88:af:79:82:8e:32:15:03:d6:d6:e4:
8e:83:1f:e6:78:e7:0f:e1:41:f9:fe:9c:ad:58:b3:46:a6:bc:
45:2c:1d:ed:91:c1:5d:f0:b2:99:46:88:a0:e1:09:2a:68:14:
4e:fe:92:39:08:f9:23:fc:7f:26:92:ae:ec:a0:9e:d3:2d:c0:
37:f3:e7:c1:d1:86:c7:80:16:32:04:35:77:08:53:5e:49:6d:
a8:9a:47:ba:43:cd:4a:35:b3:ee:c1:4b:27:de:35:0e:c5:36:
3a:5f:86:da:cc:9b:9f:ff:37:61:c4:1c:12:ba:54:e8:6e:8e:
9e:09:ab:bc:25:bd:4e:04:d0:5d:59:11:ba:fd:d5:aa:05:26:
12:84:b8:53:f3:fb:41:38:47:92:d6:fc:a6:9a:6e:b6:24:21:
50:6e:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:10:35 2025 by rpki-client