Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/pWMenEyK3oj7AZ6h81KI2eooBIo.roa
File: pWMenEyK3oj7AZ6h81KI2eooBIo.roa (raw, json)
Hash identifier: 6KZd57Ad66QVQkNRU3497fAssJrDtYq8EPVr4qqDMKo=
Subject key identifier: A5:63:1E:9C:4C:8A:DE:88:FB:01:9E:A1:F3:52:88:D9:EA:28:04:8A
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019423D7D4A756DE4ECE399403655666BDE2
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/pWMenEyK3oj7AZ6h81KI2eooBIo.roa
Signing time: Wed 01 Jan 2025 21:48:54 +0000
ROA not before: Wed 01 Jan 2025 21:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.116.168.0/24 maxlen: 24
185.116.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d4:a7:56:de:4e:ce:39:94:03:65:56:66:bd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5631e9c4c8ade88fb019ea1f35288d9ea28048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:30:19:84:d6:33:8b:3b:f4:59:80:e4:f4:
65:be:26:7d:81:ab:cd:12:0e:b0:66:32:38:7a:09:
63:9c:ba:3e:a9:1f:79:58:f2:01:af:57:97:bf:af:
29:34:4a:c1:73:a8:c4:0a:8b:74:d6:8c:e1:6c:f5:
2d:37:22:87:cd:0e:9d:ab:7e:fc:87:fc:bf:5b:db:
b5:e8:aa:77:05:b4:3b:c3:2e:8a:43:77:89:0d:84:
e4:fa:f4:1e:f8:a4:ee:d8:aa:66:00:11:5d:0a:03:
69:d2:32:0d:c2:e2:74:ec:9e:ee:e0:a7:aa:77:f8:
92:f7:6f:5e:c9:08:6a:fa:c1:3a:57:5c:9d:17:31:
aa:13:bd:81:57:19:82:87:0a:65:6b:cb:d2:f6:65:
76:6e:b6:45:b6:36:4e:63:e7:44:0c:d0:66:75:00:
7f:93:72:81:94:f3:75:34:81:0b:05:5a:be:65:e4:
f6:90:ef:fd:09:c0:a0:cc:06:7e:12:9e:da:01:44:
fc:58:fe:c9:8a:07:ce:2c:cb:9c:b5:a9:67:28:41:
f9:4c:2d:63:5a:6d:a7:27:96:3b:2c:b4:d4:d1:e6:
79:9f:3f:02:65:af:2e:c3:94:ac:3e:21:cf:94:83:
95:e1:fb:2f:e4:6a:4c:02:75:a2:f2:21:98:a2:6d:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:63:1E:9C:4C:8A:DE:88:FB:01:9E:A1:F3:52:88:D9:EA:28:04:8A
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/pWMenEyK3oj7AZ6h81KI2eooBIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.168.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:8c:fd:a1:51:20:c6:b7:b4:47:fa:40:c5:7b:29:1e:1e:cb:
c3:60:36:83:dc:dd:61:18:29:a2:25:d3:aa:0f:ed:b7:53:6b:
38:39:d9:5b:f7:83:90:7e:cd:71:04:18:84:4a:e9:7b:cb:4a:
f9:cd:10:9a:c1:ee:4e:5f:5b:56:a5:b2:63:fd:31:d0:96:06:
9d:e1:28:bd:79:aa:b2:a1:6e:23:1b:5f:5c:16:f3:8c:a9:d9:
c3:bf:f0:3d:ff:43:02:44:bb:54:f8:bc:02:8e:99:13:e7:e2:
8b:63:7a:9b:5c:8a:54:c4:90:6c:57:96:ae:bf:cc:25:19:c2:
68:df:b5:60:90:7e:9d:f9:f1:6a:14:5d:22:ed:cf:34:7a:ac:
09:ed:6f:ef:05:b5:c4:66:85:47:b3:d0:cb:0b:ff:3f:e6:c6:
fc:fb:30:3d:91:4f:fc:c8:ee:a1:44:2e:5a:8e:10:e0:21:0e:
63:84:a7:5a:6a:fe:a4:77:d3:8d:ab:8c:80:e3:07:8c:37:8a:
57:0c:2a:52:47:d9:41:6a:65:cf:66:6e:ae:06:88:84:00:48:
f2:0a:35:87:e2:3c:76:d6:d2:80:25:ba:1c:07:73:b4:4c:e5:
36:4c:9e:40:a9:53:e7:ed:72:f8:65:c9:af:81:96:39:8e:e8:
40:f4:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:40 2025 by rpki-client