Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa
File: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (raw, json)
Hash identifier: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=
Subject key identifier: 6C:24:5C:F6:E4:31:10:14:DD:AB:F9:88:A5:03:1E:7A:E5:F0:DD:B2
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 01941FFA7838668AD9FE38B83ABC51E98B24
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201225
IP address blocks: 185.236.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:78:38:66:8a:d9:fe:38:b8:3a:bc:51:e9:8b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c245cf6e4311014ddabf988a5031e7ae5f0ddb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:fe:9c:02:03:06:1a:d6:ec:e3:ef:43:e7:
ab:80:dd:c9:9e:cc:08:c4:b3:3f:2c:27:c1:fc:93:
bb:49:f3:75:fd:ab:b9:17:36:a6:b3:8a:ad:e2:cf:
4e:c6:12:30:ca:22:e4:72:a5:ec:83:ff:51:35:c1:
f3:aa:dd:d4:be:bd:b2:b8:5d:c7:de:de:39:13:ee:
e5:b0:be:85:75:9f:80:6a:1c:a7:3b:70:43:b9:d3:
d5:dd:3d:9a:89:a4:72:f5:83:36:a6:81:af:c2:ca:
40:81:3c:9c:3c:3c:33:75:ae:fa:55:da:11:b4:ac:
fd:cc:f7:66:86:a4:c1:e6:ae:0d:cf:af:dc:0f:cd:
47:e6:c8:50:c3:aa:89:fe:1c:ba:8d:e9:fe:c7:07:
81:d3:c0:8e:48:b4:34:42:59:af:8f:70:bc:43:dd:
1a:d9:a8:15:98:70:48:55:40:5e:4e:6c:db:2d:3e:
8f:2b:ba:d4:38:c3:fa:62:d2:68:62:20:bd:d3:fd:
41:0c:24:71:1a:f3:3d:f0:e3:7c:87:89:39:89:68:
32:af:2e:76:87:9f:ed:7d:0d:50:f9:37:e7:77:b6:
6a:6e:20:f6:3f:85:1c:33:1b:a3:73:24:3d:fe:64:
ee:3c:e5:78:93:b9:25:32:62:0d:f9:ad:b5:b3:6a:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:5C:F6:E4:31:10:14:DD:AB:F9:88:A5:03:1E:7A:E5:F0:DD:B2
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.180.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3e:91:42:ab:0a:de:f0:08:85:6c:32:3c:2a:16:98:99:7a:
2e:a6:14:28:ab:f8:b5:58:b1:26:57:f0:74:74:ef:6e:9f:2f:
84:b4:cf:df:6e:08:8f:54:32:7b:42:df:b9:de:83:f3:b8:df:
ef:c0:0a:0d:a8:a1:92:79:f1:8a:b1:26:bb:af:80:0e:65:22:
68:1e:21:30:fc:f1:08:f4:45:d7:ae:f6:2a:a4:b4:23:22:44:
fa:08:26:50:e8:24:98:97:38:a5:04:aa:d3:5b:24:f5:1b:16:
84:7d:a5:ae:af:10:01:05:20:46:da:5e:14:09:32:9c:a6:2a:
92:a5:47:69:82:e3:1a:aa:ff:3a:b7:0b:19:08:28:0e:98:57:
7c:de:de:a2:ee:72:5c:5d:79:97:c1:16:93:7f:c2:75:7d:d7:
5f:db:98:42:88:51:85:c0:36:b4:3c:ec:44:ba:5d:c1:7c:1e:
a3:f2:00:c6:df:9d:e8:8a:5b:9b:06:74:60:28:08:58:b1:4d:
66:b8:d0:32:cd:00:68:4f:c3:68:a6:4c:93:07:6e:ab:10:08:
4b:6e:ff:0e:98:8e:f1:a2:6b:d6:82:be:17:ec:98:fc:68:60:
46:63:57:32:6c:e1:3b:37:62:ce:5c:0e:7d:1d:5f:a2:74:55:
81:e2:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:15 2025 by rpki-client