Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/JUWn6tZ6js3OQBG2kVmBzCYaASs.roa
File: JUWn6tZ6js3OQBG2kVmBzCYaASs.roa (raw, json)
Hash identifier: ZWaMncDoxletMNjHKIW8FwbEakDn9YubUJeGI0AcYdQ=
Subject key identifier: 25:45:A7:EA:D6:7A:8E:CD:CE:40:11:B6:91:59:81:CC:26:1A:01:2B
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 01966B7A785CB2F45C3B326BE05F234DC7B7
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/JUWn6tZ6js3OQBG2kVmBzCYaASs.roa
Signing time: Fri 25 Apr 2025 05:45:10 +0000
ROA not before: Fri 25 Apr 2025 05:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 178.236.181.0/24 maxlen: 24
178.236.182.0/24 maxlen: 24
178.236.186.0/24 maxlen: 24
178.236.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:7a:78:5c:b2:f4:5c:3b:32:6b:e0:5f:23:4d:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Apr 25 05:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2545a7ead67a8ecdce4011b6915981cc261a012b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:69:a5:40:54:99:1e:aa:bf:c6:b7:96:f5:
c2:b5:9d:e9:a8:e1:1a:d3:bc:8e:33:87:d1:5f:4a:
77:26:cf:b1:7a:bf:bf:09:44:50:71:85:a1:ab:0f:
aa:e1:f3:8f:4a:72:d0:67:8e:ea:d6:cc:73:11:63:
78:ce:4e:6b:ab:83:79:bd:e9:07:5d:a2:93:e7:4c:
e7:b7:75:39:a0:95:21:5d:cf:32:b2:b6:7b:a5:e5:
43:cd:2d:bb:73:5f:8d:31:3d:90:9a:61:48:69:f8:
cb:37:3c:f0:f1:18:cb:12:33:6c:17:34:54:a7:6a:
30:57:e9:1d:26:61:a1:74:96:a1:b3:b1:8a:c4:34:
c2:d5:d2:b0:bf:10:93:1a:b6:c1:bc:b0:cd:8b:61:
dd:81:3c:16:b6:7d:49:53:a3:ae:c9:31:3d:36:9a:
70:56:7f:02:16:65:bb:2a:91:ee:4c:be:82:0a:c8:
fd:ba:5d:70:91:08:1c:b2:e0:c0:45:f5:e1:87:b4:
60:6d:5c:e1:4a:7f:74:88:31:8c:2e:ae:f2:ce:e5:
37:cc:c7:28:68:47:93:39:18:0e:ba:0c:9e:b7:51:
bf:51:7d:ff:97:e2:a6:18:0f:7b:2f:74:52:e0:41:
96:2b:a9:9a:37:96:a9:f7:e8:a5:1b:12:ca:80:a3:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:45:A7:EA:D6:7A:8E:CD:CE:40:11:B6:91:59:81:CC:26:1A:01:2B
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/JUWn6tZ6js3OQBG2kVmBzCYaASs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.181.0-178.236.182.255
178.236.186.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:17:17:dc:a1:ee:36:3b:29:6e:e2:29:c0:a1:da:4f:a6:6e:
cf:46:a4:29:2d:06:60:ed:69:a9:db:71:70:ce:d4:b8:e0:eb:
38:18:10:7f:16:a5:d0:0a:3f:38:61:92:94:13:8a:04:23:9d:
69:f6:92:78:32:1a:fd:ed:62:54:ae:97:53:fe:7a:ec:0a:ab:
66:ed:a9:e8:c8:6f:53:c5:c9:d3:81:77:ef:47:e3:e3:9c:fa:
65:56:a4:2b:2b:29:fc:64:7c:79:97:41:65:f1:7f:23:2d:96:
b9:d3:70:38:2c:2e:f1:a3:b0:27:bc:41:ac:49:e8:28:90:cb:
f6:bc:4d:91:16:56:a1:ba:c1:67:23:5e:17:e5:6e:6c:53:6a:
c0:06:63:d5:32:a7:81:59:24:90:54:6a:1e:e9:19:e6:31:12:
31:92:29:14:71:33:49:46:a1:d1:da:28:25:73:57:41:d1:ad:
56:56:1e:8d:27:87:b7:6e:ad:e8:1b:0f:5c:74:2d:ce:93:13:
07:0d:54:98:f2:bd:c1:47:76:36:41:8d:be:88:73:c8:25:d5:
39:15:d4:40:8c:18:e1:94:32:a8:84:83:67:15:53:ff:45:de:
1b:d3:41:3b:6c:50:ae:41:10:e6:9c:6d:69:07:d4:19:3d:ff:
f3:71:f4:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:28 2025 by rpki-client