Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/sWNNpgMtdwo9DAGm3hQEfuzD9Oo.roa
File: sWNNpgMtdwo9DAGm3hQEfuzD9Oo.roa (raw, json)
Hash identifier: vP2EAWCKtEv68Ix4O5DKWgGMPVW5lFga8QKrSKSQB2M=
Subject key identifier: B1:63:4D:A6:03:2D:77:0A:3D:0C:01:A6:DE:14:04:7E:EC:C3:F4:EA
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 01965BD24A6808AF7F4D81BA0C90ED61A02D
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/sWNNpgMtdwo9DAGm3hQEfuzD9Oo.roa
Signing time: Tue 22 Apr 2025 04:47:10 +0000
ROA not before: Tue 22 Apr 2025 04:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43274
IP address blocks: 176.114.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:d2:4a:68:08:af:7f:4d:81:ba:0c:90:ed:61:a0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Apr 22 04:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1634da6032d770a3d0c01a6de14047eecc3f4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:d2:95:7d:bf:08:69:4b:af:e9:94:bb:4b:
b1:3c:68:9d:35:31:8f:79:e7:8d:95:cd:c3:85:5b:
d6:e7:7a:75:67:d0:c3:44:89:57:71:52:7b:e7:39:
0d:ea:08:30:68:06:88:28:ef:f4:8d:bf:8e:55:22:
97:19:11:80:df:0a:21:73:1a:6d:f5:b6:6d:a3:ae:
10:9b:14:c4:6c:94:83:87:3e:dd:10:de:8d:ce:89:
a5:7f:31:b1:eb:08:3c:88:0d:53:6f:3b:97:e3:92:
eb:c0:55:20:a5:1c:6c:21:85:50:fe:85:89:4c:75:
5a:16:96:3e:f1:65:7b:bf:79:ee:03:d2:6e:8a:06:
61:0c:69:f6:84:f6:4f:b9:a6:fe:a5:ea:84:10:62:
8b:5e:73:4e:8b:bc:09:73:51:eb:17:4d:1b:80:60:
eb:e6:40:1c:b0:34:ed:f8:50:a5:89:62:81:3c:3f:
e0:3f:3f:de:86:54:03:10:5e:2c:11:26:c8:d0:bf:
ad:d0:e4:b1:5f:6a:81:dd:bb:06:df:41:28:1a:77:
16:78:13:e6:49:fd:86:7e:fa:3c:cf:76:39:06:9a:
26:60:6c:94:03:ed:d0:bd:20:73:60:8d:5e:95:50:
be:7e:b6:cc:e3:00:39:0c:2f:60:4b:36:de:ee:43:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:4D:A6:03:2D:77:0A:3D:0C:01:A6:DE:14:04:7E:EC:C3:F4:EA
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/sWNNpgMtdwo9DAGm3hQEfuzD9Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.189.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9e:df:28:cb:54:a7:b8:53:57:8b:87:c1:f1:f0:91:1f:9b:
02:ef:6c:b2:b7:4e:0e:19:45:3c:cf:ca:af:32:15:b1:2b:0d:
fc:63:39:8c:22:d9:b6:cb:cb:b5:b9:02:7d:89:63:e9:e9:f6:
19:69:48:98:dc:f1:4f:21:44:43:d8:b5:4c:94:36:ff:d7:3c:
a8:79:38:5e:e2:b1:26:f1:de:c8:d3:1f:65:41:6d:23:6d:d8:
a2:55:7e:b1:50:5f:af:d7:09:7f:1a:e1:80:85:67:ee:97:2b:
c4:e3:08:dc:97:ea:6b:ea:ca:64:c9:9a:fd:66:21:30:60:b0:
c0:70:a6:1d:f6:fa:8b:f1:05:a3:24:b8:e2:34:37:c5:75:8a:
14:15:7d:21:af:83:ab:bf:8a:98:d8:4b:b4:c7:63:c2:77:5b:
00:62:14:dc:ba:97:5e:df:1a:bb:da:b5:12:94:03:c6:da:87:
3e:f7:65:29:cc:62:00:dc:7a:f4:fb:f6:13:34:0c:f6:9b:a9:
df:b1:36:f6:89:fa:2d:ef:b3:dc:dc:29:b5:7f:97:55:b6:f6:
08:e3:c0:e1:10:e1:aa:6b:34:14:d4:c0:1d:fd:b9:56:eb:0f:
5e:d8:8c:a3:90:0c:7e:95:af:f0:87:2c:08:a4:d6:d9:8d:21:
25:66:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:25:19 2025 by rpki-client