Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/H2zFxLl2vd3jDHZ3ywYA0G2xNqg.roa
File: H2zFxLl2vd3jDHZ3ywYA0G2xNqg.roa (raw, json)
Hash identifier: BqYmH/iAX0kcbukEf4yVg0L7f2FSyF2VTeMlZRZQfsw=
Subject key identifier: 1F:6C:C5:C4:B9:76:BD:DD:E3:0C:76:77:CB:06:00:D0:6D:B1:36:A8
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 01942144556F1A5C46553E7E809273EB0DE3
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/H2zFxLl2vd3jDHZ3ywYA0G2xNqg.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25310
IP address blocks: 83.146.0.0/18 maxlen: 18
84.9.0.0/16 maxlen: 16
87.74.0.0/15 maxlen: 15
212.158.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:55:6f:1a:5c:46:55:3e:7e:80:92:73:eb:0d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f6cc5c4b976bddde30c7677cb0600d06db136a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:27:92:c9:e5:16:8d:b0:1e:79:f7:b7:e9:
e2:e2:49:38:22:01:32:5e:17:c8:ce:7a:7c:2f:fc:
a7:7c:20:ea:8a:26:1c:c6:b2:49:70:15:18:ff:c9:
f9:b7:44:79:3c:45:77:c4:64:ea:cc:cc:17:23:e7:
4e:6f:56:2a:4f:0b:a7:ab:92:a9:86:64:65:24:6e:
e8:7f:42:2a:74:f8:f9:9a:58:ba:ea:09:83:e0:00:
3b:0d:e5:65:b0:0f:c2:4e:c2:8e:2f:e9:0e:46:37:
71:91:0c:88:42:6d:c2:d4:fe:fd:8c:66:57:bd:88:
f1:c6:b9:09:7e:3e:b1:62:8a:31:09:2a:f0:05:91:
d4:1f:46:0e:62:2e:d2:b5:2f:98:6c:0f:ed:0e:1a:
4a:93:cd:ea:ca:25:40:b2:d3:4e:8c:1d:a6:75:25:
68:86:a9:32:96:00:44:9a:03:c5:80:12:0b:11:32:
44:a0:39:18:9d:23:04:00:77:f2:cf:54:3d:62:5b:
84:58:c3:bb:fa:50:51:f4:87:27:5d:0c:06:a3:2f:
8e:d1:43:c8:a9:09:6a:7c:cb:a7:68:54:59:c6:a8:
58:82:aa:b1:be:10:3c:95:c5:a6:c2:de:5d:23:b0:
2e:24:f3:b7:d1:fe:ec:09:a4:02:93:27:05:6f:eb:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:C5:C4:B9:76:BD:DD:E3:0C:76:77:CB:06:00:D0:6D:B1:36:A8
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/H2zFxLl2vd3jDHZ3ywYA0G2xNqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.146.0.0/18
84.9.0.0/16
87.74.0.0/15
212.158.192.0/18
Signature Algorithm: sha256WithRSAEncryption
19:b6:6e:75:88:9f:54:01:7a:8e:7c:fa:40:8f:46:20:cf:ca:
b2:41:72:64:fb:e8:8b:da:f3:4e:51:ca:f9:f7:c8:ad:40:ac:
6c:90:ea:66:c1:6d:5e:36:c3:fd:e2:49:24:47:c1:16:63:f3:
5c:d4:cd:26:21:72:ac:f9:9f:95:5b:67:22:d3:8e:b1:97:3f:
00:85:68:ed:97:97:37:22:ab:1a:c6:73:3a:21:31:41:ad:7b:
ab:36:d2:4f:21:02:24:4c:b7:fc:d5:6e:95:d8:44:fd:69:7a:
27:8f:0a:82:c5:2c:48:a3:3a:e7:ff:79:1f:2e:8c:0c:1c:0c:
f1:f7:02:fb:88:20:ac:c5:19:6c:63:72:4c:e8:46:8d:49:23:
ca:1c:1b:b1:12:c5:7d:46:15:95:c7:57:c2:fe:3e:c9:87:31:
ef:70:e1:17:7e:9e:ea:d9:d9:af:25:e4:6a:13:5f:ea:fe:ab:
f0:e7:b4:66:76:df:c4:7e:12:ec:23:5d:cb:4b:2a:9e:28:50:
c6:54:ec:a4:af:59:6c:f0:f1:ce:c0:62:5a:12:5c:e1:03:a2:
15:33:e0:4e:e2:3e:0f:ba:f7:69:75:55:b1:48:97:76:b5:e1:
0c:bd:e0:b8:06:58:d6:11:bf:1e:6f:ed:e9:a5:31:eb:07:72:
f0:96:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:16 2025 by rpki-client