Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/hEoePDP6Dx0gBaTVWE1noB64nyE.roa
File: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (raw, json)
Hash identifier: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=
Subject key identifier: 84:4A:1E:3C:33:FA:0F:1D:20:05:A4:D5:58:4D:67:A0:1E:B8:9F:21
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019423D7C4F23425DC716BC446CE12F464DD
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/hEoePDP6Dx0gBaTVWE1noB64nyE.roa
Signing time: Wed 01 Jan 2025 21:48:50 +0000
ROA not before: Wed 01 Jan 2025 21:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201958
IP address blocks: 185.42.188.0/23 maxlen: 23
185.42.188.0/24 maxlen: 24
185.42.189.0/24 maxlen: 24
185.42.190.0/23 maxlen: 23
185.42.190.0/24 maxlen: 24
185.42.191.0/24 maxlen: 24
2a04:9140:3003::/48 maxlen: 48
2a04:9140:3043::/48 maxlen: 48
2a04:9140:3044::/48 maxlen: 48
2a04:9140:3104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c4:f2:34:25:dc:71:6b:c4:46:ce:12:f4:64:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=844a1e3c33fa0f1d2005a4d5584d67a01eb89f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:97:f3:96:2a:38:2b:8a:41:fb:a0:cd:72:
67:3a:8e:0e:f3:d2:29:73:fe:42:83:6d:97:80:81:
5e:78:cf:3b:39:5f:2c:5e:b5:a9:09:83:5d:aa:a7:
ba:17:f3:68:eb:35:76:0a:e6:f7:a2:00:89:6d:59:
4d:0e:1e:3c:37:c9:21:2b:1f:47:67:9c:a3:9c:32:
70:36:ee:c9:72:86:2c:b4:41:af:f4:81:3e:30:06:
be:b0:5b:e6:31:2a:7f:4d:4e:cf:ef:dd:99:73:72:
76:c6:c5:37:2d:d5:5b:38:31:a6:1b:38:3d:57:2a:
63:7a:07:8e:de:bd:a6:d8:1e:a8:2a:c4:45:8d:67:
cc:7b:45:60:6f:da:b0:ca:1c:91:cf:6a:ab:6c:52:
20:0a:af:81:ad:c0:90:90:af:49:8e:d7:40:4e:35:
71:92:35:d7:f3:44:e1:38:7a:65:82:fa:d9:c1:e2:
9c:17:27:a2:2e:51:cc:75:3c:28:9a:eb:1b:98:76:
c4:d5:55:68:cc:e5:85:30:24:35:67:24:12:88:ab:
8a:b0:1f:8b:e0:b1:b8:c2:5f:5d:5c:f1:6b:d2:18:
94:8e:fe:e7:fc:b6:3a:cc:41:c9:11:62:f8:25:05:
d7:fe:43:d6:2d:88:b0:11:40:3d:7e:48:3d:44:46:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4A:1E:3C:33:FA:0F:1D:20:05:A4:D5:58:4D:67:A0:1E:B8:9F:21
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/hEoePDP6Dx0gBaTVWE1noB64nyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.188.0/22
IPv6:
2a04:9140:3003::/48
2a04:9140:3043::-2a04:9140:3044:ffff:ffff:ffff:ffff:ffff
2a04:9140:3104::/48
Signature Algorithm: sha256WithRSAEncryption
98:17:73:2e:34:01:87:df:0f:c4:2e:ae:b9:58:32:56:3d:39:
e0:30:c5:fc:6d:2c:d8:a1:7f:86:87:04:1c:9f:e6:61:f7:e2:
6f:d1:b8:b3:54:23:15:dc:47:98:66:8b:5d:19:7f:76:49:69:
a0:0c:18:6f:72:e0:5a:ff:f7:8b:1a:fe:94:62:d5:a3:cc:39:
b2:85:33:a8:4c:d4:5c:dc:1d:3d:0c:9c:12:7c:f6:d0:b5:df:
6b:f8:a2:75:cf:e3:1c:91:5c:48:2b:a9:59:94:90:2c:e5:46:
b5:da:0a:25:42:0a:f9:cf:31:25:75:fe:20:76:46:e2:e9:ac:
5f:33:fd:15:28:d0:f2:fa:94:0c:69:d5:76:98:04:18:8d:63:
bc:05:69:94:69:bc:c9:cc:fb:c8:ae:b7:37:f1:7e:8c:a9:f2:
5d:4d:9b:c1:5c:5d:93:a0:d6:4e:26:c5:34:64:0a:5c:e5:3c:
dd:ba:45:eb:5d:7d:29:dc:5b:40:ec:d5:6c:e9:df:66:fd:c0:
a3:68:6e:b7:52:f3:50:95:cd:99:e8:6b:d5:ac:ca:fb:3b:31:
68:b0:0f:d5:51:9d:c5:57:32:15:77:85:03:9b:f9:ca:89:54:
a5:51:5b:61:42:25:ee:9a:c1:f0:f5:0f:20:0d:ba:9e:ed:c9:
19:f4:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:36:45 2025 by rpki-client