Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/C_VxgsrOTNHfcbo19nO36kuNZTY.roa
File: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (raw, json)
Hash identifier: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=
Subject key identifier: 0B:F5:71:82:CA:CE:4C:D1:DF:71:BA:35:F6:73:B7:EA:4B:8D:65:36
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 0194236A4FDDFAA6CEFE2D109C1FD5D94FC4
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/C_VxgsrOTNHfcbo19nO36kuNZTY.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200735
IP address blocks: 185.140.252.0/24 maxlen: 24
185.140.253.0/24 maxlen: 24
185.140.254.0/24 maxlen: 24
185.140.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4f:dd:fa:a6:ce:fe:2d:10:9c:1f:d5:d9:4f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bf57182cace4cd1df71ba35f673b7ea4b8d6536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:c0:bf:aa:7c:6f:ad:39:86:e6:8f:3a:26:
6e:81:d1:bc:49:89:c5:af:c8:f7:77:47:b4:97:05:
25:4a:f8:9a:ec:8c:e2:70:81:99:37:ec:db:49:50:
ca:fc:67:7e:6a:03:b2:29:cb:5d:14:fa:11:75:30:
b7:96:3c:3f:ad:1a:80:a9:0b:52:b6:6c:54:46:18:
ef:0b:bc:31:c0:14:a8:76:79:cb:24:5e:b7:90:27:
07:ae:8d:01:65:4a:f5:b3:0c:39:7c:a5:ee:4a:0c:
6a:de:86:b9:fc:c2:cd:c7:cd:0a:1d:1f:56:c5:96:
11:bf:1c:4f:23:a0:12:ab:0c:09:f7:ed:2b:20:ed:
7c:50:5e:87:04:e9:5d:b6:a5:d6:3c:0c:10:a4:6b:
7e:d3:e4:fb:42:e7:18:13:42:22:13:48:dd:b3:26:
e5:80:ab:5d:06:a0:44:66:49:5a:eb:79:f0:7b:39:
df:d6:88:38:b9:5a:5e:25:8b:9a:d7:f2:0a:49:69:
2f:65:6f:e3:a6:ae:5f:5e:67:de:dc:99:a4:b5:fd:
e8:cf:44:5d:df:5c:8c:d5:8d:26:6a:58:70:6b:74:
00:3e:a6:6a:fe:88:d1:4c:81:5a:68:94:1e:88:4f:
b8:c2:89:d3:8b:4b:6c:32:f0:01:c6:0d:9d:a9:cd:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F5:71:82:CA:CE:4C:D1:DF:71:BA:35:F6:73:B7:EA:4B:8D:65:36
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/C_VxgsrOTNHfcbo19nO36kuNZTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:29:02:94:b3:a0:a8:ff:65:ef:29:72:45:b2:a4:c8:69:52:
b2:9c:12:84:e0:36:e7:1e:24:96:88:6a:37:ce:07:09:5f:ca:
5c:aa:f4:bd:e7:37:17:45:07:39:f6:dd:33:47:bc:31:cd:e5:
5e:c4:99:8e:a2:31:bd:53:37:ac:06:fd:42:87:3a:52:77:f3:
51:39:e5:79:49:76:22:73:6d:4b:50:09:89:4a:87:ba:48:64:
b0:3c:02:14:b9:e5:43:20:c1:b8:e2:70:0a:8b:43:7d:07:9d:
d7:86:33:01:d3:cc:a8:11:86:d0:81:f9:1e:0f:b1:62:51:b5:
2a:96:dc:86:04:83:30:98:60:17:ec:43:a0:e6:c9:c3:20:08:
db:28:83:5f:77:2e:58:91:a3:23:78:c2:c5:5f:15:0d:c4:a8:
34:2f:65:6b:0d:60:ca:71:80:01:1e:43:cb:2c:a8:92:37:df:
9e:5c:5a:59:ad:96:d8:3c:8e:c2:6f:32:ca:88:51:19:2a:e7:
86:cf:9f:ef:40:a1:d4:bc:62:cf:51:70:dc:e0:fd:26:97:66:
5b:80:73:37:43:8b:ad:89:aa:6d:97:4a:a2:5b:d7:62:55:d1:
36:88:74:4d:77:c2:6c:b7:2a:95:e3:9b:5c:ff:69:38:a8:99:
83:bf:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:00:53 2025 by rpki-client