Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/07VM5GQDyy0wcSk66eg9Nc4GYr0.roa
File: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (raw, json)
Hash identifier: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=
Subject key identifier: D3:B5:4C:E4:64:03:CB:2D:30:71:29:3A:E9:E8:3D:35:CE:06:62:BD
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 0194228DED581237E91E9FCE2F7C3660E246
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/07VM5GQDyy0wcSk66eg9Nc4GYr0.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48943
IP address blocks: 185.254.140.0/22 maxlen: 22
2a0c:4e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ed:58:12:37:e9:1e:9f:ce:2f:7c:36:60:e2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3b54ce46403cb2d3071293ae9e83d35ce0662bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:97:d5:85:1e:25:eb:7a:cc:06:6f:28:60:
f3:df:39:35:43:97:c0:73:9a:d3:57:ac:1d:d2:c9:
63:b9:eb:90:48:18:d6:84:d7:55:85:0d:78:a8:f1:
15:6d:aa:ed:3c:7f:de:f7:c1:da:d0:3c:09:5a:b9:
4b:1f:37:2a:82:ec:9a:56:3b:7d:9f:25:5e:84:5d:
57:1f:56:21:a8:2f:8d:90:ca:0a:82:af:10:1c:f6:
fe:9e:d3:99:8c:0f:06:bb:e6:51:27:89:e2:17:93:
da:bb:56:aa:8f:93:0f:a8:3b:7a:dc:46:d2:cc:27:
80:c9:4d:fe:67:63:c7:72:33:0d:b3:ff:74:6e:2b:
f1:6b:06:9c:36:40:e4:c1:33:51:ac:c9:96:11:5f:
85:e3:63:f6:c4:cb:cd:7b:08:e4:ee:b0:30:dd:63:
70:af:93:e8:fb:1b:e7:d6:d9:ca:d8:71:f4:62:8d:
57:00:bc:2a:7e:16:12:2a:53:24:4a:17:0e:eb:b6:
b8:c6:72:06:0c:d6:f7:fe:5f:41:cd:08:bd:a7:5f:
37:e7:77:77:55:fd:d5:af:e4:32:ac:99:1a:c0:4a:
41:95:22:95:e8:fa:df:b3:db:8e:7e:9a:dd:2c:37:
0c:d4:67:2e:93:cb:84:9a:e3:5e:f0:e5:d1:e3:55:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:4C:E4:64:03:CB:2D:30:71:29:3A:E9:E8:3D:35:CE:06:62:BD
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/07VM5GQDyy0wcSk66eg9Nc4GYr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.140.0/22
IPv6:
2a0c:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
ce:f5:75:8f:d2:88:33:02:18:05:86:d8:a1:aa:7b:e6:7c:c6:
95:43:c6:22:bb:4f:37:67:40:b6:3f:d3:0f:3a:94:35:4b:2c:
47:c1:a4:f5:59:0f:6d:9f:ee:b9:39:26:01:59:bc:4f:38:d9:
24:c4:e6:14:55:b8:cc:3f:83:1b:87:21:99:eb:c4:3d:e7:c6:
a9:d4:b3:43:63:62:c9:b5:23:af:f1:9d:4d:27:97:1e:35:b1:
8d:46:c7:ed:9a:50:a5:4a:db:f1:0e:96:f7:21:e7:95:67:97:
99:36:29:fd:bd:db:0f:71:02:3f:a8:49:89:54:b4:76:7b:67:
78:57:64:18:ce:a3:7d:ac:f3:29:6d:87:9b:2e:10:c3:30:7c:
8a:ce:7b:a4:4c:53:7f:0f:24:48:1e:85:de:81:c7:1e:40:6e:
8d:14:4d:32:3c:ea:9f:d0:fe:1f:bc:ef:13:b2:27:cc:02:a7:
56:34:72:dd:16:1a:21:3e:05:12:51:40:ac:ce:92:57:1c:55:
3a:9a:24:46:ca:11:3f:b3:8c:7d:5b:7e:18:5c:47:fd:ea:28:
98:6a:3c:47:fe:7c:32:0a:25:c3:f3:e7:58:92:a6:6b:65:2d:
b7:ed:44:bf:2b:82:57:64:70:2c:6a:2a:ac:27:cd:f3:6e:c9:
2b:a2:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:34:33 2025 by rpki-client