Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/xewq6JL7wUlqxM-_oFBJPbWzZVw.roa
File: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (raw, json)
Hash identifier: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=
Subject key identifier: C5:EC:2A:E8:92:FB:C1:49:6A:C4:CF:BF:A0:50:49:3D:B5:B3:65:5C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 01941F8C4B70632FB0E3B7613CADDDD7EBC9
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/xewq6JL7wUlqxM-_oFBJPbWzZVw.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201602
IP address blocks: 185.241.144.0/24 maxlen: 24
185.241.145.0/24 maxlen: 24
185.241.146.0/24 maxlen: 24
185.241.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:70:63:2f:b0:e3:b7:61:3c:ad:dd:d7:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5ec2ae892fbc1496ac4cfbfa050493db5b3655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:f4:af:d7:0f:1f:ef:00:27:e4:8c:36:b3:
05:ad:0f:f6:4d:70:1c:cb:3f:ae:46:52:cc:17:85:
fb:04:5b:e8:bf:f2:c9:ac:b4:69:41:6a:78:f1:7d:
f4:f6:32:62:09:f1:5d:b1:0e:0b:3f:01:c9:db:5d:
a1:8f:d1:91:b0:0b:e7:0e:fd:63:50:10:88:9c:d8:
7e:4a:7a:df:83:22:f2:15:c8:1b:d8:47:e9:a7:81:
69:a9:48:8f:e8:5a:3f:27:cd:fb:99:20:c0:87:7d:
11:c2:0d:ef:8e:74:e5:29:39:ca:2a:9f:1e:29:c9:
bd:ff:c9:b2:1d:c0:de:a2:32:6a:07:0d:d1:58:f7:
9d:93:ad:de:68:3a:98:67:38:89:0e:39:56:f6:ad:
b8:21:22:c5:3b:ec:03:e2:81:97:40:3d:3e:d6:68:
68:b3:95:9d:f6:04:b7:5d:ee:b7:de:57:0d:ba:c9:
d7:3d:fd:70:0a:1a:de:55:23:8b:86:4c:2e:d8:eb:
37:f8:81:f1:02:dc:3f:8a:7e:97:f5:b1:51:37:f7:
da:39:3f:f6:ea:2a:44:b8:ab:bf:18:8b:c1:dd:64:
54:a1:7a:d3:e0:61:48:f5:0e:8a:04:e4:ff:a9:f0:
e0:09:31:41:45:85:f1:1a:32:07:df:14:47:39:d8:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:2A:E8:92:FB:C1:49:6A:C4:CF:BF:A0:50:49:3D:B5:B3:65:5C
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/xewq6JL7wUlqxM-_oFBJPbWzZVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.144.0/22
Signature Algorithm: sha256WithRSAEncryption
37:09:00:89:75:c6:0e:e2:92:5a:da:50:0d:8e:cc:cc:fd:f6:
97:9e:ad:3c:b2:eb:ce:5c:35:e9:39:d8:62:3c:a3:bd:5d:69:
8f:66:83:78:ec:66:50:7b:ac:e1:47:ff:4a:88:72:7f:63:b3:
c4:18:ca:ad:9b:9e:e2:44:19:69:cb:a6:79:66:9c:22:59:21:
9f:66:45:a1:46:8f:25:ae:87:54:31:0d:7d:cc:29:19:61:1c:
3b:98:a3:5b:00:25:9c:52:dd:f6:83:23:ad:9c:ab:1c:9b:e8:
08:3f:e7:8e:17:c0:61:17:ae:cf:a1:b1:b3:c1:ae:90:6a:35:
ea:55:d7:63:7f:36:82:f1:14:2a:59:72:52:e9:d8:e7:e8:46:
9a:b2:a7:5c:a2:06:2e:cf:bb:6a:77:b9:d0:8d:a2:53:14:ce:
33:a4:c6:cb:65:41:b2:1d:f3:b8:a6:02:b9:c5:9e:de:be:2e:
ae:c4:d9:d6:6c:d3:c2:23:94:c9:aa:16:9e:18:ea:53:31:59:
7a:93:3f:70:9c:0b:d1:97:9b:f1:6a:14:ad:bf:1e:68:77:0f:
5c:37:c7:62:04:f5:83:18:2a:96:61:76:66:21:eb:8e:74:42:
8b:31:2e:29:f3:58:ab:63:21:07:c3:d4:1d:00:ab:8d:ff:28:
fd:4c:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:02:28 2025 by rpki-client