Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/MxdOOGKjf3TwBVC6lvhNhwB4_8Q.roa
File: MxdOOGKjf3TwBVC6lvhNhwB4_8Q.roa (raw, json)
Hash identifier: 5fj9W4zcJFTLUMtVyudn5yxVF316NgWFNmNlngfvVcI=
Subject key identifier: 33:17:4E:38:62:A3:7F:74:F0:05:50:BA:96:F8:4D:87:00:78:FF:C4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 0194C0C384CA314EFE4F44482C4A344DEA87
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/MxdOOGKjf3TwBVC6lvhNhwB4_8Q.roa
Signing time: Sat 01 Feb 2025 09:07:06 +0000
ROA not before: Sat 01 Feb 2025 09:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205376
IP address blocks: 185.220.148.0/22 maxlen: 24
185.220.148.0/24 maxlen: 24
185.220.149.0/24 maxlen: 24
185.220.150.0/24 maxlen: 24
185.220.151.0/24 maxlen: 24
194.45.71.0/24 maxlen: 24
2a0b:f840::/29 maxlen: 32
2a0b:f840::/32 maxlen: 32
2a0b:f841::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c0:c3:84:ca:31:4e:fe:4f:44:48:2c:4a:34:4d:ea:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Feb 1 09:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33174e3862a37f74f00550ba96f84d870078ffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:9d:ea:e6:08:63:e7:43:5a:96:ec:b1:a5:
2e:c2:bb:ec:3b:ee:af:e5:cf:ab:87:1d:87:84:00:
3a:57:fc:6d:02:76:a8:ca:04:c7:7f:98:70:85:62:
0a:fb:bd:ec:26:a3:df:d7:08:8d:a8:49:c6:75:79:
11:99:41:8d:66:d0:2f:eb:cd:96:4f:4a:37:77:d1:
42:fd:cf:ab:3d:4a:39:ec:3d:34:7d:63:3b:35:00:
bc:37:8b:b4:8a:f9:e6:c8:79:5e:63:fd:c5:05:b3:
19:3a:2b:e3:17:fb:ee:4d:d4:c6:5a:53:f3:ea:e2:
83:58:a3:b5:1e:15:b7:91:ad:32:42:89:10:3d:09:
70:16:4f:17:f0:b7:72:9a:aa:86:59:55:a0:d0:a5:
49:f1:26:bf:ab:f5:dd:60:48:08:a2:18:cd:37:09:
d4:b1:31:6a:6e:87:3b:1d:a6:30:d8:93:e0:c6:40:
4f:d0:da:0f:d6:9c:50:5b:2d:6d:27:c6:62:1f:61:
f2:aa:7d:8d:43:b5:bb:42:53:b4:1b:ea:93:0e:8e:
f6:98:d8:09:fd:89:a9:eb:78:53:3e:46:d1:3b:0e:
24:1c:37:54:70:db:fc:2b:a6:22:00:17:cd:8d:93:
58:fe:6b:f8:38:15:7f:a8:66:0c:ca:f1:b5:24:b0:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:4E:38:62:A3:7F:74:F0:05:50:BA:96:F8:4D:87:00:78:FF:C4
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/MxdOOGKjf3TwBVC6lvhNhwB4_8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.148.0/22
194.45.71.0/24
IPv6:
2a0b:f840::/29
Signature Algorithm: sha256WithRSAEncryption
10:50:d3:b7:d8:04:c1:a7:5e:9f:bc:3f:4f:ab:41:1d:5f:fb:
80:93:00:be:bd:d1:ac:dd:12:f5:c3:e8:df:43:05:32:33:de:
44:55:e0:09:bc:07:fa:d1:e6:11:fe:31:11:4f:e9:3b:cc:e3:
c7:bf:bc:ee:43:33:2f:05:cd:19:db:41:81:c2:3e:95:34:02:
f1:01:29:ef:36:e4:01:6c:57:05:a7:6e:1f:7a:1b:4a:88:8e:
15:8c:57:78:2a:73:02:69:d0:a8:6f:4d:59:97:a6:fd:1f:77:
ad:5a:7c:b4:7b:35:88:fc:70:97:b9:2a:2c:b1:28:59:a0:81:
37:dd:fc:78:bb:48:c6:6d:a9:96:f2:1e:38:c2:3c:c7:35:46:
84:02:01:e0:f3:6c:ed:9e:47:f1:08:9e:59:df:a3:f2:e4:1d:
e1:e4:d7:b2:31:90:70:b0:1f:c8:d6:30:4b:38:bb:bc:cc:d3:
65:18:a8:b1:cc:b5:85:bb:e5:84:cd:9b:4b:44:f1:64:b8:39:
e4:73:3d:4e:8b:f0:40:92:69:0e:d5:b2:e5:83:bb:98:fd:31:
80:90:57:8c:06:fe:b6:19:e3:5b:4b:3a:32:d7:74:8c:db:23:
3f:6b:22:e8:6b:63:c4:44:3f:98:cc:51:97:4a:a7:e3:04:33:
3f:02:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:54:13 2025 by rpki-client