Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/0fTjjyjaiEMTmN0qEGg30Ao2zns.roa
File: 0fTjjyjaiEMTmN0qEGg30Ao2zns.roa (raw, json)
Hash identifier: bVrLoN7n3oaO1XYgZx8crHTGWgcotUS3skM4/csJhUA=
Subject key identifier: D1:F4:E3:8F:28:DA:88:43:13:98:DD:2A:10:68:37:D0:0A:36:CE:7B
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 01964590F7BCC77D86DB77D9F2843A189571
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/0fTjjyjaiEMTmN0qEGg30Ao2zns.roa
Signing time: Thu 17 Apr 2025 21:04:10 +0000
ROA not before: Thu 17 Apr 2025 21:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49025
IP address blocks: 95.173.200.0/22 maxlen: 24
95.173.200.0/23 maxlen: 24
95.173.201.0/24 maxlen: 24
95.173.202.0/23 maxlen: 23
95.173.202.0/24 maxlen: 24
95.173.208.0/21 maxlen: 22
95.173.208.0/22 maxlen: 22
95.173.213.0/24 maxlen: 24
95.173.214.0/23 maxlen: 24
185.2.40.0/22 maxlen: 23
185.2.40.0/23 maxlen: 23
185.2.43.0/24 maxlen: 24
2a02:a48:f000::/36 maxlen: 36
2a06:5d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:90:f7:bc:c7:7d:86:db:77:d9:f2:84:3a:18:95:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Apr 17 21:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1f4e38f28da88431398dd2a106837d00a36ce7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:39:db:a2:4c:8b:6f:95:9f:bc:64:94:3c:
65:27:ca:5f:e1:bd:13:9f:3b:b4:5c:94:22:c9:4f:
6e:4d:7f:0f:0a:d5:40:8a:51:9d:a5:50:ce:d2:a0:
c8:ae:fe:b3:d4:d3:e6:d6:b2:b7:de:70:f0:d9:3d:
48:ac:9a:15:eb:01:c3:48:cd:66:20:4c:c6:9d:31:
4a:59:39:6d:f7:39:54:41:93:5c:28:c4:97:db:7a:
99:3e:69:2b:0b:05:9f:0a:b9:03:fe:2f:b5:15:46:
4c:4e:e9:5f:13:8e:82:4a:d7:cb:36:87:f9:cb:3c:
0f:30:31:cc:24:d6:91:81:fe:77:28:52:41:58:e3:
d9:87:a8:4e:41:fb:3a:90:bb:07:89:ee:9c:2f:e3:
bb:85:5b:cb:22:0a:5a:21:d3:df:b0:fe:0e:e6:0f:
62:97:e7:0b:8f:58:4a:ca:31:5d:31:70:b5:06:4c:
ca:52:fb:49:2e:3d:2e:80:1f:f3:86:9c:68:92:42:
b5:b6:dc:33:d8:92:78:2a:09:ec:ae:07:fc:31:3d:
21:d9:f3:84:2d:e4:4a:55:1a:6d:52:66:03:ef:db:
be:f3:42:9c:19:8b:48:dd:9a:4e:b9:1b:26:27:1e:
ed:57:82:95:67:3c:aa:f8:16:82:62:9d:32:b6:c6:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F4:E3:8F:28:DA:88:43:13:98:DD:2A:10:68:37:D0:0A:36:CE:7B
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/0fTjjyjaiEMTmN0qEGg30Ao2zns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.200.0/22
95.173.208.0/21
185.2.40.0/22
IPv6:
2a02:a48:f000::/36
2a06:5d80::/32
Signature Algorithm: sha256WithRSAEncryption
04:ac:0b:87:a0:0a:d1:6a:60:31:00:7d:52:af:7d:fa:d9:84:
60:58:9f:84:af:da:0a:d1:b5:93:42:e2:d5:29:57:c7:e6:e1:
9e:d1:b3:be:0a:00:b8:62:74:b4:f6:17:66:96:85:34:83:90:
be:66:86:06:c7:32:b0:7c:cd:7e:02:c6:7f:e9:b9:42:ec:1e:
91:46:15:16:2c:fb:83:0d:7b:99:86:b0:a7:4b:48:2a:23:bc:
e9:16:6e:e7:60:ae:5c:0d:33:6b:bb:10:60:95:60:23:58:67:
00:b7:0e:c9:8b:91:ee:fc:20:46:9b:be:e2:0d:40:30:1c:38:
5b:b8:5b:8c:70:e9:e4:9e:1e:d2:c1:d3:48:80:35:9e:6e:c1:
2a:73:e4:36:83:b7:e5:74:5b:a3:d1:cc:6e:01:9e:9b:21:a8:
24:1d:f4:93:cb:90:6b:fc:5e:50:65:fe:9d:66:40:61:24:a4:
54:f5:dc:ef:0f:f1:7d:b4:da:79:26:e4:9b:64:6d:37:7a:40:
5c:10:8d:5a:8b:75:7a:93:e3:a4:64:b7:d0:b0:c3:96:a6:97:
fa:cf:1f:9e:75:ca:87:6c:3f:7a:52:72:63:d9:8c:a2:08:30:
a9:eb:ae:97:5e:0f:51:61:9d:12:eb:45:cb:31:e1:27:53:17:
7a:a5:3a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:02 2025 by rpki-client