Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/sociFAoZ9Fk3G3CziQXuWjc_tPc.roa
File: sociFAoZ9Fk3G3CziQXuWjc_tPc.roa (raw, json)
Hash identifier: udf9UdObLF2TzxfJDP0XmSNS06eQxn4HxbhQF0p8yZs=
Subject key identifier: B2:87:22:14:0A:19:F4:59:37:1B:70:B3:89:05:EE:5A:37:3F:B4:F7
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 0194244489F2D6ADFB66B85196297A346852
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/sociFAoZ9Fk3G3CziQXuWjc_tPc.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12935
IP address blocks: 185.173.4.0/22 maxlen: 22
213.179.0.0/19 maxlen: 19
213.179.0.0/20 maxlen: 20
213.179.16.0/21 maxlen: 21
213.179.28.0/22 maxlen: 22
2a02:6980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:89:f2:d6:ad:fb:66:b8:51:96:29:7a:34:68:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b28722140a19f459371b70b38905ee5a373fb4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:3e:de:9a:1c:12:a9:1a:ee:df:24:10:4b:
3a:c0:28:e1:43:f6:80:1d:7b:d3:05:44:02:17:fb:
67:28:54:21:9f:98:2c:fb:3f:4c:60:74:22:22:a3:
f8:eb:e1:9d:b8:bd:18:0b:91:22:5e:97:83:39:d2:
35:27:e8:82:0a:b1:5c:a8:ec:78:b3:7b:fb:0d:ac:
c7:9e:c6:a1:ad:18:a6:aa:52:f9:b2:bf:3e:73:78:
10:09:41:da:a8:1e:5d:7c:d9:08:74:ca:7e:9b:b9:
cc:a1:7d:e6:8e:11:12:21:fc:d7:b5:f6:6f:a0:b4:
dc:9a:53:e2:97:76:f6:53:3a:71:54:2d:2a:30:d5:
70:42:74:12:22:2d:e5:15:94:6f:7f:2d:52:04:6a:
44:bb:ff:0b:3d:07:29:85:3e:a0:b5:03:35:3f:36:
e8:31:41:a3:04:c8:7e:e4:a8:5d:7c:04:00:4b:f4:
7d:65:4a:bb:6f:2e:9e:35:bb:98:29:12:de:f8:e5:
66:07:3f:2d:ea:fb:7a:83:6a:2e:c9:f8:42:c8:33:
c5:53:09:3a:a0:9e:d9:ce:14:0a:d1:dd:14:99:01:
1a:bf:90:f3:54:fd:23:90:97:ad:69:2b:ad:b4:1f:
4f:37:bd:bf:aa:f3:12:18:ad:be:39:6c:91:d9:ee:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:22:14:0A:19:F4:59:37:1B:70:B3:89:05:EE:5A:37:3F:B4:F7
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/sociFAoZ9Fk3G3CziQXuWjc_tPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.4.0/22
213.179.0.0/19
IPv6:
2a02:6980::/32
Signature Algorithm: sha256WithRSAEncryption
e6:b3:8f:31:08:0c:06:7c:e2:f4:95:70:71:b9:28:e3:26:20:
d6:30:d4:ea:4d:0d:04:db:55:0d:a0:2f:eb:ae:62:94:12:56:
3e:84:f8:c4:8b:20:95:01:d7:1e:c2:9b:b5:95:ff:b3:1d:68:
82:8b:e6:81:f8:45:0b:09:5e:14:0e:e2:59:51:d1:a7:6b:fc:
c3:f3:88:2b:34:9f:46:d6:cb:f3:65:03:83:07:a6:f1:68:23:
31:25:4b:66:ad:75:96:37:81:25:f9:b0:ce:b9:b2:7f:a4:2f:
a6:14:bf:45:62:24:4d:ac:29:54:03:3f:08:df:a6:78:0c:a5:
f7:31:d0:0c:12:89:30:ea:c8:05:8d:b1:91:15:50:b8:e3:98:
c7:76:aa:de:39:91:00:1b:e7:dd:c7:1c:b8:3e:17:e8:04:8f:
49:05:37:68:6b:da:f1:05:0f:8b:e0:21:24:f5:56:26:eb:6d:
76:de:91:1a:ea:a8:20:d1:26:42:0c:5e:47:cf:c0:bd:40:b7:
85:7d:f5:2a:c7:1a:1d:fe:89:17:2c:a8:b6:b4:3b:39:bb:56:
a7:94:fe:c2:c7:9b:f4:36:8e:72:eb:e7:e2:9a:f4:0e:92:d1:
ff:f8:89:30:ed:34:33:0f:88:41:da:12:1f:6b:7a:22:cc:01:
ad:71:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:47:13 2025 by rpki-client