Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/U1IJdlbbqYMq74Zgnki2ng7hcKM.roa
File: U1IJdlbbqYMq74Zgnki2ng7hcKM.roa (raw, json)
Hash identifier: 9WBhhRCHZxnvz9Na6TAE6zXjUSCL0zXJBZDCKRLKqvc=
Subject key identifier: 53:52:09:76:56:DB:A9:83:2A:EF:86:60:9E:48:B6:9E:0E:E1:70:A3
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 01941F8C47BDC99DAC6F93111FFB9146E93A
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/U1IJdlbbqYMq74Zgnki2ng7hcKM.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213075
IP address blocks: 185.243.84.0/22 maxlen: 22
185.243.84.0/23 maxlen: 23
185.243.86.0/23 maxlen: 23
185.243.86.0/24 maxlen: 24
185.243.87.0/24 maxlen: 24
193.200.250.0/24 maxlen: 24
2a0d:d81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:bd:c9:9d:ac:6f:93:11:1f:fb:91:46:e9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5352097656dba9832aef86609e48b69e0ee170a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:6e:30:76:3d:1c:22:12:1d:8c:33:3f:94:
28:67:8f:12:bb:0a:09:75:5a:6f:ec:d8:46:01:34:
d3:af:b9:29:19:a3:de:0c:c8:b9:e4:a6:8d:75:b0:
b5:bf:9c:3e:6b:93:2d:16:e4:02:2c:13:42:79:9e:
cb:6b:72:f7:8f:36:20:41:87:14:bd:b4:af:5e:c8:
22:31:52:fc:69:2f:f1:bf:77:1d:a3:4a:66:45:14:
53:99:13:eb:eb:10:9a:a6:f4:1e:7a:13:20:5f:e2:
b1:9d:3a:a8:0f:b2:29:a5:f7:f2:21:2a:48:45:86:
d6:ea:8b:6d:76:dd:6c:2d:68:8e:c8:0b:38:39:b8:
9f:65:5d:bc:64:0a:18:72:f2:81:cb:80:b8:93:69:
91:f4:6a:0b:63:91:59:ff:6f:22:f4:55:52:c1:39:
16:d6:fd:ff:e7:02:21:3d:e9:21:c9:e4:b0:f2:81:
35:64:ba:1c:ae:9c:35:08:b6:1f:77:e2:60:51:93:
14:e6:44:ba:8d:d6:1b:d3:7d:0e:ad:3a:c5:bf:74:
55:30:76:e0:01:f1:2a:31:9b:55:e9:26:8e:83:ce:
56:d7:42:d3:d1:34:d9:c7:9c:b3:4a:6c:e6:83:d3:
78:fd:c6:a8:e2:bf:f9:59:88:c8:4a:97:8f:f0:b5:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:52:09:76:56:DB:A9:83:2A:EF:86:60:9E:48:B6:9E:0E:E1:70:A3
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/U1IJdlbbqYMq74Zgnki2ng7hcKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.84.0/22
193.200.250.0/24
IPv6:
2a0d:d81::/32
Signature Algorithm: sha256WithRSAEncryption
6f:fc:bb:db:90:53:42:e6:c9:25:f9:07:e9:c7:92:78:f1:d4:
ac:9b:5e:88:f4:a5:c9:7a:56:b3:31:6e:6b:48:2d:62:5e:bb:
a1:87:17:c6:a7:89:f6:30:51:f4:f8:09:18:b9:87:24:12:a7:
49:97:bf:3d:e3:86:e2:1f:b4:18:15:34:3a:1d:55:55:fe:4f:
9f:c4:85:ec:60:6d:ce:7f:e6:ed:7f:16:da:f6:ba:d1:a4:4c:
21:9e:34:b2:80:ac:a8:66:67:d8:9e:18:99:7b:a9:de:fe:66:
70:dd:67:28:2a:e3:34:82:cf:91:45:0f:03:cb:c0:b3:e0:db:
84:4a:90:2a:4f:cc:c9:04:9b:64:6b:b7:8b:00:b3:c1:97:76:
44:44:77:69:a8:bd:31:af:bc:7b:63:5d:e6:09:a3:f3:6c:6e:
b7:b3:0f:82:a2:04:bd:35:62:16:a1:25:f6:1d:b0:57:16:3f:
89:58:9d:52:d7:d2:24:bd:69:3e:f9:7a:15:8e:71:16:9c:a7:
e3:68:e8:5f:14:69:91:a0:fc:54:78:69:2e:68:30:e4:ec:f3:
fb:5f:18:ee:bf:8d:e9:ee:9b:64:96:e0:01:7c:87:1a:1f:29:
ed:8e:9d:2d:40:97:05:9d:e7:93:da:c7:63:65:6c:2f:62:dc:
7e:d4:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:15 2025 by rpki-client