Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/IlxKEGw87TqUrlXSxslSI0lrjjE.roa
File: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (raw, json)
Hash identifier: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=
Subject key identifier: 22:5C:4A:10:6C:3C:ED:3A:94:AE:55:D2:C6:C9:52:23:49:6B:8E:31
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019424B37D2ACC454AA61C134A111D4BE790
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/IlxKEGw87TqUrlXSxslSI0lrjjE.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 185.4.132.0/22 maxlen: 24
185.138.40.0/22 maxlen: 24
2a02:c500::/29 maxlen: 29
2a07:8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7d:2a:cc:45:4a:a6:1c:13:4a:11:1d:4b:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=225c4a106c3ced3a94ae55d2c6c95223496b8e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:72:e3:87:0a:4b:f8:23:54:96:5e:72:7f:
7b:d8:81:41:b2:26:5f:93:9e:9d:d4:77:f5:3c:e8:
40:98:88:b5:4f:18:b9:cd:6f:f5:ab:7f:ee:64:ac:
b2:de:60:78:33:dc:5f:a4:44:96:dd:5a:f7:91:07:
34:b0:49:e4:da:71:da:76:24:c3:ef:c6:f9:4e:7a:
28:dc:10:16:a9:b1:5e:8d:3c:ae:dc:44:70:f5:fa:
e0:08:dc:13:38:f7:8c:f2:0c:ba:66:68:01:28:85:
03:25:0d:84:8d:7d:6f:09:8a:1c:c9:15:2f:07:a7:
90:90:56:f2:86:d1:9d:83:70:a1:9c:d8:87:3d:6a:
4d:88:63:f2:d2:4c:91:2f:68:77:23:72:df:6e:35:
17:15:ca:51:cc:d2:e9:d3:05:8f:d7:4f:eb:62:5b:
4a:34:7b:0c:1d:6d:53:51:d1:b6:e6:1d:5e:5d:45:
78:39:04:cd:2c:a6:71:23:2c:9a:e9:fd:ca:29:e2:
9d:c1:7d:cc:a3:97:c1:b1:4a:95:8a:de:84:c0:f6:
98:95:d9:b2:77:12:11:41:01:38:72:a7:b5:0b:51:
04:f6:4a:e0:a4:05:80:10:1e:f2:f5:9a:3f:0c:38:
fc:5a:6f:3a:fb:da:08:c2:11:d1:8a:33:05:73:60:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:4A:10:6C:3C:ED:3A:94:AE:55:D2:C6:C9:52:23:49:6B:8E:31
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/IlxKEGw87TqUrlXSxslSI0lrjjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.132.0/22
185.138.40.0/22
IPv6:
2a02:c500::/29
2a07:8c0::/29
Signature Algorithm: sha256WithRSAEncryption
33:25:d7:39:69:a1:ab:a8:bd:f9:97:ba:b9:80:a1:9f:9b:cd:
de:01:9c:7f:4d:63:9f:90:af:85:5a:9b:28:fb:0c:bf:4a:c4:
1c:12:c1:80:94:fa:1d:b8:7c:9c:06:64:5b:38:5d:29:08:c1:
34:11:6a:86:6f:38:08:05:33:91:92:86:26:05:e0:e1:ae:83:
a5:f0:ee:6c:b8:b0:d1:f5:9b:be:d8:f7:f8:4c:cc:30:ee:7b:
9c:9e:e2:39:6a:cc:0d:3c:a5:9d:b8:b5:fd:58:0d:0a:fc:d5:
f7:c9:41:5d:e8:b8:3c:25:3c:ea:16:d5:ca:0d:db:10:b7:26:
ab:5a:9b:60:f6:9f:0d:01:59:ce:91:a1:f1:89:5f:55:f8:7d:
01:aa:a9:59:d2:a5:34:2a:b9:b2:70:89:2e:8b:9a:00:e7:d8:
c6:0e:31:de:1d:75:2b:0f:a9:7a:43:ac:d8:9c:d2:cf:e7:97:
fe:4a:60:b9:f0:51:a7:aa:a4:24:21:91:10:4d:24:af:12:e6:
61:63:e7:64:b7:6c:85:f8:d8:12:d7:a7:64:ad:03:b8:b0:00:
1e:fa:42:86:42:fc:bf:36:1d:8a:b8:a9:56:1a:f5:79:06:a6:
19:f2:ae:cc:7c:e7:dd:e1:42:14:00:14:62:e1:85:c7:30:ab:
22:f3:16:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:40 2025 by rpki-client