Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/s19cTegZPcgfvMn79U7vcydThPE.roa
File: s19cTegZPcgfvMn79U7vcydThPE.roa (raw, json)
Hash identifier: V3xH7pf/IllOyz6AG2kCqa1+TkH2gfpLo44RkSGpMGY=
Subject key identifier: B3:5F:5C:4D:E8:19:3D:C8:1F:BC:C9:FB:F5:4E:EF:73:27:53:84:F1
Certificate issuer: /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Certificate serial: 01942521E6F7B0E48ACD70D4211BC730A314
Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/s19cTegZPcgfvMn79U7vcydThPE.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206584
IP address blocks: 185.182.148.0/23 maxlen: 23
185.182.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e6:f7:b0:e4:8a:cd:70:d4:21:1b:c7:30:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b35f5c4de8193dc81fbcc9fbf54eef73275384f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:ac:df:6e:14:89:a9:cd:cd:3a:7c:0f:dd:
57:b2:0f:d0:04:bf:47:fc:35:3e:87:38:d9:b1:bf:
ca:42:c0:7d:98:90:9d:5d:ff:d5:c2:d6:e3:93:f6:
03:61:19:f1:42:16:a0:a6:68:e4:c5:c3:fa:a3:65:
3c:98:82:d1:ca:23:25:9a:ec:1c:3a:73:1f:c1:b1:
2f:a5:78:c3:f9:ff:fe:22:a8:d6:e5:dc:70:0f:17:
b3:8b:6e:60:d6:0c:19:8f:76:2b:5d:bd:b8:82:7c:
05:32:31:b0:66:7f:73:18:30:31:09:71:1a:98:5f:
59:a4:05:ec:2c:d5:a2:6b:b3:95:ca:c6:8b:2d:9d:
3f:09:2e:63:dd:01:8b:bd:0c:81:20:3e:6a:8d:91:
9e:7c:bb:e8:89:85:31:7a:e9:0b:8c:64:42:0c:00:
7e:fd:ee:e6:08:4f:df:fa:fa:45:1d:fd:7d:a6:71:
78:13:e2:bf:78:3a:ec:6e:05:fe:d2:f7:9b:23:cb:
84:fd:48:ca:b4:ca:c0:67:8c:91:4d:f7:b0:33:04:
ec:d7:eb:55:8a:a7:b5:3d:96:88:5d:af:d5:31:dc:
a9:80:c7:61:d0:04:13:b1:df:d7:86:e9:2a:12:4b:
db:f9:44:f2:b7:cc:a3:9a:dc:b9:06:6c:28:23:50:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:5C:4D:E8:19:3D:C8:1F:BC:C9:FB:F5:4E:EF:73:27:53:84:F1
X509v3 Authority Key Identifier:
keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/s19cTegZPcgfvMn79U7vcydThPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.148.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:46:71:85:01:49:c8:0e:95:ff:d0:53:5f:9d:64:b5:5b:01:
91:9f:2d:86:18:84:86:1b:44:a9:92:32:64:d8:a1:e4:73:f7:
48:65:6c:ff:62:16:71:e2:e8:01:63:88:e6:3e:76:7b:89:5a:
e3:d4:56:a7:84:bb:13:fd:fb:9b:c3:92:3d:11:92:42:1d:8d:
ed:5b:82:c1:81:05:7c:45:47:de:f1:c9:fc:f7:d0:8a:4b:0f:
94:45:8f:c9:cc:7d:42:49:a2:12:52:0c:2f:6a:38:d5:ca:ce:
71:c2:38:41:98:1b:50:90:ee:8c:b9:85:b7:a8:30:56:fe:f5:
4f:b3:11:d4:90:19:91:d1:e4:51:af:56:9d:27:45:d9:0b:64:
50:23:f6:4e:08:b0:8c:d7:36:97:a5:a1:f6:c6:04:dc:7a:62:
d1:01:33:4e:fa:03:4c:32:16:0b:44:5b:a3:29:4f:ba:5a:3b:
44:fb:08:1c:db:8c:e5:67:08:47:15:d9:66:42:bd:a6:a6:d9:
be:89:7e:36:0b:7d:40:16:f7:fc:de:cd:59:56:cc:96:23:f8:
e9:3c:32:e6:92:0e:67:d7:70:29:08:a6:07:f2:cd:88:c3:8c:
16:0a:33:af:38:1c:a5:d8:64:d5:4b:10:03:03:2a:01:4d:bb:
4d:60:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 10:47:20 2025 by rpki-client