Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa
File: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (raw, json)
Hash identifier: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=
Subject key identifier: 95:97:DB:51:B6:2D:74:0C:04:BC:03:F3:F5:08:1A:43:A0:22:53:37
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 01945FE948D2BE7DAEEA7D4D336625654E96
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa
Signing time: Mon 13 Jan 2025 13:45:11 +0000
ROA not before: Mon 13 Jan 2025 13:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62182
IP address blocks: 185.253.188.0/23 maxlen: 23
185.253.188.0/24 maxlen: 24
185.253.189.0/24 maxlen: 24
185.253.190.0/23 maxlen: 23
185.253.190.0/24 maxlen: 24
185.253.191.0/24 maxlen: 24
2a10:d400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:e9:48:d2:be:7d:ae:ea:7d:4d:33:66:25:65:4e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Jan 13 13:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9597db51b62d740c04bc03f3f5081a43a0225337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:55:fa:0c:1b:73:c9:3f:9d:c2:f0:ed:b7:
09:89:4c:5a:20:99:8d:76:c2:29:44:6d:f1:6b:54:
69:7a:a0:f0:b6:16:53:ba:81:58:f0:29:90:ad:e8:
37:9a:5d:d7:ec:00:27:08:40:cc:26:8a:45:a1:ff:
df:4e:89:ac:dd:60:4c:2e:f7:07:38:a4:cb:ad:a6:
2b:0c:cb:68:9a:86:f7:3a:01:18:bd:76:ba:2e:68:
8c:ee:c3:95:e1:58:d4:40:a6:d9:08:f5:81:7d:46:
74:8e:41:44:6d:05:11:e4:f4:a9:a7:df:d4:36:d3:
cd:aa:fb:f6:51:84:8b:50:ed:ea:7f:d7:c8:96:a3:
91:67:84:14:75:72:93:ac:87:bb:1d:fd:03:c5:96:
13:7b:2f:05:68:24:38:f2:6d:c9:1a:ac:9e:90:50:
81:a9:1b:1d:66:63:ad:fc:95:ea:04:1e:a4:f0:e6:
64:cc:d2:df:77:07:91:dc:35:9c:a5:34:e6:46:2e:
d4:a6:86:9b:97:05:30:df:20:61:c1:5c:15:c7:2e:
55:3f:fe:0e:62:fd:5a:b4:74:1d:d6:60:6c:2a:42:
d1:95:fd:ca:f3:f3:85:a5:f1:f6:b3:04:f3:e9:e2:
9e:8e:bd:74:d7:1b:2b:07:24:44:81:f1:75:1d:c0:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:DB:51:B6:2D:74:0C:04:BC:03:F3:F5:08:1A:43:A0:22:53:37
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.188.0/22
IPv6:
2a10:d400::/29
Signature Algorithm: sha256WithRSAEncryption
09:79:ca:0e:af:51:13:b1:bb:05:04:0d:80:67:37:99:3f:af:
fa:3b:b8:73:7d:74:4d:6a:47:df:7f:51:e2:07:0e:74:d8:da:
69:e9:76:d0:82:ba:84:6a:05:a8:43:5e:15:03:fa:ff:37:5b:
0d:92:67:61:de:c1:5d:ff:4d:d8:ab:9d:59:d2:e2:c5:11:77:
f3:55:d7:09:d0:ce:00:ac:88:ef:01:af:eb:b0:f7:42:3c:04:
d0:ee:4c:fc:46:e5:62:6f:21:a2:f6:c6:dc:b4:95:3e:0e:eb:
93:27:0b:6a:4e:54:c4:6f:f5:d7:51:f2:6c:53:7e:00:57:f2:
0a:f2:2b:57:ad:a4:75:79:80:62:89:ad:7b:4b:36:17:b8:45:
cc:88:15:74:a4:c7:b4:61:e3:4a:f7:a1:c3:b1:74:98:6d:5b:
19:71:6a:e2:b9:61:8e:d3:cc:64:5c:9b:23:ab:2a:f4:ad:f4:
7f:50:c1:90:1e:79:5d:48:2f:bf:8d:10:3a:ae:f7:a2:8c:59:
c1:fd:76:9c:c7:f7:3e:7c:5e:d2:4f:76:a4:58:80:10:2f:27:
14:0f:43:4f:77:b1:09:bf:c6:75:b1:ed:74:a2:df:43:2a:a4:
22:9d:63:71:d9:f2:e8:9e:18:a5:71:9e:81:36:f1:67:2f:a0:
fc:e3:73:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:55 2025 by rpki-client