Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa
File: n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa (raw, json)
Hash identifier: ukpF9blWLJ1fHC+qQnWNibfuLjVHA9hpURE/X4EaFzY=
Subject key identifier: 9F:45:42:BE:B1:AF:6C:88:01:99:31:DF:75:3B:ED:16:98:07:E1:BB
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 01941FFA47410D4444A3B718DEBAF085D140
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206614
IP address blocks: 141.226.125.0/24 maxlen: 24
141.226.126.0/24 maxlen: 24
141.226.127.0/24 maxlen: 24
141.226.128.0/24 maxlen: 24
141.226.129.0/24 maxlen: 24
141.226.130.0/24 maxlen: 24
141.226.131.0/24 maxlen: 24
2a06:3b80:21::/48 maxlen: 48
2a06:3b80:22::/48 maxlen: 48
2a06:3b80:23::/48 maxlen: 48
2a06:3b80:24::/48 maxlen: 48
2a06:3b80:25::/48 maxlen: 48
2a06:3b80:26::/48 maxlen: 48
2a06:3b80:154::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:47:41:0d:44:44:a3:b7:18:de:ba:f0:85:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f4542beb1af6c88019931df753bed169807e1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:74:52:82:5e:6e:92:6b:1a:e7:c9:9e:1d:
0b:e3:14:79:e0:7d:39:f8:bf:b5:ce:19:fc:15:a6:
0f:a2:83:a5:b3:e7:d5:03:29:0d:49:74:0a:2b:91:
14:e7:21:35:7c:a6:a3:04:a7:b4:5c:8c:cd:92:b3:
9c:cb:e4:94:91:7b:63:a4:74:35:8a:63:19:ce:1f:
eb:8e:c8:69:e7:00:70:37:b3:6c:6f:09:5f:11:35:
b4:36:7a:ed:6f:5c:c6:3f:a0:e9:85:4e:54:ea:02:
0b:21:b1:88:28:78:07:5c:98:7a:22:ae:2e:b6:fa:
65:f0:50:30:26:23:65:29:ac:df:f6:10:3a:3d:21:
e9:d4:55:f6:65:bf:38:23:91:dd:e9:d9:60:b9:dd:
b9:fa:81:03:e3:6b:76:31:7d:1f:e1:b7:16:cf:71:
9b:35:29:22:79:38:3b:56:b8:ae:2b:c5:43:8d:d2:
09:39:04:ee:bb:a8:8b:4b:82:45:0f:4e:e1:dc:35:
80:77:22:fb:46:82:31:92:04:a0:d6:db:85:a5:1e:
68:40:cb:3f:4f:a1:cb:63:f9:49:f8:90:84:73:8e:
df:a5:02:47:23:fc:76:55:da:a6:88:95:37:c6:4b:
71:03:41:bb:ab:7b:d9:4f:68:0f:52:a5:61:15:8f:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:42:BE:B1:AF:6C:88:01:99:31:DF:75:3B:ED:16:98:07:E1:BB
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.125.0-141.226.131.255
IPv6:
2a06:3b80:21::-2a06:3b80:26:ffff:ffff:ffff:ffff:ffff
2a06:3b80:154::/48
Signature Algorithm: sha256WithRSAEncryption
80:db:d1:4e:c1:da:ec:e9:bb:e1:37:08:da:75:73:7c:2c:73:
a5:1d:3d:d8:35:93:17:35:78:4e:ce:91:a5:d0:94:09:d5:e2:
2d:64:23:7c:8f:44:55:41:50:a4:e4:75:2f:62:71:2d:de:86:
10:3c:90:12:44:f3:c9:91:0a:9b:4b:48:68:fd:bb:f3:f2:24:
94:a3:45:be:4f:24:d0:47:15:d1:d7:46:a2:2d:64:31:81:0e:
5c:aa:53:35:65:0a:4d:c2:c7:1a:ee:98:5c:e9:6e:93:f4:39:
00:6a:e7:7a:dc:2c:29:4d:a6:d3:22:d9:dc:5a:7b:e2:b0:ff:
a1:f3:10:40:fc:5b:17:11:a3:90:37:1a:cb:76:a9:6f:ec:f5:
65:1f:ae:7d:21:eb:e5:08:26:ae:64:c3:6f:07:19:87:9e:51:
50:29:c1:82:38:81:58:11:66:74:fc:20:41:cf:a8:74:cb:69:
10:5b:69:58:91:85:61:36:7a:b6:f2:0d:9b:44:f3:02:56:66:
d3:59:92:7b:49:f7:98:d6:d5:80:91:93:46:c9:cf:2e:38:f4:
85:e6:c9:94:64:72:ed:e9:43:02:17:d5:a3:e1:26:2d:1f:9f:
26:20:13:c8:ed:cb:50:52:c2:f4:f0:20:ea:ae:fe:d4:89:e2:
6d:ba:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:52:09 2025 by rpki-client