Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa
File: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (raw, json)
Hash identifier: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=
Subject key identifier: F3:80:1D:D4:A2:4F:73:D8:E1:AF:C5:80:10:E1:2C:EA:CF:2D:98:F7
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019422202C7FF2664B7340E74FE088DD3BAF
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50875
IP address blocks: 185.86.244.0/22 maxlen: 22
185.86.244.0/24 maxlen: 24
185.86.245.0/24 maxlen: 24
185.86.246.0/24 maxlen: 24
185.86.247.0/24 maxlen: 24
185.251.66.0/24 maxlen: 24
185.251.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2c:7f:f2:66:4b:73:40:e7:4f:e0:88:dd:3b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3801dd4a24f73d8e1afc58010e12ceacf2d98f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:13:f9:59:5a:02:a9:6a:58:ea:44:54:30:
17:e9:86:8c:6e:2f:c6:64:6a:6c:7b:e6:49:8a:30:
ba:0f:33:08:f5:84:e7:2e:b9:f3:cb:95:40:fe:39:
35:2f:64:b3:03:96:0b:aa:07:01:c1:73:14:37:20:
57:b6:9f:e7:a1:9f:2c:43:74:07:00:45:96:f7:5d:
b1:a3:99:e9:21:77:12:a3:27:1c:b3:6f:43:85:b0:
38:08:7d:f7:42:2d:fd:4e:07:56:a3:b6:c1:21:9a:
ec:b4:d3:3e:b2:d8:a5:d2:71:df:a0:82:41:a4:cd:
1d:4f:4c:af:20:e9:1f:d3:00:23:50:50:63:7e:53:
4e:6b:88:fc:4c:fa:a8:79:3d:eb:37:ca:bb:5f:af:
db:52:43:76:f4:b5:30:d7:df:04:51:3b:ab:f4:e1:
08:ae:9b:69:d3:ac:a9:85:1e:7d:d7:c1:7e:2d:a0:
cd:8c:1d:2e:0b:54:ad:a6:98:c5:a8:d0:b1:3a:69:
0d:57:b9:12:5f:60:79:c4:47:44:2b:88:28:bc:2a:
ef:7d:5a:c9:8c:a2:4b:b5:c2:1b:97:48:f7:a1:b9:
57:61:2a:5e:07:a0:1c:10:2f:7a:f8:af:bd:4b:a3:
80:1a:93:c3:ac:a4:3d:7b:36:93:8b:2b:a9:31:ae:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:1D:D4:A2:4F:73:D8:E1:AF:C5:80:10:E1:2C:EA:CF:2D:98:F7
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.244.0/22
185.251.66.0/23
Signature Algorithm: sha256WithRSAEncryption
83:a9:bf:08:92:3c:af:b4:ca:72:12:48:2a:3b:32:f2:e8:b5:
91:c5:25:ae:b6:8d:d9:6f:c8:07:6c:46:c9:8e:a6:5a:69:74:
d4:70:e7:99:50:0e:85:89:46:5a:10:bb:0b:5a:36:f2:cd:b1:
a5:79:13:51:11:a7:f5:61:c6:fe:27:2a:89:cb:6e:eb:0f:da:
9e:d1:11:77:a7:18:d0:8b:a5:08:d0:5b:a6:54:d2:29:d2:ab:
b7:1f:b0:c4:51:ad:fa:d9:8b:85:70:28:b5:d4:46:49:aa:cc:
1d:52:75:92:dc:88:01:f4:9c:b4:6c:c4:ca:3d:b6:ac:76:bb:
91:45:1b:a7:fa:35:13:03:5d:ab:5f:86:b3:f0:fb:a1:41:99:
55:4c:5e:78:89:90:4d:4c:1a:2f:3c:7c:d7:23:f2:d1:72:9f:
7c:71:72:0e:f6:b0:7c:9d:ac:7c:2f:91:63:a0:61:ce:45:eb:
5c:9d:d2:6d:ed:54:a1:6a:4e:3a:63:13:96:3d:6f:84:63:55:
6c:87:47:d1:34:9a:8d:f9:e6:4c:ae:9b:4b:0e:74:24:41:c8:
19:80:56:b1:1f:bc:54:9b:75:3e:c2:8b:bf:b2:44:58:3f:85:
e6:a5:62:a6:12:de:44:57:cf:fb:db:69:e8:1f:48:8b:de:13:
f1:af:2a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:04:33 2025 by rpki-client