Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/vrEOBF9ldIypmhQM7-y0wx8mvB4.roa
File: vrEOBF9ldIypmhQM7-y0wx8mvB4.roa (raw, json)
Hash identifier: jx76OmojI/1aknSM7oCZVvVpchbSHerzNk3p0la4Ogw=
Subject key identifier: BE:B1:0E:04:5F:65:74:8C:A9:9A:14:0C:EF:EC:B4:C3:1F:26:BC:1E
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019422FBB55B8A39A1EB8D789D5810E68550
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/vrEOBF9ldIypmhQM7-y0wx8mvB4.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212889
IP address blocks: 185.164.24.0/24 maxlen: 24
185.164.25.0/24 maxlen: 24
185.164.26.0/24 maxlen: 24
185.164.27.0/24 maxlen: 24
185.164.28.0/24 maxlen: 24
185.164.29.0/24 maxlen: 24
185.164.30.0/24 maxlen: 24
185.164.31.0/24 maxlen: 24
185.203.108.0/24 maxlen: 24
185.203.109.0/24 maxlen: 24
185.203.110.0/24 maxlen: 24
185.203.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b5:5b:8a:39:a1:eb:8d:78:9d:58:10:e6:85:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=beb10e045f65748ca99a140cefecb4c31f26bc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:bb:9d:79:17:ac:21:70:6c:78:b0:75:ed:
69:f1:7e:ff:e2:e7:27:7d:8b:84:19:8f:67:3b:4b:
4b:50:f2:b4:0a:a7:6f:db:75:9f:a6:13:4e:54:75:
bb:15:04:0d:d0:00:a9:1e:f4:5c:b7:7b:55:1d:0c:
e5:e0:fd:90:93:35:eb:3d:6c:2f:e3:f5:da:7e:a6:
31:e0:8e:71:4f:04:8f:3b:fa:a5:d0:4a:71:26:93:
02:8d:b4:30:50:c8:a0:3d:02:e2:39:ea:6c:68:b7:
be:6b:c2:41:ae:4b:b1:3e:9f:bc:2e:e5:65:8d:ae:
3d:bf:dc:ed:fd:48:d3:dd:f2:3e:e3:36:ba:49:2d:
68:67:11:83:39:98:05:4e:8a:10:a8:46:60:31:a5:
b6:61:29:6e:19:42:3e:c8:5a:58:0a:35:bf:40:94:
d3:e9:48:df:f0:cd:c9:ca:79:09:7b:61:a8:4e:9c:
16:74:3d:17:10:f2:34:ac:c8:94:ad:a9:57:18:84:
ec:ad:18:df:94:69:06:68:c8:00:9a:9f:f8:15:03:
12:b8:2f:4b:8b:c2:42:0b:84:35:d1:eb:9e:0b:0f:
53:8c:55:7a:c9:fd:f7:04:e2:dd:db:01:4d:6c:ba:
b5:2d:84:d7:0d:f2:3d:c2:97:3b:ca:3d:0d:dc:89:
ab:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:0E:04:5F:65:74:8C:A9:9A:14:0C:EF:EC:B4:C3:1F:26:BC:1E
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/vrEOBF9ldIypmhQM7-y0wx8mvB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.24.0/21
185.203.108.0/22
Signature Algorithm: sha256WithRSAEncryption
58:e0:f2:5f:2a:8c:51:08:d6:05:8b:b2:7c:38:c3:6f:37:98:
7b:9a:fd:94:83:f2:27:70:a0:7a:d1:e0:7f:d2:41:9a:78:67:
ef:f5:99:f0:5c:d2:09:eb:26:40:5a:7f:04:a4:98:6f:bd:77:
a3:64:c5:f9:ad:b0:38:1c:f9:ef:8c:34:15:50:e1:f4:ac:c8:
e3:80:51:51:f2:53:34:04:54:fd:a7:47:22:b6:3c:95:9e:de:
a1:3c:b8:5e:1c:7f:e6:a4:c5:06:66:03:9c:77:22:f1:2f:3c:
40:48:07:98:30:d5:4f:9a:98:aa:3f:e1:6b:a2:4a:cc:f1:ca:
0b:82:6d:24:c0:82:fb:0d:25:0c:3c:a3:01:41:5f:77:30:62:
2e:23:30:50:1d:d2:7f:32:2d:8a:ff:aa:df:bb:36:27:c6:96:
39:21:b4:2a:ca:fc:3d:2d:19:77:6e:aa:b1:c0:1b:73:27:2d:
95:34:16:f3:38:8c:41:4e:5b:c5:76:19:4c:a9:28:31:78:9c:
51:11:1a:e2:48:07:1e:73:10:9a:69:f3:57:9d:eb:4c:d7:a5:
44:be:a0:e9:e7:02:be:94:c1:2a:a3:46:7c:2e:73:6e:86:8c:
13:4a:92:af:73:d1:03:d7:b6:f0:48:3f:c1:0f:27:50:19:b9:
9c:4b:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:49 2025 by rpki-client