Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa
File: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (raw, json)
Hash identifier: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=
Subject key identifier: 87:63:9B:CF:4E:2D:59:5A:05:57:52:15:DE:E0:D7:CF:5B:CB:E9:9B
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 019420D5C7316AC6844F64A17BBC0FFBBA3A
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203132
IP address blocks: 185.142.184.0/24 maxlen: 24
185.142.185.0/24 maxlen: 24
185.142.186.0/24 maxlen: 24
2a07:2f00:1337::/48 maxlen: 48
2a07:2f00:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c7:31:6a:c6:84:4f:64:a1:7b:bc:0f:fb:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87639bcf4e2d595a05575215dee0d7cf5bcbe99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:47:56:60:08:5c:af:a9:d0:00:77:d9:79:
93:29:2d:bb:42:b7:4e:16:78:1f:45:21:cf:85:68:
6b:70:fb:75:6d:dd:2f:37:aa:a2:94:b6:4c:b0:a3:
08:3c:d2:16:b6:d7:c0:b2:e3:1b:5c:84:9e:82:df:
fa:25:81:9f:4a:be:f4:3c:72:35:c7:ac:20:5a:53:
11:2c:fb:83:d1:4d:b0:37:4a:6f:1c:d1:84:81:27:
e9:e1:68:9b:d6:df:c1:3d:b2:88:f7:49:d3:8a:e8:
39:56:52:94:21:62:78:d0:8a:f0:9f:b0:35:45:91:
16:a8:4e:fc:e2:01:cf:53:2d:ff:f4:b1:fb:38:74:
da:2e:05:0f:76:cc:c8:c3:ed:9f:2f:8c:6d:41:56:
9c:4c:0b:53:04:5b:55:1e:90:00:13:6a:d4:0f:ae:
14:69:35:a4:20:09:4e:16:fc:83:9c:1a:d2:82:06:
78:f9:ba:21:4e:5b:72:1c:8e:cb:ec:a0:71:9f:f4:
db:a2:dc:ee:10:3d:74:41:78:18:71:c5:75:2b:c1:
10:a9:ad:b2:db:c9:39:34:f9:eb:39:76:f0:58:8d:
51:43:31:28:54:e0:e4:45:6d:17:63:92:37:8d:c1:
b1:48:83:5b:c8:42:62:ea:14:fc:3c:de:5f:38:36:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:63:9B:CF:4E:2D:59:5A:05:57:52:15:DE:E0:D7:CF:5B:CB:E9:9B
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.184.0-185.142.186.255
IPv6:
2a07:2f00:1337::/48
2a07:2f00:dead::/48
Signature Algorithm: sha256WithRSAEncryption
21:19:d2:07:bc:5b:e9:8d:4a:07:37:09:16:2a:e7:4c:66:44:
19:d0:75:34:c3:61:58:2c:a5:7f:0d:75:30:21:aa:17:52:44:
da:e7:38:e9:94:66:69:32:7b:3d:6c:65:39:32:1d:85:f1:b8:
0e:42:fc:c1:76:d2:f4:8d:f8:02:56:10:2e:27:00:2a:8d:68:
9e:d1:d2:8a:2f:e2:4d:32:3b:66:ba:18:be:f3:eb:b8:ee:1f:
51:25:98:32:a0:e7:b4:70:1d:43:7e:32:6f:e1:83:2b:fc:bb:
04:91:8d:37:96:7a:81:ef:43:91:ac:87:a8:eb:8d:78:3c:88:
20:f0:c5:03:6c:0d:74:8c:ce:c2:5c:cd:bc:22:12:aa:a0:aa:
3b:4a:16:c3:f0:08:d9:71:a2:0f:a1:34:fa:a2:74:ec:d0:39:
1c:a8:5c:4c:0c:73:d1:3f:f9:0e:c5:88:9e:96:dd:01:39:fb:
3d:d0:02:b1:de:30:0b:60:f3:07:42:8e:2d:8c:c5:31:36:5e:
c7:43:bc:8f:37:b9:54:b6:c1:51:6e:6c:4b:69:5e:70:c1:52:
71:e7:b1:54:3d:49:87:24:49:58:3e:a1:a3:37:9a:17:dc:f3:
a0:65:fe:4a:91:8a:e6:65:0a:10:4f:6b:7a:0b:e6:e2:6c:8d:
0c:61:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:14 2025 by rpki-client