Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/A2mYhFuHkeEKmVD2JuN0rydVGo4.roa
File: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (raw, json)
Hash identifier: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=
Subject key identifier: 03:69:98:84:5B:87:91:E1:0A:99:50:F6:26:E3:74:AF:27:55:1A:8E
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 019426D9C7B0004430CB00205895030E91D9
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/A2mYhFuHkeEKmVD2JuN0rydVGo4.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200573
IP address blocks: 185.239.40.0/24 maxlen: 32
185.239.41.0/24 maxlen: 32
185.239.42.0/24 maxlen: 32
185.239.43.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c7:b0:00:44:30:cb:00:20:58:95:03:0e:91:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=036998845b8791e10a9950f626e374af27551a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:92:30:a8:9c:26:5b:0c:b2:7d:cf:11:da:
41:ab:0b:e8:c3:bf:8c:27:6b:b9:de:cf:7c:7f:08:
6a:16:4d:da:ef:84:67:2a:6e:0f:36:c7:01:71:51:
a6:42:06:49:af:5a:a0:db:84:ba:fc:60:6a:43:65:
9d:e8:89:0e:20:53:9c:2e:36:e4:0f:2d:0b:2a:ce:
af:e7:1c:b9:25:a1:60:1a:96:3b:3b:98:36:45:6e:
e7:4b:29:f4:f7:18:9c:66:56:eb:fe:d1:94:d4:a8:
3e:2d:8a:4e:e4:6b:45:4d:26:c3:03:9e:12:ac:c0:
a5:4e:16:f6:e7:35:12:de:50:98:8d:5e:ba:00:1d:
28:0b:77:af:bc:30:15:2e:89:20:aa:f5:93:d7:08:
e4:21:89:6c:7a:1c:ee:f4:cc:c2:1d:e8:f6:c9:b2:
b3:ac:7c:91:0e:c9:c2:90:3c:23:c5:ff:c5:11:7f:
11:32:6e:85:b7:48:9c:3d:ca:71:d0:f3:d0:b1:a6:
0b:4f:e6:2d:ae:ab:51:38:6c:22:8e:23:dd:7d:f9:
a3:43:02:ee:6a:e7:b3:b8:22:a6:05:d7:c5:19:8e:
b4:8d:48:94:21:d7:55:67:b0:13:ec:d5:ba:6f:c6:
17:d0:ed:a0:32:ee:d7:ca:e9:37:88:40:1a:5e:9d:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:98:84:5B:87:91:E1:0A:99:50:F6:26:E3:74:AF:27:55:1A:8E
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/A2mYhFuHkeEKmVD2JuN0rydVGo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.40.0/22
Signature Algorithm: sha256WithRSAEncryption
24:a9:9b:99:15:d8:c9:61:d3:98:d5:33:99:a7:a4:7d:5a:da:
af:c3:4c:fa:21:4d:d8:36:cc:06:12:f0:ba:7b:e4:de:3b:7d:
1c:a9:c4:0c:70:f6:51:94:4f:65:ef:5c:d8:d9:8a:10:52:86:
56:0c:6a:6a:b3:63:44:ef:88:d4:37:43:de:1b:78:c2:99:5b:
70:c1:ec:da:f8:2b:8d:69:c5:e3:fc:55:b1:ca:5d:e3:65:2b:
20:e3:1b:6c:a9:e2:eb:b2:c8:b9:b4:a3:49:8f:c8:a9:dd:29:
43:02:25:33:6c:88:11:26:b4:58:20:85:f3:d1:b0:7e:17:6c:
68:29:b8:d9:f9:b2:ae:af:9b:dd:3e:fb:b5:ba:d6:0e:ca:f6:
47:6a:19:bf:1f:4a:86:4b:0e:c9:b9:8c:45:6d:b3:16:fe:87:
f1:80:2e:62:87:97:8a:d0:8d:1c:89:0c:cb:4f:04:ad:37:1e:
54:8e:69:f0:1c:20:cf:27:38:46:a5:a0:fd:ab:8e:a8:7a:8c:
c5:a4:bb:54:6b:ef:71:b9:bf:2d:8a:94:7b:86:b4:12:37:42:
fb:a6:8c:d5:fd:ec:ea:77:1f:7e:7e:17:16:f0:4c:04:c0:fd:
c8:ec:4f:09:df:cf:e8:40:2c:af:8f:2e:ae:56:c3:b9:5d:b6:
8f:88:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:43 2025 by rpki-client