Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/2elU8M79ZokIDRQA4FCMvXhZ_30.roa
File: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (raw, json)
Hash identifier: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=
Subject key identifier: D9:E9:54:F0:CE:FD:66:89:08:0D:14:00:E0:50:8C:BD:78:59:FF:7D
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 019420D5AE23B30A84D087A0FF3F46B6A454
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/2elU8M79ZokIDRQA4FCMvXhZ_30.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.120.0/24 maxlen: 24
185.164.121.0/24 maxlen: 24
185.164.122.0/24 maxlen: 24
185.221.96.0/24 maxlen: 24
185.221.97.0/24 maxlen: 24
185.221.98.0/24 maxlen: 24
185.221.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ae:23:b3:0a:84:d0:87:a0:ff:3f:46:b6:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9e954f0cefd6689080d1400e0508cbd7859ff7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:0e:2f:ae:1d:25:22:03:29:6e:7a:db:8b:
1b:92:04:3f:fe:f1:ae:52:4e:e5:33:f2:aa:78:05:
ae:c2:c9:e9:a4:57:f0:c1:b9:08:9f:6f:27:78:34:
b9:4b:38:3b:21:86:ce:3e:eb:69:cb:ad:b1:ca:4e:
57:7f:bd:e5:da:b9:f1:6c:95:94:aa:e3:da:16:a7:
39:d3:61:6e:11:12:cf:9f:c5:c5:e3:76:71:5b:b2:
e1:b2:6f:1f:c9:e6:b9:ad:0e:d7:ee:ce:17:bc:ba:
db:34:ed:45:f4:d3:e4:60:a8:ba:f7:38:f9:d2:ea:
65:b7:c1:03:8f:7a:50:f2:86:63:6b:f2:17:ac:28:
09:1d:53:eb:91:19:17:c0:e9:16:c4:0b:b3:46:1a:
d5:60:ed:c1:2b:e7:69:6a:7b:03:bb:23:29:b6:10:
67:b3:53:94:82:3f:d9:bf:16:75:99:7a:70:20:4b:
ad:17:d7:93:84:45:3f:bf:71:f8:b9:14:e0:a3:8e:
e3:6e:80:a5:2c:f4:59:0c:71:e6:05:42:3c:53:bc:
3f:d6:ad:73:42:af:e4:24:97:7c:47:29:56:a0:d1:
93:17:56:6c:bd:01:2e:05:b9:70:d5:9e:75:88:0b:
78:38:1d:88:50:f5:5f:d4:81:a5:71:46:7e:56:3a:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:54:F0:CE:FD:66:89:08:0D:14:00:E0:50:8C:BD:78:59:FF:7D
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/2elU8M79ZokIDRQA4FCMvXhZ_30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.120.0-185.164.122.255
185.221.96.0/22
Signature Algorithm: sha256WithRSAEncryption
00:27:51:ba:30:c3:b3:f0:82:f5:3c:c9:92:de:d8:f2:4e:ef:
81:2f:29:f3:22:fb:5c:cd:dd:a4:4e:6e:12:8f:36:e1:90:12:
5d:20:74:00:f4:7a:ee:94:fe:7a:ad:bb:cc:d4:c6:57:87:2a:
6c:2a:cd:16:fc:e0:a1:81:41:d2:af:2f:07:59:c1:08:89:43:
65:c2:4e:f5:c0:92:53:9f:34:5c:b3:84:a8:a8:fa:4a:8f:e0:
b2:19:16:f2:ba:a9:32:8a:b0:c2:1a:33:ff:5c:12:ea:af:26:
c8:92:e6:68:f9:95:a1:a8:e1:42:cf:32:c5:f9:23:f3:15:e3:
4f:39:94:06:bd:e9:dc:39:b0:ba:00:0e:ed:95:cf:57:d5:e6:
41:7b:4b:2b:35:c0:12:5f:c4:bd:b9:81:44:37:7a:be:9e:c8:
f0:33:43:59:5d:e1:c7:31:28:f9:f1:98:24:86:07:a7:4c:76:
46:0d:22:50:e7:67:cc:5e:d1:5d:b1:9f:33:0a:8a:d0:52:01:
97:98:aa:3e:f2:7e:28:52:08:94:78:a2:b0:ca:06:b6:63:15:
5c:39:4b:1a:64:64:83:4e:7e:3c:69:bd:58:e9:a9:e2:6d:4e:
91:b4:19:85:ed:85:2b:4d:89:57:c0:69:9c:f9:5b:d7:20:b2:
35:ef:d4:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:33 2025 by rpki-client