Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/iES_pxayPYvKM2VsJ1VR6S1Y-14.roa
File: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (raw, json)
Hash identifier: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=
Subject key identifier: 88:44:BF:A7:16:B2:3D:8B:CA:33:65:6C:27:55:51:E9:2D:58:FB:5E
Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial: 019424B378256BB8F5A8F8B3129A2F4B3C6A
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/iES_pxayPYvKM2VsJ1VR6S1Y-14.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205344
IP address blocks: 91.239.54.0/24 maxlen: 24
185.219.12.0/22 maxlen: 22
194.148.0.0/22 maxlen: 22
2a0c:bc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:78:25:6b:b8:f5:a8:f8:b3:12:9a:2f:4b:3c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8844bfa716b23d8bca33656c275551e92d58fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:5a:02:c4:5b:3d:05:b7:ba:b6:75:8f:cf:
a3:45:2f:ac:6b:cc:fc:0a:7a:32:66:7a:e5:35:6d:
a6:a1:ec:e9:b4:e0:b2:a9:3b:9e:f0:05:a5:00:8b:
9f:53:4a:24:70:b7:86:d8:f5:92:a6:9b:2a:83:94:
a4:64:18:a2:1b:56:a5:b9:44:21:87:63:6c:73:d3:
8c:32:40:bc:b7:86:4f:73:d1:3d:cd:2f:f8:fa:04:
48:74:b9:e2:8a:95:3f:d7:17:98:4d:31:05:b4:39:
b3:86:5e:99:7a:29:24:d3:f5:6d:b4:10:16:a2:05:
3e:a1:c6:ee:a3:f6:e5:12:37:56:29:4e:df:2e:62:
e7:46:bf:f9:1e:1f:ce:ab:8a:a5:05:6b:44:6a:f9:
88:3f:e7:db:0a:65:1d:7d:a0:a9:a1:24:4f:50:67:
e4:d7:a0:ca:f3:07:d4:51:74:65:6c:2a:1c:aa:29:
9b:73:b3:8f:64:a8:72:28:b0:a2:b7:ff:74:1e:6d:
b2:6b:e9:8e:7a:0e:e5:fb:97:ff:21:95:d2:2c:fd:
3a:e3:20:c6:3c:5e:f8:b6:f7:12:8f:52:a3:6c:1f:
6f:93:cb:a5:a2:76:ab:6d:44:f7:fc:4a:14:9f:e3:
8c:1c:3a:06:7c:a9:83:c6:f4:b6:cf:f8:92:6e:dc:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:44:BF:A7:16:B2:3D:8B:CA:33:65:6C:27:55:51:E9:2D:58:FB:5E
X509v3 Authority Key Identifier:
keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/iES_pxayPYvKM2VsJ1VR6S1Y-14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.54.0/24
185.219.12.0/22
194.148.0.0/22
IPv6:
2a0c:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
7c:bc:c0:dc:64:32:3b:2e:34:2c:6b:42:18:21:7c:cb:aa:fa:
03:47:40:f2:91:fa:d9:15:a7:74:9a:1d:f8:78:0a:82:7d:1c:
af:9a:59:1b:e3:15:2a:ab:97:5f:75:c4:28:80:45:9f:6d:5d:
ef:91:04:ac:43:61:17:30:2a:94:c9:50:8a:6a:bc:bb:33:78:
8a:ca:c5:33:ff:e4:2b:85:23:29:c2:3e:af:01:cb:86:c5:eb:
a4:a1:78:84:4c:3a:b4:d0:ae:d1:6e:fa:60:48:5b:e8:37:69:
ff:85:5c:0f:94:0c:59:ac:2b:94:c7:13:c7:6a:aa:e2:5c:dd:
c1:da:53:b2:34:ef:76:37:dd:87:33:74:87:18:58:ae:ae:45:
c7:bf:53:cf:ba:82:e3:37:fc:0c:3e:74:fa:62:11:90:18:7d:
b8:e9:1a:8e:4a:99:24:19:15:80:2e:d1:49:13:53:fe:10:45:
71:a2:11:e5:26:df:68:3b:23:53:3f:0b:66:fd:e8:96:c8:2c:
d4:c6:0b:83:f4:a2:71:99:1c:94:38:ed:63:e6:47:18:da:08:
a3:73:d4:ed:00:c5:42:61:85:7c:51:ec:3f:56:c0:8d:5f:70:
34:83:fe:82:ac:db:2d:66:bc:7c:23:e2:7f:3a:e7:4d:f7:d6:
0a:9d:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:30:19 2025 by rpki-client