Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/k3zrAg9lFEYGsBjnQKtAuswdHEU.roa
File: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (raw, json)
Hash identifier: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=
Subject key identifier: 93:7C:EB:02:0F:65:14:46:06:B0:18:E7:40:AB:40:BA:CC:1D:1C:45
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 0194228E2969B05C0022FDD3440741AFEAE5
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/k3zrAg9lFEYGsBjnQKtAuswdHEU.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197297
IP address blocks: 185.163.112.0/22 maxlen: 24
195.60.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:29:69:b0:5c:00:22:fd:d3:44:07:41:af:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=937ceb020f65144606b018e740ab40bacc1d1c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e0:27:46:86:f6:dc:0b:e1:92:8b:86:bc:a0:
f5:f8:ce:3a:b0:c4:89:42:d5:7e:36:4a:1a:dc:21:
6b:8a:d0:47:b2:89:ee:dc:57:65:17:8d:8c:47:55:
cb:9c:07:46:4e:36:f8:a3:ca:db:9e:86:37:fe:f3:
a0:d3:ef:61:32:1d:ef:9e:5a:f3:fa:18:54:1c:72:
4a:34:54:4e:b1:f4:82:2d:01:60:10:02:ac:bc:f6:
47:0c:09:29:e6:b8:f1:19:e8:0c:a8:b4:5d:21:a2:
7e:f4:75:f9:16:2a:6a:03:0c:4d:9d:c4:15:07:64:
11:96:d6:95:66:63:ff:26:1f:c6:9a:52:b9:48:d9:
cb:c2:79:93:c1:f7:4a:21:9d:3d:56:d7:7d:ba:f9:
b8:91:7c:55:69:86:30:1f:70:de:cb:37:17:ea:9f:
76:c2:28:4a:18:7b:05:fe:ba:fd:9d:a7:dd:74:37:
fa:8e:64:8f:ec:bb:d5:13:72:3b:a0:5a:79:cd:2d:
cf:35:25:a2:33:f7:4f:87:b8:d6:43:27:06:fc:3b:
5f:ec:41:cc:4f:b6:86:d0:92:5b:bc:53:5c:43:de:
20:e0:1b:65:8c:22:b7:a0:0c:86:66:83:ac:c9:1b:
04:a8:5b:a0:25:82:9e:ac:08:56:c8:76:60:61:33:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7C:EB:02:0F:65:14:46:06:B0:18:E7:40:AB:40:BA:CC:1D:1C:45
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/k3zrAg9lFEYGsBjnQKtAuswdHEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.112.0/22
195.60.208.0/23
Signature Algorithm: sha256WithRSAEncryption
45:19:8f:f3:18:11:93:3b:b5:ea:9d:e0:08:9e:b8:89:74:0b:
f4:d8:ac:86:1a:b6:35:e3:24:09:e2:92:d0:f6:56:28:49:fe:
24:42:ad:13:8f:0c:24:5c:65:41:a8:88:6c:2b:b0:46:5d:28:
bb:8c:f2:e5:c9:b1:06:1b:24:db:da:5d:16:d4:f1:a1:20:d2:
96:92:fc:a4:0d:3d:5b:ab:0a:a3:1e:8b:cd:8d:a0:1c:bf:34:
bd:8b:e8:03:95:9f:4d:43:fa:cc:22:f9:02:98:6a:7c:b5:40:
29:4c:45:6e:df:dd:fa:62:5b:64:5d:51:9f:af:fb:12:e9:86:
6a:6e:af:02:57:8c:92:48:ca:42:e9:e9:e9:4d:43:52:7a:d8:
c5:a6:d3:09:25:4f:57:e5:c3:27:54:14:dd:dd:fa:52:d6:c2:
c1:95:32:9b:86:e5:6d:e6:6b:33:1e:f2:a6:b2:e6:15:b5:92:
0e:16:40:d1:5b:98:08:28:aa:e4:8c:7a:d5:53:1f:e1:6d:ab:
1f:67:f0:97:79:6d:5b:d5:35:df:0b:49:10:8f:e9:32:8a:17:
fd:7d:1f:da:22:bf:8e:97:6f:13:ce:df:a6:d3:2c:6a:54:df:
35:19:aa:fc:c6:2e:23:51:42:8a:81:17:79:9e:65:1d:27:4d:
76:bd:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:34:35 2025 by rpki-client