Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa
File: UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa (raw, json)
Hash identifier: dU40dyYAxG0jUVXRYy3IsfQ8lbv7vAwEo5+BvKJGXqw=
Subject key identifier: 50:1C:D9:5E:AA:47:01:95:59:FD:D5:0B:E1:35:14:0F:57:B0:13:EE
Certificate issuer: /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial: 01942067D5B61F6916C3F63369451FECBA41
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47374
IP address blocks: 185.219.68.0/22 maxlen: 22
185.219.68.0/24 maxlen: 24
185.219.69.0/24 maxlen: 24
185.219.70.0/24 maxlen: 24
185.219.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d5:b6:1f:69:16:c3:f6:33:69:45:1f:ec:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=501cd95eaa47019559fdd50be135140f57b013ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:2e:a1:4e:0c:4e:c6:ea:b6:67:e3:00:54:
69:00:bb:93:fc:12:96:84:58:e8:6e:71:fe:38:0b:
a8:3d:76:71:c6:02:a3:73:f0:fa:f7:2c:c3:87:11:
b9:cf:32:09:a0:9e:88:64:3d:2f:16:c7:8c:04:f8:
2b:b2:de:00:5e:a8:59:91:0a:4c:c9:64:3f:dc:94:
22:b9:2a:ae:4d:64:ce:f5:ed:14:14:02:cd:ae:44:
30:7e:a5:44:e3:61:df:36:a1:ad:96:42:9e:ad:85:
56:df:81:fc:2a:21:e5:8b:81:54:e3:0f:97:da:fb:
8a:57:ae:62:ed:b9:04:5b:51:52:37:6f:c9:1d:30:
f2:6d:ea:77:d6:c5:a9:e2:e4:22:04:34:d1:51:31:
56:ab:d9:e7:d2:64:7f:09:e7:9e:5b:25:fd:cf:0e:
1c:2f:43:73:04:14:35:33:e3:59:81:55:6f:51:ec:
fc:f6:57:65:8a:ad:e5:7b:4f:84:0b:b2:8a:ca:9f:
a1:34:8a:8e:4f:5f:3f:1e:65:39:75:37:e8:7d:57:
17:b3:9d:1a:70:47:63:0c:d4:e3:1a:29:d1:90:af:
2e:e8:92:fe:f8:0b:dc:fc:26:01:89:41:7a:46:9e:
f3:f0:48:b3:2b:8e:69:ad:81:ef:0b:b5:b2:f6:46:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:D9:5E:AA:47:01:95:59:FD:D5:0B:E1:35:14:0F:57:B0:13:EE
X509v3 Authority Key Identifier:
keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:85:70:b3:50:57:31:0c:4f:b0:90:81:8c:13:6a:29:46:07:
6c:5e:e7:ec:3b:cb:56:26:67:a1:79:53:22:95:a5:f6:b2:d7:
0f:64:86:11:05:02:55:ce:48:14:67:c5:c5:69:27:3b:16:e5:
51:47:0a:31:58:c6:52:fc:45:63:f4:c7:25:c5:9e:85:66:7a:
9a:6e:f6:47:45:b5:c9:c7:9a:a1:39:58:25:df:9f:f2:5a:bb:
09:e9:ad:5c:49:17:5d:bb:e1:ae:01:4c:45:5f:a8:26:4f:31:
cd:d0:b8:e0:7b:56:06:01:3a:af:4a:44:a2:05:20:8e:69:49:
45:08:a7:08:00:ca:6b:e6:ef:7a:8e:19:73:95:a0:46:e4:f2:
5b:a9:a9:03:98:40:a2:d0:59:fa:2b:34:59:f6:42:e9:9c:d3:
a5:d9:92:bc:0d:c5:58:3e:e9:6f:da:40:ab:4b:bc:e3:96:85:
4c:3c:5e:78:78:91:1c:83:f1:e1:20:f1:d6:9a:19:94:57:b6:
35:69:31:f8:25:27:00:1c:a4:28:f3:c0:2c:a4:e6:e3:10:82:
fd:fe:a9:fa:de:c2:9a:fe:42:33:6f:d6:6c:74:db:56:62:cc:
0d:35:4f:34:7f:49:8a:c4:cc:1f:bf:cc:5b:fb:8b:06:0c:eb:
92:dc:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:17 2025 by rpki-client