Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa
File: vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa (raw, json)
Hash identifier: Y+O1z7Za7CP/+yHIIzznuHMKNtcJb361AC63q0+gtog=
Subject key identifier: BC:62:5F:1D:52:D9:7C:C9:C0:18:0F:6D:CF:E9:39:7E:3C:46:35:98
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 0194266C348C3BC368CB2B0200EB533BAE9E
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199826
IP address blocks: 185.33.45.0/24 maxlen: 24
185.33.46.0/24 maxlen: 24
185.33.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:34:8c:3b:c3:68:cb:2b:02:00:eb:53:3b:ae:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc625f1d52d97cc9c0180f6dcfe9397e3c463598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:46:78:68:71:4d:32:b6:80:fe:f4:f9:5b:
6d:d5:81:be:c7:49:e0:90:c3:73:07:41:af:be:20:
25:ad:ac:e3:b0:a1:c0:8f:cb:c8:aa:26:a8:90:7e:
d4:85:5a:7a:65:dd:72:33:5e:67:aa:a1:a1:89:63:
a9:67:34:3f:e3:72:f4:66:e0:b0:9b:88:9a:42:b1:
7a:b8:ac:bf:aa:04:01:90:38:c8:9d:08:66:2f:e1:
e4:bc:d5:64:bf:fe:3e:47:6c:1f:23:0c:e1:62:d9:
a2:86:9b:ab:fd:6d:95:2d:f2:ee:2b:b2:7c:6f:88:
bb:31:b0:f3:48:5f:dc:d6:65:d3:da:08:87:50:a4:
38:7a:2c:e6:aa:77:82:c8:0d:e4:6f:09:44:ad:df:
9c:3a:37:b7:39:b2:83:bf:4d:03:9c:6b:a7:d8:fa:
9c:53:22:70:27:87:41:5d:94:6d:cd:57:8e:29:ff:
a6:e8:f9:41:e7:cd:6a:d4:d8:48:c0:aa:b8:73:56:
c2:32:f3:de:ad:f4:08:85:f7:5c:ee:e4:ff:1e:d5:
d3:35:55:47:aa:d3:51:72:03:27:06:d6:9c:2e:57:
b8:2c:53:18:be:bb:83:d2:8a:38:d5:bc:e5:3f:84:
0b:22:b7:7a:12:95:b2:62:93:d5:ab:e1:cd:b2:69:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:5F:1D:52:D9:7C:C9:C0:18:0F:6D:CF:E9:39:7E:3C:46:35:98
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/vGJfHVLZfMnAGA9tz-k5fjxGNZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.45.0-185.33.47.255
Signature Algorithm: sha256WithRSAEncryption
46:f8:38:58:4e:22:65:73:55:ef:d4:14:af:19:95:55:9d:fc:
aa:44:57:c7:42:d3:5f:98:06:a6:e1:0c:34:89:61:38:5c:da:
04:35:9f:ce:02:ee:60:a9:a9:d7:3f:e6:89:fe:d0:a8:73:8d:
d5:a7:f0:6e:ce:d0:e3:4a:bb:35:48:91:d8:dc:08:31:b5:ba:
66:a8:8c:80:99:6c:35:ef:53:25:7d:7c:53:0d:a1:bd:9e:10:
fc:cc:4b:11:ae:66:1a:7a:fa:14:e3:17:6c:e7:01:85:28:9f:
3f:8e:52:fe:a7:e8:f1:18:4b:bd:2d:e8:00:14:bb:fd:fc:a3:
b8:67:11:28:93:ae:33:51:61:6e:79:ea:2e:5d:02:f0:a6:c2:
60:52:e0:26:1a:2a:d4:4e:bf:1c:1f:01:51:a6:95:33:08:ac:
af:7e:5f:3b:42:93:61:dc:5c:a7:e9:90:64:8d:88:aa:bb:9e:
83:f8:28:d6:80:3a:cf:e1:37:80:5c:fd:7b:a1:ca:bb:62:b3:
6c:eb:a5:1a:7c:f8:ff:14:e8:b7:9d:7e:af:5e:05:a8:35:25:
30:93:87:24:de:58:1e:9c:c8:26:0e:73:40:d7:ec:a5:78:c9:
1e:30:46:d7:2a:88:17:2e:e4:26:97:7e:fa:d0:75:3c:89:9e:
ea:19:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:09:10 2025 by rpki-client