Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa
File: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (raw, json)
Hash identifier: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=
Subject key identifier: EE:F7:58:E9:F2:B2:24:BE:B1:39:31:16:1C:F4:33:9D:68:35:72:E4
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 0194258EDCDC86657BC66E57D297B5D66487
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa
Signing time: Thu 02 Jan 2025 05:48:27 +0000
ROA not before: Thu 02 Jan 2025 05:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42398
IP address blocks: 185.193.56.0/22 maxlen: 22
185.193.56.0/24 maxlen: 24
185.193.57.0/24 maxlen: 24
185.193.58.0/24 maxlen: 24
185.193.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:dc:dc:86:65:7b:c6:6e:57:d2:97:b5:d6:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eef758e9f2b224beb13931161cf4339d683572e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:14:70:f8:37:37:f3:22:da:9f:76:a6:ea:
b7:5e:5b:b2:2f:0d:1e:c1:9a:32:ee:46:a2:2d:5c:
ee:7b:43:aa:42:29:fa:7b:a3:ef:84:79:d9:b9:5d:
3e:76:7d:d5:07:6c:a8:b2:81:2e:ea:f2:e1:35:fc:
de:cb:d1:66:07:27:bf:eb:9c:db:d5:05:4e:77:34:
43:f8:b4:16:73:de:30:7f:5f:cb:7e:a1:43:2c:d1:
31:e4:5f:a8:2c:7e:56:23:c0:09:58:73:0d:56:21:
c8:2d:66:a9:fb:cf:df:34:76:ea:08:5d:c5:db:4c:
be:7c:0a:05:e5:84:95:02:2e:21:7c:36:3b:03:45:
30:0d:ce:02:f5:fd:a1:4b:da:2f:d3:0e:1c:74:61:
c2:be:90:83:52:4b:29:50:db:2e:03:27:6e:78:03:
72:94:ac:e5:c2:8e:e7:2c:b8:d6:b6:b0:54:55:7f:
02:28:e0:5b:dc:df:d1:cb:e7:1f:a4:b8:23:08:f8:
60:85:e5:cc:14:22:b1:13:df:75:94:c8:d8:83:5f:
24:77:9b:dd:6d:23:be:03:ad:6b:ac:cb:8f:65:7d:
f9:c8:41:40:e9:38:de:63:a1:ba:f8:2e:56:a3:eb:
09:2a:00:78:50:b3:ec:64:bb:1f:4c:4c:39:25:20:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:58:E9:F2:B2:24:BE:B1:39:31:16:1C:F4:33:9D:68:35:72:E4
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.56.0/22
Signature Algorithm: sha256WithRSAEncryption
91:94:24:11:91:16:63:33:88:8c:94:4a:86:fd:1b:eb:76:99:
42:c8:6e:33:a0:88:8a:39:db:f1:52:88:9e:ae:56:06:03:05:
40:5d:a8:1f:16:61:bf:0b:a5:94:d6:66:79:64:af:ef:e2:29:
86:b4:02:63:36:c2:89:66:fd:31:35:2d:13:7e:8f:c1:ac:cc:
ad:34:0e:a7:31:f3:b0:89:62:bf:cb:e4:16:e7:cc:91:9a:f5:
3d:11:56:e8:dd:a1:fe:49:04:e3:b4:8d:7c:38:64:7a:e7:08:
70:76:67:06:7b:b8:c7:5d:b4:04:f7:f6:16:83:d1:07:d2:d4:
24:c6:58:19:9c:0a:a0:12:0e:27:21:2b:56:cb:83:86:00:00:
6c:3c:a2:d1:44:88:e5:ee:8e:cc:a0:fa:0c:fa:da:e6:8b:78:
c6:9f:d8:61:69:7e:6a:8c:38:1e:1d:ae:28:76:4c:b9:bc:29:
63:b9:26:4b:6e:bd:f8:cb:6d:b4:64:ff:98:49:58:db:23:49:
6c:6c:4c:6f:03:45:e3:4d:92:a6:d4:9c:b0:0f:a9:bb:7f:3c:
5b:8e:63:18:12:2b:69:95:3c:c4:f6:37:76:40:5e:9e:2f:7a:
c6:69:4d:90:c8:39:ae:56:6f:71:b3:5d:8d:bf:0e:c4:93:cd:
1c:f5:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:44 2025 by rpki-client