Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/acvvT5q-PVeUjsCLlPVuoTE00po.roa
File: acvvT5q-PVeUjsCLlPVuoTE00po.roa (raw, json)
Hash identifier: MQoBLU//Irn0dEBmlINyAJ8ehIRD+2s0D9hVDHRZB5A=
Subject key identifier: 69:CB:EF:4F:9A:BE:3D:57:94:8E:C0:8B:94:F5:6E:A1:31:34:D2:9A
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 0194221FFCDF87B869019BA5A1C5AA2FA5A5
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/acvvT5q-PVeUjsCLlPVuoTE00po.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199728
IP address blocks: 185.48.112.0/24 maxlen: 24
185.48.113.0/24 maxlen: 24
185.48.114.0/23 maxlen: 23
2a04:adc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fc:df:87:b8:69:01:9b:a5:a1:c5:aa:2f:a5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69cbef4f9abe3d57948ec08b94f56ea13134d29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:33:4a:15:44:17:00:0c:ab:40:11:27:d9:
b0:93:aa:3b:13:db:f4:26:5e:cc:9a:19:e4:e0:8d:
db:80:53:5c:59:39:48:d2:3f:50:17:67:69:34:62:
a7:8e:34:3f:3f:0e:d3:d7:a3:3d:ac:c5:81:2d:1e:
b6:78:35:c4:56:2b:fc:4f:3d:43:46:73:8d:f2:ae:
87:66:fc:4f:c2:24:f9:c6:23:b9:18:e9:da:9a:68:
34:23:d8:21:fd:09:69:7e:ba:e3:ba:31:eb:d2:ec:
87:95:e4:53:f0:8c:9e:41:0c:28:90:9f:ac:33:0e:
f5:93:1f:4a:09:14:02:f7:16:d6:e8:5d:cf:87:47:
5f:00:96:5e:0c:77:d3:11:32:37:1f:bd:4c:6e:39:
17:d3:ae:3e:b2:4e:5a:ff:d7:8c:48:d8:45:67:58:
5c:88:0f:5d:44:71:d5:d4:5b:52:3c:4a:e6:58:c2:
5d:6f:f3:91:e8:a3:df:2e:1b:c0:3a:e0:4d:d5:52:
04:43:93:75:99:ac:b3:5e:7e:16:25:ff:12:ff:36:
8a:b2:d0:d1:1c:2b:57:85:07:1e:5f:c5:77:87:ff:
97:ed:06:de:50:af:6d:e4:71:d0:c7:1e:2f:40:08:
07:1f:20:12:96:34:25:1e:aa:f3:9e:d4:e3:e3:5c:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:EF:4F:9A:BE:3D:57:94:8E:C0:8B:94:F5:6E:A1:31:34:D2:9A
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/acvvT5q-PVeUjsCLlPVuoTE00po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.112.0/22
IPv6:
2a04:adc0::/29
Signature Algorithm: sha256WithRSAEncryption
98:76:6a:9f:92:ec:04:1c:5f:eb:52:ff:fd:5d:4c:f9:8c:a3:
04:9e:ed:64:cb:54:e7:91:be:92:9f:cf:59:49:7a:6e:f0:be:
3e:b0:54:dc:de:53:c6:71:b5:29:23:4b:35:37:ff:7d:d5:00:
eb:d2:b4:78:32:19:9c:fc:93:0a:df:44:63:79:6c:ca:f8:7b:
8d:1b:26:6f:67:b1:b6:57:e5:5b:3b:d4:4c:9a:15:fc:f3:8b:
ae:f4:da:b1:f9:a1:58:0b:16:a2:93:39:52:5e:27:1f:26:b2:
21:a4:6b:d0:99:8f:01:e1:97:11:1f:96:1c:5d:67:44:54:15:
10:82:f6:dd:27:3b:1c:7a:c7:65:08:06:33:52:f5:3a:a3:7c:
9b:c8:c5:42:81:09:72:4e:78:8b:26:44:cc:e5:b7:78:15:19:
c2:8d:35:80:1e:49:6c:b0:3f:3a:4b:00:b3:3a:b3:70:31:47:
4a:c8:a0:70:93:5c:ce:11:c4:e5:f9:5d:ad:9f:38:1c:1b:eb:
ef:92:62:8b:a9:6f:74:92:3c:1f:54:3b:9b:bb:9e:89:e0:94:
eb:74:fb:fd:ee:7b:b2:45:f6:8a:7f:32:e9:13:54:1e:36:63:
01:c3:20:46:74:3b:38:44:5f:df:52:1a:40:a5:45:35:97:bc:
d2:2b:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:54 2025 by rpki-client