Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa
File: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (raw, json)
Hash identifier: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=
Subject key identifier: A4:33:4C:59:90:66:E0:34:90:F0:86:93:05:12:B8:25:FC:8E:BC:F4
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 019424B3C4748C0E9CE14EE4154969903A7E
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205844
IP address blocks: 178.157.88.0/23 maxlen: 24
185.204.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c4:74:8c:0e:9c:e1:4e:e4:15:49:69:90:3a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4334c599066e03490f086930512b825fc8ebcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:01:30:89:bc:b5:e6:e2:f9:92:b2:ad:a9:
08:09:dd:96:0c:68:81:78:e0:5c:3d:cb:46:77:4b:
dc:a5:01:cb:81:19:b5:35:78:bb:4f:d5:b4:9b:db:
fb:bf:ba:40:03:32:8f:3e:ed:91:14:ec:69:7d:8c:
2f:ce:e8:5d:70:0e:0a:92:bd:dd:7e:52:b7:f8:ac:
ea:f1:f0:5f:32:de:c7:60:ff:c8:38:eb:78:5e:1c:
69:ae:d8:dd:3a:85:5f:07:cc:b2:04:eb:a7:a0:34:
ee:5c:fd:1d:d6:5a:41:fe:20:50:30:00:46:70:1e:
1b:95:d1:8b:de:5c:12:15:91:db:98:b2:e7:d2:39:
63:bc:1c:91:8e:84:95:f1:5e:cf:5f:85:8a:f4:b4:
dd:fe:f7:1b:c1:33:5b:eb:48:51:96:84:d1:da:8d:
34:30:03:4d:9d:0c:bc:32:6c:23:d5:34:9a:a8:fe:
63:40:fa:1b:2c:9b:de:4b:1c:3e:9e:3e:48:c0:ae:
98:6b:2b:91:4c:6e:9c:f8:63:1e:a5:b4:85:40:99:
db:dc:a9:4e:04:47:f8:2b:13:61:26:75:9a:4e:bc:
7d:83:4a:27:c8:0e:dc:d1:79:c9:af:11:76:6f:ea:
b2:59:46:cf:78:06:9d:3d:b1:06:3e:86:18:e7:de:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:33:4C:59:90:66:E0:34:90:F0:86:93:05:12:B8:25:FC:8E:BC:F4
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.88.0/23
185.204.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:50:90:2a:87:aa:9a:9e:86:fb:e6:f6:07:ff:db:e1:01:a1:
01:5d:2a:17:07:1b:40:7d:ba:18:d5:5e:3d:9f:2e:b8:9d:08:
dd:08:e0:89:f3:6c:8b:f7:ae:4b:2e:f9:e1:77:36:6c:11:10:
0c:25:de:fd:4e:ab:ff:77:4d:3b:01:2b:6f:6f:ec:b2:38:d5:
8f:3d:ec:0f:58:c9:b0:af:24:08:bf:27:71:92:35:80:c4:6a:
3b:2a:06:41:a0:69:e8:9a:5f:df:18:3a:09:d8:2e:c2:f3:0b:
c7:b7:d9:cd:5d:60:ce:25:21:cd:e7:2d:40:d6:d6:47:89:4d:
12:8f:9a:60:f3:bf:ec:35:14:fc:43:34:5a:ca:d9:bf:aa:a4:
2e:4e:78:ee:e3:04:de:a2:c3:e8:d9:a3:73:fe:9d:cb:93:79:
c7:51:d0:7e:2e:8f:d9:48:6b:02:18:06:fc:f2:2b:dd:78:90:
51:e0:6e:fe:be:d6:c3:6a:e4:8f:34:38:a6:c4:a5:81:41:fb:
35:12:fb:75:b7:05:9b:dd:83:77:52:f8:19:ee:d3:fe:4a:c4:
9c:6c:2c:e4:96:7d:48:a2:8e:33:d4:aa:10:ec:f0:43:e6:6b:
50:13:9f:f7:09:c4:2a:14:eb:cf:05:aa:be:62:c1:3e:bf:0e:
2d:60:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:50:11 2025 by rpki-client