Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa
File: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (raw, json)
Hash identifier: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=
Subject key identifier: E1:52:72:01:E1:95:80:0B:36:CA:C7:59:47:0F:EB:94:E5:9D:45:36
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019726460F3BC596B5C2807E4B6785BE2925
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa
Signing time: Sat 31 May 2025 12:16:55 +0000
ROA not before: Sat 31 May 2025 12:16:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 185.120.56.0/24 maxlen: 24
185.120.57.0/24 maxlen: 24
185.120.58.0/24 maxlen: 24
212.22.75.0/24 maxlen: 24
212.22.77.0/24 maxlen: 24
2a06:c3c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:26:46:0f:3b:c5:96:b5:c2:80:7e:4b:67:85:be:29:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: May 31 12:16:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1527201e195800b36cac759470feb94e59d4536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:c5:59:4f:71:46:32:c1:b1:95:13:9b:10:
1f:51:58:8d:89:0f:c4:95:e1:73:74:08:96:d3:12:
d7:b7:e9:3e:35:76:4d:d5:19:7b:3a:df:39:60:e1:
18:d8:83:d8:c0:0c:11:f7:8b:3f:33:15:3d:51:b8:
c6:11:1c:b7:e0:ea:11:d6:6b:54:76:14:42:51:21:
25:89:c9:2b:21:6c:70:40:34:20:de:f1:20:c9:19:
57:40:42:6d:30:ba:bb:7f:11:aa:10:ca:dc:7f:0a:
52:7c:83:04:cd:3d:1f:a9:f6:8e:ab:d3:47:cc:4b:
57:d7:01:00:ee:e1:c0:e9:0b:cc:55:7a:fd:b0:49:
52:80:fa:7f:87:3d:bb:a4:9a:32:88:bd:15:3d:60:
5b:69:71:0a:aa:82:61:a3:0c:ba:d4:18:d1:08:a2:
ab:3c:24:47:6e:a0:4f:14:02:15:7d:32:2d:03:91:
ff:c6:0d:19:3d:0e:41:9f:85:c6:e4:d4:3f:64:99:
16:ad:74:92:a0:ca:7b:de:d3:67:b5:35:ce:a4:e4:
5c:82:73:bd:33:07:b7:bb:b6:d7:e9:58:55:0a:a2:
da:4d:1b:ce:2a:d8:8a:62:6b:14:51:dc:7c:01:28:
10:60:1b:22:1d:9c:64:ab:b4:d9:66:70:9e:f3:b6:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:52:72:01:E1:95:80:0B:36:CA:C7:59:47:0F:EB:94:E5:9D:45:36
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.56.0-185.120.58.255
212.22.75.0/24
212.22.77.0/24
IPv6:
2a06:c3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
89:31:ff:58:52:47:12:2f:85:5b:f5:c0:38:48:3e:bb:9a:d8:
1c:e6:3c:b2:11:69:0e:5a:37:dd:c0:40:ae:fc:6b:4d:22:8b:
1a:39:43:49:1c:9f:c4:e2:66:2c:87:d5:93:ba:c0:9a:60:c5:
b6:0c:aa:95:79:c2:cb:ef:5c:15:62:ff:29:4d:7f:da:15:79:
0e:bd:da:ca:5e:f4:10:9d:32:77:fd:bc:32:d1:f3:bd:cb:9a:
1f:7e:8b:d6:0a:ec:fc:92:af:81:fe:61:25:45:66:45:ee:58:
8b:e3:23:39:33:4c:8d:15:e8:dc:fb:9d:01:e5:a5:a6:54:55:
ad:fb:9e:d4:98:ba:8b:74:93:19:d3:22:4c:1f:97:05:90:92:
41:c6:25:75:99:b2:cf:af:1f:f3:09:f7:4f:71:5a:75:b2:34:
4b:6c:d3:e4:32:ef:97:3c:5f:70:95:98:74:87:ce:38:c6:7a:
fa:72:bb:33:09:9a:19:7c:7e:41:1c:11:0b:93:b6:42:14:b4:
dd:a1:d1:4f:bd:96:69:23:c2:74:fd:d7:87:cb:dc:8e:3e:24:
56:b4:0c:7c:2d:cd:43:37:f0:8e:81:73:8a:12:e8:97:29:6c:
66:d7:78:a0:b6:ed:ac:cd:10:d3:72:d2:43:cb:18:e5:c8:29:
d8:af:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:05:10 2025 by rpki-client