Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa
File: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (raw, json)
Hash identifier: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=
Subject key identifier: BA:F6:7D:16:86:E5:23:3C:D0:1F:50:D0:8C:EB:DC:06:14:8A:79:95
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 0195B84080319414DCF2EB2B5D5301B8B973
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa
Signing time: Fri 21 Mar 2025 10:29:49 +0000
ROA not before: Fri 21 Mar 2025 10:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35717
IP address blocks: 185.12.48.0/22 maxlen: 22
185.114.4.0/22 maxlen: 22
185.128.236.0/23 maxlen: 23
185.128.238.0/24 maxlen: 24
185.129.44.0/22 maxlen: 22
185.199.40.0/22 maxlen: 24
193.36.45.0/24 maxlen: 24
195.137.184.0/24 maxlen: 24
195.200.195.0/24 maxlen: 24
2a03:7fc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:40:80:31:94:14:dc:f2:eb:2b:5d:53:01:b8:b9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Mar 21 10:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf67d1686e5233cd01f50d08cebdc06148a7995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:0c:6f:c1:80:91:53:e4:69:44:7f:35:47:
aa:1a:ba:98:9e:3c:9f:d9:f8:c9:e6:de:33:d8:35:
d0:23:09:21:a4:94:e4:04:ac:24:97:a3:e6:e4:33:
19:9c:bd:6f:e7:e5:db:5d:72:3d:8d:91:72:03:19:
7e:bf:6a:cd:f4:c2:23:f5:7d:c9:b3:6a:23:ef:4b:
ad:b7:99:0e:97:9d:35:67:ca:be:36:fa:16:3d:e8:
7d:1f:a4:8e:77:6f:3b:56:79:4e:53:6f:52:5f:04:
d8:8f:05:47:e0:40:f0:2d:8b:46:0c:5f:cb:04:61:
50:fc:12:5f:a0:9e:a5:8c:c3:1e:63:98:36:d9:0e:
3f:d5:20:75:19:c2:cb:64:0f:9b:e2:f4:b9:d6:0d:
1d:7b:e1:a1:55:30:49:10:af:61:93:c5:52:b7:65:
fa:85:8c:51:cc:45:26:b2:62:4b:0e:dc:4f:82:4a:
f0:89:db:a2:a8:a0:27:55:84:38:3c:5b:e1:1b:6e:
ae:74:23:00:60:ab:bd:9e:31:0b:c3:8d:c6:20:05:
9b:e8:de:79:02:f2:e3:0b:f0:31:be:a0:09:91:09:
30:4b:90:66:27:7c:89:d8:ec:be:2c:bd:db:98:2c:
7e:83:bb:7a:c5:66:65:0f:d4:15:d7:26:26:23:ec:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F6:7D:16:86:E5:23:3C:D0:1F:50:D0:8C:EB:DC:06:14:8A:79:95
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.48.0/22
185.114.4.0/22
185.128.236.0-185.128.238.255
185.129.44.0/22
185.199.40.0/22
193.36.45.0/24
195.137.184.0/24
195.200.195.0/24
IPv6:
2a03:7fc0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:d0:a7:20:1a:6b:2e:2e:c2:37:9c:eb:b5:b1:4e:f3:4d:df:
78:39:11:63:8a:11:0f:eb:90:4a:ed:30:f0:2a:03:91:f9:7b:
89:85:4b:f3:05:96:f9:61:80:6a:d3:25:7b:80:26:98:f2:b3:
81:25:31:27:77:c2:06:5f:13:c3:75:ef:22:cb:23:a7:11:4e:
22:9c:b2:3f:b5:03:99:68:e7:93:78:20:fa:df:19:76:36:a2:
28:87:74:83:29:61:b4:8c:72:85:b6:4c:70:7a:5b:c5:ca:ae:
e1:21:f5:b2:5f:3e:4e:82:97:54:5b:25:5d:0c:6a:97:d4:6d:
51:13:c5:08:f6:d1:bd:73:c4:c0:8b:0e:fc:2b:34:20:2b:1a:
42:c9:54:52:27:f6:f7:3c:b8:cc:5b:b7:0b:3d:79:84:44:70:
80:b6:81:50:ad:7e:70:35:67:76:8e:ec:b4:c4:34:40:8e:74:
8a:73:66:78:90:f4:7e:be:60:a0:68:9c:d6:66:ce:e2:13:21:
4e:c4:50:e2:2d:c9:2c:58:ac:76:2e:24:b7:b8:d8:ba:77:5a:
54:5b:69:e8:a2:7f:94:4d:76:e9:3e:0e:b4:30:1b:ba:f2:a7:
38:72:0a:83:27:fc:08:43:5b:e9:f3:d7:1b:47:94:43:ad:b6:
b5:ed:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:35:26 2025 by rpki-client