Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/E5z0sS7nvixPBFyRI_RWT9Plr0w.roa
File: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (raw, json)
Hash identifier: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=
Subject key identifier: 13:9C:F4:B1:2E:E7:BE:2C:4F:04:5C:91:23:F4:56:4F:D3:E5:AF:4C
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01954D297E87198F93A2FA859E2A35E3BC0E
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/E5z0sS7nvixPBFyRI_RWT9Plr0w.roa
Signing time: Fri 28 Feb 2025 15:25:19 +0000
ROA not before: Fri 28 Feb 2025 15:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213646
IP address blocks: 185.137.220.0/24 maxlen: 24
185.137.222.0/24 maxlen: 24
2a0a:a500::/32 maxlen: 32
2a0a:a506::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:29:7e:87:19:8f:93:a2:fa:85:9e:2a:35:e3:bc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Feb 28 15:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=139cf4b12ee7be2c4f045c9123f4564fd3e5af4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7f:ce:dc:07:a5:c3:c5:fa:fa:2d:3b:db:e7:
30:a6:0f:02:e2:41:56:d8:b5:12:8d:56:d1:bd:93:
d6:59:84:e4:05:40:51:21:c9:6c:93:3d:9d:3a:f1:
e2:81:f5:16:3e:f4:2d:a8:e4:f8:4b:43:22:83:dd:
8e:f4:7c:68:fa:82:80:ac:7b:6c:99:20:f6:0c:36:
88:57:cf:7a:8b:63:d1:3c:4e:8e:2a:a9:09:42:79:
87:94:cc:8e:19:41:d3:ef:59:94:a5:f5:4b:20:f1:
f8:64:59:3a:d4:5e:33:80:19:2a:82:42:59:ed:89:
92:e2:98:8f:43:16:df:ab:87:88:ab:4d:ea:bd:67:
cc:91:03:28:69:a3:2d:85:ea:86:e5:84:72:93:ca:
e7:40:19:86:02:60:67:4a:60:c9:76:09:a1:71:5a:
ea:0b:a8:04:28:d0:6a:a2:29:55:fc:6d:58:01:ae:
43:01:0a:8e:cb:9e:56:1e:7c:33:05:04:06:38:4c:
1f:40:e3:ea:dc:46:04:96:aa:7a:fb:92:c2:85:71:
2d:21:68:e3:2c:18:29:7f:48:8a:16:e8:a1:d5:ab:
0a:b0:78:a5:22:07:3a:15:e4:32:6d:e9:9c:bb:03:
b1:3b:d7:b8:9d:fb:38:53:d0:6c:76:5f:f6:7b:f0:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9C:F4:B1:2E:E7:BE:2C:4F:04:5C:91:23:F4:56:4F:D3:E5:AF:4C
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/E5z0sS7nvixPBFyRI_RWT9Plr0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.220.0/24
185.137.222.0/24
IPv6:
2a0a:a500::/32
2a0a:a506::/32
Signature Algorithm: sha256WithRSAEncryption
ac:50:13:5a:83:69:26:9d:55:ed:8e:b8:4a:1b:71:fb:97:17:
49:98:9e:9d:ad:71:f9:8b:87:a6:7a:f6:f0:6c:fd:5b:cd:e4:
11:fe:cb:c6:74:74:02:fd:00:2a:4f:ba:70:80:fc:b0:37:ee:
fe:81:12:a9:34:fe:1f:85:56:8d:87:a4:2d:f3:dd:65:31:7a:
e2:80:ef:7a:3f:cb:db:d7:42:82:f6:2c:09:6c:a8:6c:39:d0:
c2:40:eb:f5:b5:0c:a1:18:18:b1:8f:21:28:05:9d:22:88:89:
c4:45:29:93:4e:b3:9a:83:67:eb:8d:61:42:ee:50:60:db:9f:
48:09:16:ed:82:5b:78:c7:4a:a9:e9:2e:f0:c2:1a:86:2b:7f:
79:82:72:be:83:1d:ef:87:36:12:20:09:6e:ca:e4:0e:41:31:
fa:46:bb:89:01:14:da:22:fe:c1:9c:92:e3:94:ae:6d:7d:9d:
98:77:5b:23:3b:20:0e:22:b7:02:af:49:ff:bf:53:4d:97:eb:
cd:9d:e1:75:6d:99:4f:31:aa:51:7a:b7:4f:e2:08:4b:af:f3:
c4:5c:44:c6:eb:3c:c8:73:2f:04:e6:bb:46:e4:26:7a:20:c2:
da:e2:9e:7e:43:8d:20:7f:1b:ac:32:1d:ec:a9:d7:d4:46:23:
65:8e:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:37 2025 by rpki-client