Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/ove2TkiR5Y_QzNqFVx6binaCimY.roa
File: ove2TkiR5Y_QzNqFVx6binaCimY.roa (raw, json)
Hash identifier: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=
Subject key identifier: A2:F7:B6:4E:48:91:E5:8F:D0:CC:DA:85:57:1E:9B:8A:76:82:8A:66
Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial: 01941F8C3A97D31D54A6770235EF292AB44E
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/ove2TkiR5Y_QzNqFVx6binaCimY.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206472
IP address blocks: 185.185.176.0/22 maxlen: 22
185.185.176.0/24 maxlen: 24
185.185.177.0/24 maxlen: 24
185.185.178.0/24 maxlen: 24
185.185.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3a:97:d3:1d:54:a6:77:02:35:ef:29:2a:b4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2f7b64e4891e58fd0ccda85571e9b8a76828a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:f5:48:b3:9a:f0:a7:12:3c:ed:80:d6:0c:
a8:f4:74:f8:f3:1f:9a:d7:31:d1:f3:54:00:c0:86:
07:cb:66:4e:95:9a:8b:77:17:ee:74:57:a3:10:78:
9e:23:fc:e4:56:ad:f4:fd:9b:b0:83:13:74:b6:bc:
19:2d:60:ad:0b:5a:25:7d:a5:4b:e8:ec:7d:1b:48:
f5:74:bc:55:8b:22:59:a7:42:d4:b8:b4:ae:2e:d4:
48:9f:d3:b9:6a:c7:a8:e7:82:be:97:2a:04:49:84:
a1:71:37:60:cb:f8:00:84:99:b8:4d:15:49:e4:5f:
e2:1d:76:ea:b9:ae:19:db:8c:7c:ad:a7:b0:67:c4:
8b:25:31:15:49:d0:59:46:8d:5d:af:a0:22:e8:ab:
f5:be:04:63:53:e2:2a:84:3a:19:ce:c8:84:58:7c:
b0:67:8e:8a:60:ef:6f:40:32:18:01:c9:d6:5f:63:
13:7a:45:fb:e0:a2:cf:21:51:d9:23:ce:73:f3:9e:
f0:8e:f4:98:b9:3a:dd:39:55:90:0c:8d:49:de:27:
a0:6b:d5:95:c0:39:08:37:61:3c:8c:1e:98:16:50:
f5:9d:01:f9:27:65:11:43:54:e6:7b:10:93:75:6f:
18:08:6d:a8:1b:94:ef:80:1f:af:e9:e4:09:2f:0a:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F7:B6:4E:48:91:E5:8F:D0:CC:DA:85:57:1E:9B:8A:76:82:8A:66
X509v3 Authority Key Identifier:
keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/ove2TkiR5Y_QzNqFVx6binaCimY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.176.0/22
Signature Algorithm: sha256WithRSAEncryption
49:7e:31:3b:9e:66:e6:a3:c8:aa:08:4f:22:74:0d:10:0f:bc:
9a:99:9d:0a:28:a7:a4:9f:f1:fe:c4:f9:08:12:18:7c:d2:63:
7a:c5:74:a6:d8:22:3f:60:6e:a7:a5:e5:90:79:38:a7:93:df:
f1:dc:05:5f:e6:60:9a:b0:9e:72:14:b5:0d:16:b2:5d:86:5f:
14:36:cb:ee:c9:94:9b:1a:0b:36:03:d0:5c:4f:f1:cf:67:59:
47:39:d1:c9:0f:f7:77:00:cd:f5:4c:a3:29:4a:64:33:f9:bc:
fe:cf:0d:fb:00:74:7d:d3:79:9d:08:ef:de:45:00:1d:15:4a:
c8:18:56:d5:38:2d:7e:c3:e1:c0:7f:a4:d6:1a:92:46:9e:4e:
3f:a6:32:da:04:96:cb:06:f2:ef:c0:e2:f5:5c:75:f6:d0:9c:
31:eb:38:ec:6f:f7:96:12:71:93:67:ed:21:3c:cb:0b:13:c0:
ef:a8:5d:7c:6e:81:3b:7b:f1:28:81:48:ab:d1:13:e6:8c:7b:
7e:99:ff:a8:3e:c1:b2:6e:d2:0d:91:1e:b4:e5:e5:16:4f:af:
d9:79:83:e4:48:e3:a7:b4:58:ba:e9:e4:85:9b:c7:d9:03:01:
9e:e9:d4:90:17:c6:51:db:ce:ee:62:51:7e:4f:6c:8d:0a:9f:
37:3b:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:45:00 2025 by rpki-client