Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/K_S25NvkOjpU_Bj9DbxQmJazd14.roa
File: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (raw, json)
Hash identifier: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=
Subject key identifier: 2B:F4:B6:E4:DB:E4:3A:3A:54:FC:18:FD:0D:BC:50:98:96:B3:77:5E
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D2E7A62617CDD23193E508FDDBD7
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/K_S25NvkOjpU_Bj9DbxQmJazd14.roa
Signing time: Thu 02 Jan 2025 17:50:23 +0000
ROA not before: Thu 02 Jan 2025 17:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47206
IP address blocks: 93.182.192.0/18 maxlen: 18
188.224.0.0/17 maxlen: 17
2a00:e880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d2:e7:a6:26:17:cd:d2:31:93:e5:08:fd:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bf4b6e4dbe43a3a54fc18fd0dbc509896b3775e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:1c:57:c5:ed:27:da:ca:06:a3:74:72:3b:
8f:02:d7:39:94:58:37:1d:dd:b5:00:7f:ba:1c:2d:
0c:5a:5e:2c:99:e1:27:a0:e1:07:25:e7:a7:a6:b1:
43:23:de:a5:71:41:08:3a:08:67:26:58:03:f8:b2:
ad:aa:42:5a:34:33:de:20:2d:b0:29:15:e4:aa:c4:
91:4c:ce:79:a9:19:43:cb:ef:d8:4d:fb:86:9e:aa:
9a:e4:c5:a2:dd:27:10:d9:5d:70:35:85:48:88:0b:
eb:74:07:30:c5:4f:3c:8f:fd:3d:91:0a:7a:95:9b:
4c:75:61:c5:b2:73:88:91:8c:72:ba:ec:eb:bd:28:
58:f0:4e:71:f6:d0:1e:95:28:16:52:94:3f:f6:ff:
9f:fb:44:55:c3:e5:25:55:e0:13:01:a7:a4:54:8b:
b0:d9:f2:bd:c5:2c:b0:11:55:27:00:67:5e:e5:47:
a8:7e:6a:41:50:bc:a0:78:c2:3c:2f:15:f8:ed:9a:
cf:f5:d8:41:dd:35:f6:fc:29:3c:e0:65:d9:6d:4b:
87:de:c2:ff:1e:7b:84:60:97:48:ed:40:1f:5d:c5:
2b:e8:2e:ad:53:59:be:e0:89:62:94:c3:15:cf:b2:
b6:b3:d0:4c:b0:a1:19:63:c4:b3:bd:78:e2:56:3d:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F4:B6:E4:DB:E4:3A:3A:54:FC:18:FD:0D:BC:50:98:96:B3:77:5E
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/K_S25NvkOjpU_Bj9DbxQmJazd14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.182.192.0/18
188.224.0.0/17
IPv6:
2a00:e880::/32
Signature Algorithm: sha256WithRSAEncryption
9f:cc:73:44:6e:72:02:df:20:04:68:50:3c:48:9c:ac:d1:5b:
aa:ac:c3:01:bd:3d:5b:00:2c:ee:bb:51:8e:c0:7c:c1:78:94:
12:5f:41:fa:12:31:36:12:4c:96:cb:6c:18:eb:5e:22:37:38:
9b:1e:26:b5:3b:4c:7f:84:80:ae:6a:df:7d:82:1d:eb:a7:10:
de:20:2c:8c:51:cb:b5:23:aa:f9:bb:b9:af:39:2d:75:d2:0c:
ad:ac:62:42:fb:ef:f4:51:93:c3:0c:16:6c:03:04:f9:11:bd:
6b:42:14:31:48:e7:b8:bf:84:bf:a2:6e:b8:30:48:23:00:4b:
a6:84:d1:c7:f1:04:d1:c6:3b:df:5f:ba:6a:d9:52:79:1a:71:
ee:bc:02:92:ab:a8:6a:d3:ca:8f:ba:81:27:f7:82:c7:39:b3:
e0:d2:ec:8d:b1:23:29:3a:7e:52:79:26:1f:aa:cb:f8:da:98:
61:ec:f7:d2:0e:4a:a5:87:eb:5b:14:f6:7a:85:dd:1a:e5:42:
30:92:32:a4:75:df:22:f1:36:d8:6b:15:3f:c8:6b:cd:f9:31:
02:f9:ef:16:84:10:33:8f:e7:30:24:ac:99:3f:e9:6c:57:ed:
f3:b0:c2:bf:76:08:a7:5f:ab:66:fc:5c:2f:a0:a9:1e:83:46:
81:00:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:46 2025 by rpki-client