Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/SUpll5U8ppta_w4aro5suC6r4wU.roa
File: SUpll5U8ppta_w4aro5suC6r4wU.roa (raw, json)
Hash identifier: ZRvbjWizyvhZg7Bqt/yuk8GupOGwY3kED5A1cfchDJg=
Subject key identifier: 49:4A:65:97:95:3C:A6:9B:5A:FF:0E:1A:AE:8E:6C:B8:2E:AB:E3:05
Certificate issuer: /CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
Certificate serial: 0194258FB8BD3D13A398DE8BE8889A45F61C
Authority key identifier: E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/SUpll5U8ppta_w4aro5suC6r4wU.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206087
IP address blocks: 185.221.40.0/24 maxlen: 24
185.221.42.0/24 maxlen: 24
185.221.43.0/24 maxlen: 24
195.234.43.0/24 maxlen: 24
2001:67c:690::/48 maxlen: 48
2a09:f00:a::/48 maxlen: 48
2a09:f00:b::/48 maxlen: 48
2a09:f00:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b8:bd:3d:13:a3:98:de:8b:e8:88:9a:45:f6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=494a6597953ca69b5aff0e1aae8e6cb82eabe305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:85:16:0a:ec:e4:e2:a7:61:80:eb:6a:8c:
cd:8a:c6:4a:eb:00:3a:0b:72:a5:27:dc:ea:83:7a:
4e:f7:df:9b:f6:27:94:9e:6c:bb:4e:c5:04:ec:8a:
fa:06:6c:66:85:5c:cd:dc:c2:de:9b:87:30:bb:5d:
3b:6f:92:3c:0c:0c:6c:f0:23:54:f1:4f:90:78:4f:
13:c1:cc:a3:6d:61:1b:9c:ec:a7:9c:2f:d9:50:90:
60:80:67:02:76:07:d3:6e:85:de:c3:35:be:8b:6e:
b7:87:da:00:13:f2:94:d0:69:b8:55:78:b5:18:96:
29:0b:43:6a:8b:90:eb:3b:ad:da:20:3a:d6:02:25:
0a:5c:85:6b:6c:61:5f:2c:fd:73:51:a5:f5:40:24:
32:52:25:fe:87:4f:c8:5a:24:ad:c7:3e:b1:78:e0:
cc:c4:c5:06:0c:27:7b:db:50:02:d3:d4:a1:2c:fd:
bf:49:9f:d7:7b:c8:fa:88:58:2d:2f:c9:8c:5d:25:
96:5f:0e:9d:96:69:d4:44:0a:96:b0:1e:c1:30:73:
52:42:6b:a9:01:b6:75:89:68:ac:cb:8d:11:7b:e2:
4e:dc:14:51:3d:44:21:fb:34:13:78:9e:44:7e:c8:
a1:3d:dc:e0:94:83:49:59:94:6b:8c:51:1f:f6:11:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4A:65:97:95:3C:A6:9B:5A:FF:0E:1A:AE:8E:6C:B8:2E:AB:E3:05
X509v3 Authority Key Identifier:
keyid:E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/SUpll5U8ppta_w4aro5suC6r4wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.40.0/24
185.221.42.0/23
195.234.43.0/24
IPv6:
2001:67c:690::/48
2a09:f00:a::/47
2a09:f00:ff::/48
Signature Algorithm: sha256WithRSAEncryption
0b:59:ae:fe:4b:f6:5e:8a:ca:a3:92:44:c6:be:79:a3:f5:8c:
f9:b5:f8:54:a3:0a:d3:0e:01:49:b3:55:68:bf:0d:63:6e:14:
23:db:50:8b:d3:cf:20:92:55:0f:7b:b9:55:ec:6d:71:c7:53:
dd:5a:c6:4e:c1:0d:2c:8b:0b:93:81:98:86:f8:c6:8c:a0:02:
f2:ed:a2:ee:81:b6:27:be:45:a7:a5:b1:fa:a0:cd:f8:02:bb:
bd:3c:05:9a:3c:fc:0b:ad:99:53:fa:0e:61:b7:9e:3c:f0:e9:
5c:c3:74:5c:e8:b8:0e:5d:36:a9:ee:39:34:8d:cf:9a:d3:fa:
2f:f2:71:36:95:c2:c1:9f:75:e6:80:83:ed:e9:79:2a:4c:28:
be:a7:8d:91:f6:19:09:42:18:8f:88:62:bb:04:ff:5e:d0:05:
7e:ec:b9:2a:71:8f:50:18:85:a3:7b:ab:56:fe:01:fb:00:63:
8e:f6:f0:8b:65:4f:95:cb:35:c4:ee:72:10:f6:bf:51:b5:a3:
ad:c0:29:b0:c2:9d:bc:e3:53:1d:8a:78:b5:8a:8d:06:43:5f:
1d:1c:46:7a:e7:84:f1:3b:ce:7a:91:5a:21:f3:7d:27:b7:13:
97:a0:9c:db:4e:72:11:3f:85:e7:32:4c:20:e7:8f:54:84:b4:
c6:2f:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:09 2025 by rpki-client