Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5tvv_my6kwYKkcbCmceqc1ZQxL4.roa
File: 5tvv_my6kwYKkcbCmceqc1ZQxL4.roa (raw, json)
Hash identifier: rmpy0qAHy/Xw5epecNEyg2VQIYu3EUq/AJFLta6aePY=
Subject key identifier: E6:DB:EF:FE:6C:BA:93:06:0A:91:C6:C2:99:C7:AA:73:56:50:C4:BE
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01946B39F029B0F96D8E1909F47791251681
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5tvv_my6kwYKkcbCmceqc1ZQxL4.roa
Signing time: Wed 15 Jan 2025 18:29:06 +0000
ROA not before: Wed 15 Jan 2025 18:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 185.100.157.0/24 maxlen: 24
185.102.115.0/24 maxlen: 24
185.177.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:39:f0:29:b0:f9:6d:8e:19:09:f4:77:91:25:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 15 18:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6dbeffe6cba93060a91c6c299c7aa735650c4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:3e:19:be:86:a7:96:81:b1:ac:24:5a:9b:
09:09:68:69:74:3f:46:83:dc:fd:0c:77:7b:04:d1:
63:91:7d:f2:49:6f:64:93:10:fd:be:79:5e:1c:37:
73:5c:40:5f:8f:ec:4d:24:ce:23:dd:0d:ed:b2:b5:
87:5a:dc:51:4e:0b:da:b9:fd:0f:d4:80:cb:7b:9b:
e6:a1:fb:fa:55:88:e4:36:a4:a0:48:c0:81:fa:23:
76:66:67:14:23:24:9b:7d:3d:ae:5e:08:fa:51:96:
78:c1:7f:ce:ba:b6:b2:be:e7:40:b7:f6:53:a6:34:
b1:5b:d1:2b:db:1a:7c:47:ce:3a:7a:a1:6c:3f:14:
1f:6c:ec:ac:f6:e2:b1:89:23:a2:25:99:12:db:e2:
ee:46:8d:aa:31:40:1e:a7:73:b7:e5:17:3b:e4:03:
37:bc:b6:83:f4:cb:84:70:3f:50:f6:04:0c:46:56:
13:89:c7:10:10:ac:b0:d0:a6:ae:67:5a:4d:1b:4c:
da:8e:a2:00:c4:f7:ad:3a:9b:2d:2e:a1:e1:93:00:
f3:cd:a4:cf:06:c5:d5:9d:a4:15:84:86:3a:90:26:
ee:7a:26:65:da:16:84:38:e7:f1:05:cc:a1:8d:46:
e6:01:97:0c:ef:da:2d:f5:14:96:a4:9a:43:c8:de:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:EF:FE:6C:BA:93:06:0A:91:C6:C2:99:C7:AA:73:56:50:C4:BE
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/5tvv_my6kwYKkcbCmceqc1ZQxL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.157.0/24
185.102.115.0/24
185.177.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f1:a3:69:b7:b4:bf:25:f2:7a:f5:af:c7:23:5e:3c:b4:d0:
15:39:da:f8:2b:7b:b8:f5:b6:30:08:f4:bb:6c:4b:f8:c4:09:
ec:c7:00:cb:09:b6:f4:63:24:ff:d8:f9:a7:88:a9:f7:8f:a2:
63:45:8a:56:48:30:a8:de:f1:f9:9c:75:29:ac:80:d6:d9:d6:
23:65:63:fb:ed:71:5b:a2:0a:70:cd:e2:b0:0c:d1:39:47:89:
5a:f1:04:f0:ee:7d:aa:4a:00:37:d0:e8:cb:7f:87:84:31:35:
44:23:69:5a:81:16:18:e2:56:ca:b4:1b:5d:a1:1b:92:67:6b:
57:e6:20:10:7d:90:0e:47:2a:f8:6a:02:f9:d3:ea:79:5a:64:
78:27:1c:5a:1b:e8:11:dd:d6:27:aa:05:8f:84:49:8d:af:a6:
1a:e2:85:3d:5c:1a:88:3a:ed:ec:e3:4c:8b:d5:a7:09:85:d0:
cd:5f:d1:d2:c4:0b:7b:96:e2:a7:ec:46:c6:83:c3:ed:63:fb:
78:ec:9c:da:5f:5b:ba:81:1a:7b:73:45:94:0d:14:95:56:b2:
27:00:ed:1b:86:d1:1f:98:33:e7:7e:c9:da:b4:00:27:17:9b:
29:ca:b7:f6:f8:8d:57:6d:c3:ba:36:10:ad:69:e3:cc:9c:76:
f8:92:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:08:22 2025 by rpki-client