Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/ovtcp22HNBJ9uUnNrEbA1Kgt9fo.roa
File: ovtcp22HNBJ9uUnNrEbA1Kgt9fo.roa (raw, json)
Hash identifier: LSCYzsKYL8WpLFlLkr/4DVnc2AZfaRsxdNXTyUzOti4=
Subject key identifier: A2:FB:5C:A7:6D:87:34:12:7D:B9:49:CD:AC:46:C0:D4:A8:2D:F5:FA
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 01942669F24040DA7AF36FFC0949BB76C132
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/ovtcp22HNBJ9uUnNrEbA1Kgt9fo.roa
Signing time: Thu 02 Jan 2025 09:47:44 +0000
ROA not before: Thu 02 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8561
IP address blocks: 185.119.136.0/22 maxlen: 24
195.253.64.0/24 maxlen: 24
195.253.66.0/24 maxlen: 24
195.253.74.0/24 maxlen: 24
195.253.88.0/21 maxlen: 24
195.253.96.0/19 maxlen: 24
2a01:5b0:3::/48 maxlen: 48
2a01:5b0:4::/48 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:d::/48 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:f2:40:40:da:7a:f3:6f:fc:09:49:bb:76:c1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 2 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2fb5ca76d8734127db949cdac46c0d4a82df5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:1c:7b:d0:50:47:37:59:12:a7:ba:b9:7f:
5d:15:e9:48:84:f7:d7:c2:f6:92:00:50:dc:84:20:
25:7b:a8:a3:f8:7c:53:b5:cb:74:a4:c4:69:6e:8a:
f1:9f:7a:07:c4:18:19:b6:39:c5:b1:66:97:a9:4a:
b8:c3:d5:32:76:b7:eb:d0:32:a8:2a:34:43:15:96:
c4:07:8d:0f:89:0e:25:e4:8c:6e:0a:05:9b:1f:a1:
c3:94:c7:54:b1:a4:0b:e9:c8:a8:74:24:76:ab:1d:
23:d4:b1:95:85:8a:aa:78:7c:cb:4b:df:7a:fd:56:
18:08:4e:c1:1d:eb:d8:d7:af:9e:d4:e2:fa:58:1f:
16:4e:79:b7:5b:3e:3a:9f:48:d4:b4:2f:17:ca:fc:
eb:16:5a:38:63:82:a3:39:4a:ff:86:ff:29:32:44:
f6:c5:7e:c0:4f:7c:c4:b7:78:01:88:c6:e1:6e:9c:
f7:b4:69:c9:f3:1a:1e:6f:de:6c:f8:f5:70:fe:c5:
a2:23:72:ea:dd:78:b0:02:24:dd:7c:71:42:f9:82:
ff:ff:1c:6b:69:f9:76:99:4b:29:4e:42:9b:08:eb:
b0:c4:58:9d:ca:6e:b7:2c:48:8e:c2:82:c4:42:a0:
b7:c5:96:5b:06:9a:ab:f0:51:91:bf:a7:3b:48:5f:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FB:5C:A7:6D:87:34:12:7D:B9:49:CD:AC:46:C0:D4:A8:2D:F5:FA
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/ovtcp22HNBJ9uUnNrEbA1Kgt9fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.64.0/24
195.253.66.0/24
195.253.74.0/24
195.253.88.0-195.253.127.255
IPv6:
2a01:5b0:3::-2a01:5b0:4:ffff:ffff:ffff:ffff:ffff
2a01:5b0:6::/48
2a01:5b0:8::/46
2a01:5b0:d::/48
2a01:5b0:10::/45
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
77:0f:38:80:28:ce:ff:d2:73:26:7b:4c:76:17:33:c3:ef:21:
95:98:5b:a2:f0:46:64:18:52:c1:64:29:f9:5e:6e:78:e8:c5:
c8:cb:24:1c:0a:b0:78:aa:9d:36:40:ec:41:77:e4:ee:58:f3:
be:6e:06:b7:af:27:b0:d0:52:b2:23:42:96:df:64:df:5e:6e:
08:b0:e6:9b:91:3c:9d:2f:7a:0a:8d:70:8c:82:5b:ac:59:ca:
cb:a4:87:29:dd:30:11:72:48:37:5b:d9:b4:af:8e:84:c7:1d:
4c:12:9d:b0:05:00:d7:0a:3f:72:72:ec:f5:57:3a:00:91:bc:
8e:70:a2:76:fd:f9:c8:08:a2:c2:d8:a4:6c:02:fd:b4:ad:7f:
85:56:30:fa:bd:a0:9d:b7:7c:de:25:b0:a0:54:1a:08:45:cd:
f3:85:ef:e4:67:f7:b0:fe:60:3f:e7:37:f5:98:43:a3:1d:67:
8c:af:9b:e4:ef:b3:ea:eb:fd:fd:c5:c7:ce:3f:b2:73:3f:24:
3c:f6:15:4f:00:c8:86:0f:ef:8c:dd:87:4b:52:e1:0d:fa:6b:
bb:e9:35:f7:e2:b1:53:d7:50:59:3f:f3:34:f7:22:7d:f2:1f:
c1:ed:53:7d:d0:1c:4d:34:57:37:c5:16:76:9d:0a:5c:52:3c:
6b:d2:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:42:03 2025 by rpki-client