Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/I2s0NE0e0ldLesJa5IwWq_3YoQY.roa
File: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (raw, json)
Hash identifier: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=
Subject key identifier: 23:6B:34:34:4D:1E:D2:57:4B:7A:C2:5A:E4:8C:16:AB:FD:D8:A1:06
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 019427475EF2B59F3B7680C7342C05E26B04
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/I2s0NE0e0ldLesJa5IwWq_3YoQY.roa
Signing time: Thu 02 Jan 2025 13:49:36 +0000
ROA not before: Thu 02 Jan 2025 13:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211895
IP address blocks: 185.39.18.0/24 maxlen: 24
194.61.120.0/24 maxlen: 24
2a10:1fc0:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:5e:f2:b5:9f:3b:76:80:c7:34:2c:05:e2:6b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: Jan 2 13:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=236b34344d1ed2574b7ac25ae48c16abfdd8a106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:4a:ef:29:46:0f:18:91:b1:17:7b:51:19:
64:fd:0f:dc:1f:ba:9e:d1:f2:96:7c:56:0a:f5:7e:
9f:9a:f8:16:2a:22:2f:2d:94:99:d5:0c:7f:a1:86:
3d:c2:99:73:67:6b:5b:db:83:34:70:22:e9:fa:d6:
2b:63:8b:ab:ed:a0:05:5e:55:37:84:3e:74:38:bc:
03:b1:1f:10:84:52:82:cb:37:ae:96:0f:59:13:99:
b0:58:c6:f6:98:44:87:7e:5f:fb:41:9a:4b:84:82:
f6:5a:c1:82:d6:3a:59:53:6a:35:f5:c7:d6:2e:8c:
da:be:61:36:c9:e0:ff:57:4f:10:93:2f:b1:de:5d:
3d:ec:cf:3b:db:6e:27:50:ca:a9:9a:a2:c9:63:9e:
49:05:fc:71:07:cf:d4:55:59:e9:86:89:db:dd:77:
1c:06:68:e7:53:46:44:ea:5b:95:bc:07:0c:06:4d:
f3:71:40:a4:e3:e3:16:56:9e:bd:25:cf:8f:e3:55:
93:84:fc:6a:f6:60:ba:0b:ee:0b:2c:9b:e3:d8:9b:
a2:8c:62:fa:12:39:f3:b5:7e:f0:7b:87:3d:c5:09:
ab:7c:9a:b7:26:9d:ef:40:d5:f1:51:93:ad:01:4a:
d8:bf:1e:ec:f9:71:32:c3:93:9b:5b:e9:d4:28:27:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:34:34:4D:1E:D2:57:4B:7A:C2:5A:E4:8C:16:AB:FD:D8:A1:06
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/I2s0NE0e0ldLesJa5IwWq_3YoQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.18.0/24
194.61.120.0/24
IPv6:
2a10:1fc0:c::/48
Signature Algorithm: sha256WithRSAEncryption
3c:f0:11:a8:cc:c3:02:49:ba:92:24:74:6e:98:8a:c7:e9:6a:
db:f3:a8:06:15:6e:c6:ba:e6:61:67:0a:fb:a4:c7:6b:48:bd:
9a:b6:f1:d5:0c:44:87:0c:32:b1:ec:21:c9:6b:45:61:a6:05:
2d:c8:b9:09:db:68:a3:5e:ac:df:13:f3:21:18:54:42:9a:54:
e5:ec:dc:74:20:81:6d:73:ea:c9:0f:ee:73:33:38:84:fd:cd:
cd:9b:3e:ac:00:7e:f9:18:4f:6e:76:41:b2:6c:53:69:29:b1:
80:6a:95:aa:23:fe:da:e3:94:7d:84:93:91:73:c0:d9:87:40:
36:6f:55:e0:37:f4:59:2e:20:8a:9a:0a:bb:e4:5a:e2:57:f9:
7b:5b:bb:ca:cb:44:5a:a0:d5:5e:94:b0:a0:3c:ea:bd:70:fb:
01:30:46:79:2c:36:e4:a3:1c:b9:18:3e:12:e0:de:1f:40:4b:
4c:00:1e:7a:3c:e5:c4:07:63:31:ae:2c:7f:18:f7:86:f1:a1:
76:1c:ea:39:9d:71:f8:78:0f:a7:0f:ae:e8:40:8c:42:34:ac:
09:63:0d:df:5c:0c:ed:00:b9:f8:fd:fa:5e:fe:ce:22:3c:ff:
d1:70:2d:1f:69:0d:02:29:66:04:44:b3:3c:dc:b6:47:87:e6:
bc:b0:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:56 2025 by rpki-client