Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/deFB5N1xgl-rTeswXd5-CqBWKVA.roa
File: deFB5N1xgl-rTeswXd5-CqBWKVA.roa (raw, json)
Hash identifier: SlwmTaXJntPAIRyPGkCdiuNn6DwU7ntHQcI8wpRB4ws=
Subject key identifier: 75:E1:41:E4:DD:71:82:5F:AB:4D:EB:30:5D:DE:7E:0A:A0:56:29:50
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 01941FFA35B578776E48A660DD6D6D06BAB9
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/deFB5N1xgl-rTeswXd5-CqBWKVA.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7979
IP address blocks: 185.83.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:35:b5:78:77:6e:48:a6:60:dd:6d:6d:06:ba:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75e141e4dd71825fab4deb305dde7e0aa0562950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:dc:3a:4c:52:80:3e:29:04:55:db:d7:80:
51:6b:ed:d7:8c:72:ec:2c:31:00:d1:3e:bb:a0:32:
22:36:bc:95:1a:e7:4b:53:de:00:71:e0:bb:e0:59:
dc:c0:ad:4a:95:0a:40:0b:48:51:3c:69:b2:d0:52:
64:b4:a5:29:43:f4:7f:9b:18:54:60:06:83:cc:1f:
11:59:f8:de:c5:40:e0:b0:a2:86:50:6f:70:1b:c5:
65:ff:ce:77:bc:25:04:4b:73:2c:cf:b3:c2:e8:17:
65:f4:01:85:c0:2d:e8:6f:62:a8:15:2c:b2:b5:30:
71:50:22:92:ba:d5:19:de:0a:45:1e:2c:b3:4a:06:
4c:ef:f8:40:eb:b0:81:f4:85:5f:d8:da:8a:e0:55:
50:40:a8:aa:52:17:16:a5:1c:76:0f:8a:b9:0d:03:
3c:53:9f:28:58:a6:6c:1f:ef:b2:6d:fe:1f:42:f8:
fc:55:7f:a5:a4:42:d1:8d:d1:20:03:3a:9f:47:f1:
36:d5:8d:e9:a8:43:33:1c:2d:b1:b6:34:ac:2e:ff:
13:88:22:f9:9c:b4:79:87:2b:9a:a3:76:88:5e:69:
ba:48:3c:93:3b:a1:88:e6:4a:f7:c0:6d:d1:f1:2e:
22:53:3d:50:c5:c2:ab:1e:b8:80:f9:e9:d1:42:89:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E1:41:E4:DD:71:82:5F:AB:4D:EB:30:5D:DE:7E:0A:A0:56:29:50
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/deFB5N1xgl-rTeswXd5-CqBWKVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.155.0/24
Signature Algorithm: sha256WithRSAEncryption
66:10:aa:3f:4c:b5:90:a1:90:65:eb:90:85:72:b8:fc:df:f1:
03:8b:d5:46:3a:07:42:57:7b:bf:13:78:a9:89:4c:06:b7:42:
0c:18:e3:d3:bd:e7:f1:a3:01:cb:2e:a2:1a:44:35:4b:fe:d9:
bc:95:cf:9b:91:ef:b2:c0:d3:9b:da:ae:af:95:25:96:5b:4f:
f6:68:c5:0a:85:40:c4:9a:1e:3a:d4:58:52:94:4a:e2:5a:e1:
7a:14:a3:6e:ce:06:6a:19:7e:1c:73:62:4c:42:e8:1d:3a:c1:
c9:72:ee:cc:96:4c:12:4f:35:72:aa:fa:12:b8:ea:1b:2c:b3:
bf:74:0d:c8:f8:5d:2d:02:97:1c:cb:22:46:1d:df:32:a5:67:
c5:8d:6a:da:cd:fe:28:3a:d3:69:2c:55:98:52:ba:b2:eb:c4:
36:56:90:0a:f3:70:d1:2d:77:96:fb:ab:ac:fc:86:f6:d5:64:
fe:f7:b2:18:85:f6:2c:c9:49:5b:0f:16:ac:2a:94:91:1b:72:
9e:fa:9f:cf:e3:47:27:c9:b7:e6:e0:6c:8c:89:31:d5:23:93:
36:fa:1a:fb:dd:05:43:db:35:3e:1f:bc:07:43:af:32:45:a4:
6a:9e:82:d2:07:98:10:ae:11:bd:75:a7:51:d3:d3:38:60:0b:
72:83:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:21 2025 by rpki-client