Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/aQ0BCg7T0qvdq_rjilld2qmDCCA.roa
File: aQ0BCg7T0qvdq_rjilld2qmDCCA.roa (raw, json)
Hash identifier: FUk+EtDI/Bw1Ith6izcMbGQJ0XgwGEmYYqaLt5/+JX8=
Subject key identifier: 69:0D:01:0A:0E:D3:D2:AB:DD:AB:FA:E3:8A:59:5D:DA:A9:83:08:20
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0194266C412A447B9C0281BB06512885B75C
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/aQ0BCg7T0qvdq_rjilld2qmDCCA.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398373
IP address blocks: 85.115.207.0/24 maxlen: 24
85.153.4.0/24 maxlen: 24
85.153.32.0/24 maxlen: 24
85.153.68.0/22 maxlen: 22
85.153.84.0/22 maxlen: 22
85.153.92.0/24 maxlen: 24
85.153.108.0/22 maxlen: 22
85.153.113.0/24 maxlen: 24
85.153.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:41:2a:44:7b:9c:02:81:bb:06:51:28:85:b7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690d010a0ed3d2abddabfae38a595ddaa9830820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:34:01:63:8e:a2:2b:ac:56:b3:d7:7a:9b:14:
ef:4f:81:0b:e6:40:80:07:98:e2:68:4d:c6:e9:95:
9b:e1:3a:bc:bb:1c:d3:5d:77:69:d6:47:a3:8a:76:
05:ed:5d:9c:a4:5f:97:b6:fe:6e:7c:fc:73:45:2f:
5b:a9:83:f4:25:ca:93:46:6c:90:42:c1:43:82:91:
65:6b:7d:90:20:74:ab:0f:ed:cf:aa:26:fb:5c:58:
98:2f:c8:21:24:f0:05:d2:d6:4a:e0:72:d4:37:04:
bc:55:78:6b:cb:f9:b6:91:44:d2:67:8b:79:29:10:
a1:6b:59:f6:c2:d9:6c:6b:98:5f:de:a7:40:44:f7:
c7:cb:be:a5:8c:d2:f8:0d:22:1c:bb:67:a3:c4:97:
e2:8a:e9:fd:57:f7:f2:bd:30:ee:b1:7f:ec:d5:42:
34:3a:9c:5e:c1:58:59:23:cc:73:f4:54:62:37:01:
85:6d:3c:99:80:9c:42:9a:75:75:b6:ff:16:84:6c:
c0:03:b4:9a:9c:79:ae:0f:08:58:aa:d2:46:f8:c9:
1f:6c:98:d1:0b:25:a5:9d:0a:95:87:da:6d:c5:e8:
11:ea:6f:10:66:d7:bb:3c:6b:6f:5c:bb:e1:0f:4b:
6a:45:8e:48:cc:62:11:b2:30:3d:30:fa:00:c8:79:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:01:0A:0E:D3:D2:AB:DD:AB:FA:E3:8A:59:5D:DA:A9:83:08:20
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/aQ0BCg7T0qvdq_rjilld2qmDCCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.207.0/24
85.153.4.0/24
85.153.32.0/24
85.153.68.0/22
85.153.84.0/22
85.153.92.0/24
85.153.108.0/22
85.153.113.0/24
85.153.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fa:86:9c:48:38:98:b5:41:7e:ab:40:1e:73:76:1f:f9:35:
95:47:03:07:7e:e8:d8:f0:1c:ba:8b:8d:94:44:4e:9c:cf:fa:
df:fd:33:8c:b2:3d:a9:98:aa:fb:6c:07:ad:e7:88:70:ac:2b:
d4:f0:65:e9:a7:79:d1:46:88:8a:3a:c2:e1:11:fc:15:fd:c4:
f3:e7:b5:34:68:5f:e8:9a:62:78:6a:fd:c4:3a:0b:75:e5:53:
30:0f:d2:e8:3f:23:da:e2:9a:ec:fa:a1:f1:5c:fd:f0:9d:de:
d2:48:10:f7:6c:64:29:6a:27:cf:a4:03:f5:d9:cc:d4:55:ff:
84:82:ff:6b:d9:0d:bb:24:d2:63:8b:c0:f7:f6:2b:b2:ee:cf:
d7:4e:fa:73:7b:30:ea:99:67:8f:01:d2:2a:4e:09:94:22:e2:
d5:41:21:47:37:aa:38:72:07:ab:4e:43:cd:0d:b9:da:14:b4:
fb:3c:c9:be:f8:b7:ab:1d:4d:4b:40:74:92:58:82:7b:2c:64:
10:4f:1a:b5:ea:9a:e2:b0:d5:0e:96:02:56:95:c5:f9:80:5c:
93:e7:d2:17:ea:45:93:74:9b:e6:10:70:be:9e:d7:9e:d5:05:
19:59:f8:e0:6b:b9:3c:16:26:0e:20:d9:bc:01:ee:d4:cf:c9:
8b:4f:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:05 2025 by rpki-client