Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/4QP14L9LxP1FDJDVa3DI94blGWY.roa
File: 4QP14L9LxP1FDJDVa3DI94blGWY.roa (raw, json)
Hash identifier: bLtR0ptcRwZJ4yJiejffUukpQF+MAsqc3I6CXZQZA40=
Subject key identifier: E1:03:F5:E0:BF:4B:C4:FD:45:0C:90:D5:6B:70:C8:F7:86:E5:19:66
Certificate issuer: /CN=b2fba356186c1dc5031c2fb20bc635491f878637
Certificate serial: 0194258F43FE934ED3AC27B17F0E74DCBB15
Authority key identifier: B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/4QP14L9LxP1FDJDVa3DI94blGWY.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41827
IP address blocks: 185.95.132.0/22 maxlen: 24
185.168.164.0/22 maxlen: 24
2a05:f340::/29 maxlen: 29
2a0b:ea00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:43:fe:93:4e:d3:ac:27:b1:7f:0e:74:dc:bb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2fba356186c1dc5031c2fb20bc635491f878637
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e103f5e0bf4bc4fd450c90d56b70c8f786e51966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:72:2b:a7:87:28:12:ab:57:cb:1b:b3:a9:
ff:fd:41:2b:1a:ca:94:29:76:da:30:d9:a6:d2:9e:
b6:53:dc:a1:d8:9b:a2:c3:03:9a:d3:38:65:76:7d:
ec:a3:74:2c:a5:aa:60:3d:fe:d9:f8:50:e6:de:99:
a2:8f:b0:15:b6:1c:ff:18:c4:a2:2d:20:98:98:68:
48:6a:5f:a4:04:81:74:c6:9d:3b:f6:0d:6c:dd:ae:
d4:a4:51:af:36:23:8f:45:29:82:bf:02:48:d5:fc:
65:08:5d:32:c9:c9:6e:54:d0:b2:4e:35:04:7c:81:
64:c1:24:ab:ef:9a:3a:c0:37:4d:e0:be:36:2c:5f:
43:69:25:85:c8:25:2a:5c:3d:5c:3b:72:c5:a0:58:
9f:41:f5:17:00:4f:25:2b:97:ea:80:a6:5b:8f:53:
99:0b:e4:27:4f:a3:d5:76:6b:55:a7:17:43:0f:2e:
39:0b:dc:9d:f6:bb:8c:68:8b:b8:ae:a6:ac:13:6b:
f2:aa:82:57:58:bb:4a:af:ea:18:44:62:37:3d:e6:
9e:74:8c:71:02:4c:b0:b4:c2:56:8d:c5:18:5a:96:
56:5c:fb:b2:06:ac:1a:59:2f:72:40:76:49:6c:b2:
8c:c9:df:b7:36:f7:7d:aa:69:1b:e7:e4:93:98:ea:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:03:F5:E0:BF:4B:C4:FD:45:0C:90:D5:6B:70:C8:F7:86:E5:19:66
X509v3 Authority Key Identifier:
keyid:B2:FB:A3:56:18:6C:1D:C5:03:1C:2F:B2:0B:C6:35:49:1F:87:86:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svujVhhsHcUDHC-yC8Y1SR-Hhjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/4QP14L9LxP1FDJDVa3DI94blGWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6a8f0c-57a3-4496-9f9e-28653cc12368/1/svujVhhsHcUDHC-yC8Y1SR-Hhjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.132.0/22
185.168.164.0/22
IPv6:
2a05:f340::/29
2a0b:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
15:5a:58:8f:74:01:a6:3e:fc:b4:04:93:fa:52:c1:03:f9:2e:
3f:d0:0d:41:f6:25:c3:2b:b6:6a:4c:ca:70:31:08:cd:fa:d6:
c2:ad:f6:85:3e:8f:81:22:e9:ec:ba:93:94:15:02:8f:82:d9:
d1:fa:d7:5b:6e:28:2f:fe:75:cd:a3:31:0b:67:d7:8b:1b:cd:
6d:f6:28:0f:e6:e4:81:a5:88:77:12:c1:d6:95:33:8f:3d:b2:
c5:ac:0f:91:43:06:e6:52:51:32:6b:20:56:ed:14:5f:3d:e0:
9a:4b:05:f9:3c:7d:60:ed:32:43:fb:2e:ac:d8:31:10:7f:a9:
6c:bb:28:5b:0d:00:5b:73:82:e4:f4:bb:21:14:1d:70:24:df:
ca:94:49:f2:33:f9:3e:6c:0b:c4:8f:00:a8:85:8e:e6:e7:2b:
21:31:2f:f7:dc:e2:c3:38:7e:0f:1a:a0:32:e6:26:ab:be:52:
a3:f1:ac:1a:08:87:74:65:80:11:14:05:b3:91:80:88:5f:27:
5d:44:9b:c2:83:2a:f9:63:16:48:a0:23:47:57:65:e2:40:c1:
63:73:94:bf:b9:5b:7b:ff:80:1e:48:6d:ed:32:99:44:cd:56:
a8:ab:91:68:79:9d:c5:67:dc:26:52:ca:09:34:21:d7:76:21:
06:05:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:27 2025 by rpki-client