Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/72212ELi_xTfEeuyR3CUIU7otcg.roa
File: 72212ELi_xTfEeuyR3CUIU7otcg.roa (raw, json)
Hash identifier: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=
Subject key identifier: EF:6D:B5:D8:42:E2:FF:14:DF:11:EB:B2:47:70:94:21:4E:E8:B5:C8
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 0194266B6B7FAC5F4E9E279488F81D1CF312
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/72212ELi_xTfEeuyR3CUIU7otcg.roa
Signing time: Thu 02 Jan 2025 09:49:21 +0000
ROA not before: Thu 02 Jan 2025 09:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203653
IP address blocks: 185.230.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6b:7f:ac:5f:4e:9e:27:94:88:f8:1d:1c:f3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Jan 2 09:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef6db5d842e2ff14df11ebb2477094214ee8b5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:88:f3:00:93:0a:af:37:7a:a4:c3:d1:4a:66:
04:e6:80:cc:d9:d2:de:69:75:07:a4:88:a2:b1:12:
9e:de:68:42:a2:cb:80:83:14:30:d9:11:5b:38:99:
8d:79:d0:07:7a:e4:f1:c9:0d:64:61:2c:78:0b:e7:
62:52:a5:e5:6d:fe:b0:fb:5e:97:3b:cb:65:bc:0a:
04:c7:1a:54:9d:3f:42:24:1e:3a:ba:dd:44:0d:37:
03:a1:a3:05:da:49:45:3f:2e:48:a4:fa:0e:a2:a7:
f3:f9:bc:87:9d:ce:99:dd:ee:2e:55:f8:f3:77:ab:
29:b4:37:d7:38:0f:27:09:18:a1:64:a9:4c:77:58:
73:10:6a:bd:7b:e9:af:47:d9:2e:20:0a:37:b4:82:
d5:62:1d:9e:67:78:85:24:56:1c:c1:be:e3:b3:cd:
06:6e:8e:70:df:60:2a:75:a8:68:81:49:db:7a:08:
6d:47:34:44:6f:83:73:f5:6b:e2:a8:47:a3:19:9e:
a5:08:69:bd:f4:06:7e:62:84:d5:b4:30:e5:86:12:
7f:73:05:28:65:be:bd:e0:9d:1a:f1:41:b2:52:e7:
e1:3a:b4:ec:2b:a2:8e:7e:ad:82:08:ac:b7:62:1d:
12:71:67:6e:7d:b9:3b:31:37:7f:c9:90:c5:05:a5:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:B5:D8:42:E2:FF:14:DF:11:EB:B2:47:70:94:21:4E:E8:B5:C8
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/72212ELi_xTfEeuyR3CUIU7otcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.105.0/24
Signature Algorithm: sha256WithRSAEncryption
04:a7:41:37:6c:5d:36:22:dc:3e:33:8e:ae:25:ee:14:b9:71:
aa:e0:a9:2a:79:61:40:1e:c1:e1:56:80:65:69:ca:f5:dd:f6:
bb:7e:02:e2:94:db:03:c3:e6:7a:bb:f8:c1:e4:c8:c6:ec:b7:
33:cd:1d:9f:1a:9e:42:68:2d:25:9c:cf:b5:fd:44:57:74:d2:
b6:7e:6f:9a:86:a2:0f:25:0b:4e:d0:88:d3:29:b3:6d:82:e5:
fd:68:a1:66:14:7b:10:95:93:1c:3b:5c:c5:5a:4e:a9:66:12:
cb:17:74:57:3f:07:5f:3e:a2:ed:51:cf:58:23:be:09:dc:6d:
7b:bf:cd:81:b0:a4:5e:0b:e5:01:e6:cf:82:06:96:25:96:c0:
d2:d2:95:9a:01:d4:58:ce:c9:b0:92:49:51:73:c3:1d:19:da:
fc:ff:20:78:c9:08:38:17:ea:f4:64:2d:52:99:45:cf:74:32:
60:8b:76:6d:c6:17:1d:60:2c:8f:ac:38:55:4d:16:79:77:8c:
79:d6:e7:56:c4:c2:43:4d:c0:97:62:9a:d7:14:12:a3:52:d2:
b5:37:47:ea:16:41:26:b6:d2:52:19:1e:8b:ae:83:80:e1:4c:
ae:1f:ea:a0:c4:e6:f5:09:85:d9:a6:bc:d4:17:46:81:54:71:
c5:61:d2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:29:20 2025 by rpki-client