Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa
File: 3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa (raw, json)
Hash identifier: S8E8XfDmes95rq1PbjLgkDvVZJpWeDUS/8l576aU10U=
Subject key identifier: DC:18:28:2C:55:99:F5:88:1B:0B:AA:0F:90:A4:E2:DE:8F:C9:FE:04
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019421B1C318F9409FF0A875A1198D5F307E
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.230.0/25 maxlen: 25
185.1.230.128/25 maxlen: 25
195.69.116.0/24 maxlen: 24
195.69.117.0/24 maxlen: 24
195.69.118.0/24 maxlen: 24
195.69.119.0/24 maxlen: 24
195.245.240.0/24 maxlen: 24
212.237.192.0/24 maxlen: 24
212.237.193.0/24 maxlen: 24
2001:7f8:d::/48 maxlen: 64
2001:7f8:122::/49 maxlen: 49
2001:7f8:122:8000::/49 maxlen: 49
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 17:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c3:18:f9:40:9f:f0:a8:75:a1:19:8d:5f:30:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc18282c5599f5881b0baa0f90a4e2de8fc9fe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:b0:75:d7:23:d6:d1:43:d6:32:d3:e5:6d:
7f:a2:a8:41:3e:eb:78:2a:dc:85:10:9f:90:f5:97:
97:f5:3c:14:37:43:29:06:3c:05:f4:41:de:51:73:
3a:d1:6c:88:5c:69:54:10:8a:c7:1a:25:1e:30:09:
8d:92:40:c7:e3:88:ad:46:79:5f:23:bb:b3:98:85:
e3:0a:59:6e:ca:fb:6a:dd:9c:c9:c3:78:6f:3f:a3:
cc:1a:f2:58:8f:21:08:a0:c7:d2:e8:45:7c:74:ce:
d9:54:20:c2:43:4f:21:fa:29:e3:6c:ff:a9:e5:89:
ce:63:72:96:2f:d0:66:81:a1:3b:0c:d3:ad:60:39:
3d:bf:38:a1:d1:46:e4:85:5e:57:23:a2:92:ab:a3:
8e:61:2a:d7:b0:78:6b:90:79:f1:cf:01:71:3a:b6:
04:d9:7c:2f:81:d1:e5:b4:2b:7f:75:2a:de:ef:e8:
1e:bf:45:2a:44:c0:95:6a:fc:bc:cf:d2:6b:d0:d5:
6c:0f:46:95:f2:92:0a:53:f7:fe:16:88:13:18:25:
99:69:05:fa:37:9d:b9:3f:03:aa:79:e6:5d:1d:c0:
42:2c:cb:7b:59:13:1f:11:ce:f7:02:bc:ad:2f:71:
ca:c1:89:af:cc:60:39:55:f6:e5:c9:32:df:85:a3:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:18:28:2C:55:99:F5:88:1B:0B:AA:0F:90:A4:E2:DE:8F:C9:FE:04
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.230.0/24
195.69.116.0/22
195.245.240.0/24
212.237.192.0/23
IPv6:
2001:7f8:d::/48
2001:7f8:122::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e9:0c:39:11:c6:13:59:1e:35:8e:33:a1:c7:d1:ae:7f:37:
f5:e4:2c:56:1f:9b:91:9a:11:c6:2f:60:4d:fa:50:fa:93:03:
bf:c0:13:42:6f:aa:7c:9b:09:cd:01:67:ce:d0:c9:ae:28:bc:
77:2a:62:7b:91:e8:d6:24:47:77:06:74:45:82:df:54:5a:80:
ba:a8:0d:ec:5b:3c:f2:ad:02:a4:0e:d7:09:1a:2c:ad:0a:51:
10:96:37:bb:53:79:0f:15:1c:3d:ae:4c:26:5b:3a:10:c2:7c:
a9:4f:1b:00:19:da:09:b4:40:67:b3:16:59:b1:cb:23:ed:56:
29:80:9f:d6:d8:41:2e:d0:8e:e7:2a:57:e1:80:9e:f5:8e:42:
e9:85:01:a0:b7:cd:86:08:d2:46:5c:14:42:fb:64:28:1b:05:
e8:c0:e0:02:c0:8e:c3:36:f4:de:88:20:95:49:df:8a:19:c1:
19:ca:95:6e:9a:a8:f4:85:76:4d:fd:aa:16:ad:8c:38:ae:66:
fe:2d:84:b0:04:59:5f:96:df:a8:3c:4a:7b:13:21:b0:d5:c8:
40:ed:d7:5d:8a:ce:37:1e:17:4e:83:37:14:3e:df:96:46:2e:
84:1c:b3:04:09:5e:46:ba:10:b2:d1:ce:eb:56:50:3f:c6:09:
3e:d8:61:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:48 2025 by rpki-client