Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/87DcvIoV9C57hb7DwzS0oT0QBdM.roa
File: 87DcvIoV9C57hb7DwzS0oT0QBdM.roa (raw, json)
Hash identifier: 1fwwbxC7tvmVRypNN1d4FXoCK3/5oiWQOQyukuAKNSE=
Subject key identifier: F3:B0:DC:BC:8A:15:F4:2E:7B:85:BE:C3:C3:34:B4:A1:3D:10:05:D3
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 0194228D9F3C5738990F7B8BC5B4B9DEFEB1
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/87DcvIoV9C57hb7DwzS0oT0QBdM.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211629
IP address blocks: 185.252.203.0/24 maxlen: 24
2a10:b340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9f:3c:57:38:99:0f:7b:8b:c5:b4:b9:de:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3b0dcbc8a15f42e7b85bec3c334b4a13d1005d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:08:8f:26:11:c5:bf:71:fe:86:79:36:8d:1d:
53:f3:b0:d3:a7:6c:3b:b1:19:8b:86:80:c4:2a:48:
ce:21:d0:60:e6:38:e9:69:5b:29:a1:5d:5a:26:bd:
7f:2e:ef:18:9c:7e:e4:2b:de:ee:12:0c:95:c5:9b:
10:5e:55:53:5f:ff:23:15:41:ca:02:04:1e:fc:a3:
38:75:6c:aa:fd:39:69:d0:eb:f7:ee:78:d3:38:40:
e8:86:78:8b:e8:aa:0a:9c:ef:7e:a4:ca:10:1d:d7:
5f:31:f5:fa:bb:d8:7f:2c:40:99:a3:da:01:5d:8d:
c6:b6:f4:8f:1a:97:a4:5f:a2:6b:75:10:6b:41:e8:
f7:c0:70:c1:e7:ab:b1:58:98:ce:35:fb:07:57:11:
c2:24:0b:99:60:8b:da:47:f5:19:8e:5e:62:78:54:
94:27:c6:1d:63:dd:80:0d:64:19:3c:56:65:e3:f7:
f1:79:85:51:31:28:5e:2d:09:0c:ad:a5:d7:e9:94:
16:2c:82:e5:54:6b:04:d1:a5:87:e8:22:d5:a7:b8:
59:d9:48:66:36:45:91:b7:0f:f2:e1:d5:6e:d9:66:
ee:ab:c4:a3:09:ee:e1:66:5f:f6:b3:e8:ed:44:61:
f2:c7:fb:24:a9:49:36:da:0f:79:0a:05:3a:b9:b3:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:DC:BC:8A:15:F4:2E:7B:85:BE:C3:C3:34:B4:A1:3D:10:05:D3
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/87DcvIoV9C57hb7DwzS0oT0QBdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.203.0/24
IPv6:
2a10:b340::/29
Signature Algorithm: sha256WithRSAEncryption
73:97:cd:e1:13:1c:80:34:cb:8c:9a:91:2f:2e:9a:ac:76:07:
17:f3:e4:0a:e9:f4:79:f1:8d:c5:3a:8f:05:b8:24:82:e4:14:
be:64:07:2d:3f:39:1c:06:1e:35:c7:aa:58:00:b2:32:90:ca:
03:6c:ec:f2:f1:fd:04:ab:a8:5b:90:d6:fd:36:d1:19:66:1b:
cd:08:e6:74:79:56:4f:96:e5:1b:0d:06:b7:4f:d5:4a:f2:79:
1e:bc:f7:70:8b:81:3a:e6:0c:20:b4:54:21:46:00:16:12:52:
68:90:4d:a0:dd:f4:82:4d:9b:da:63:dd:84:de:04:49:c3:94:
31:60:87:da:45:ce:f0:da:8b:01:06:a5:f6:c8:66:dc:ff:50:
52:1f:02:a7:66:ad:91:bb:06:77:2a:12:90:ac:33:9b:6a:16:
8c:92:e1:fc:24:74:76:5f:f2:c7:48:60:ec:d1:c7:61:71:f0:
74:6c:ef:73:6c:65:1a:db:63:3e:2f:06:1d:1f:3b:df:4f:f3:
3a:50:e3:c1:f9:18:10:81:58:f5:92:7d:db:14:c8:0a:0b:cf:
63:4c:ae:bc:06:de:14:b8:ae:d7:81:45:4c:ab:6e:fd:14:c7:
a4:cc:ec:38:b5:1e:e6:31:ee:d7:7c:e6:16:68:86:2d:ef:ca:
5a:d2:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:17 2025 by rpki-client