Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/STf9L7OysAzVA3auf6efELGrMic.roa
File: STf9L7OysAzVA3auf6efELGrMic.roa (raw, json)
Hash identifier: jJ0UrRjneJTBVHBAK5geL+DCza4MUB+Pz9cDqbQqG1Q=
Subject key identifier: 49:37:FD:2F:B3:B2:B0:0C:D5:03:76:AE:7F:A7:9F:10:B1:AB:32:27
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019422FBB2BF11469B5104A9118EF1D8CE04
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/STf9L7OysAzVA3auf6efELGrMic.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211642
IP address blocks: 5.253.60.0/24 maxlen: 24
5.253.61.0/24 maxlen: 24
45.128.206.0/24 maxlen: 24
45.128.207.0/24 maxlen: 24
185.219.40.0/24 maxlen: 24
185.219.41.0/24 maxlen: 24
185.219.42.0/24 maxlen: 24
185.219.43.0/24 maxlen: 24
185.240.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:bf:11:46:9b:51:04:a9:11:8e:f1:d8:ce:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4937fd2fb3b2b00cd50376ae7fa79f10b1ab3227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:ba:aa:df:d4:0d:ba:75:c4:48:3d:02:71:
a7:6a:61:10:ca:1f:69:99:d0:a5:83:83:ba:f1:dd:
23:bf:57:25:5d:cc:ae:16:e2:e6:11:c6:f5:86:aa:
b5:80:f5:69:c3:14:62:f3:97:24:23:b4:35:73:e4:
54:3c:6e:a7:6c:33:0d:02:8e:b3:65:c3:df:44:b3:
bd:c0:94:c3:e7:25:44:3d:b3:e2:dc:81:9b:bd:76:
41:71:6c:18:00:c5:d0:81:94:e1:09:14:74:06:0a:
e0:4c:02:13:28:59:67:a9:f5:c4:3d:1d:1a:40:69:
48:8f:81:06:9a:4c:0d:23:9e:aa:a7:fb:f7:4c:c3:
93:3a:ad:b3:11:32:19:dd:5b:3b:f3:70:ee:cd:f5:
e1:e4:c3:0e:35:85:b8:c6:bd:c4:81:4a:73:f3:b8:
15:c0:2d:b1:9e:01:fd:76:76:88:f9:17:72:12:6b:
d5:44:6c:aa:aa:c2:79:ea:71:dc:a2:77:c1:e6:09:
bc:7b:1c:21:d8:8b:8d:1a:6f:99:70:9b:78:67:68:
b0:46:ec:2a:93:32:f9:38:f0:2b:08:d3:87:bd:e8:
8f:22:9f:82:8a:ba:42:2a:a3:d0:63:4d:8e:fc:12:
8e:04:25:11:98:e7:a1:cf:e1:9d:68:f9:c0:ee:9a:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:37:FD:2F:B3:B2:B0:0C:D5:03:76:AE:7F:A7:9F:10:B1:AB:32:27
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/STf9L7OysAzVA3auf6efELGrMic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.60.0/23
45.128.206.0/23
185.219.40.0/22
185.240.102.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6d:12:95:88:71:5d:b9:9c:46:65:82:f1:90:0c:40:6f:a7:
63:ec:cd:0e:6a:e7:4b:c0:cc:41:5e:34:14:b8:a9:71:2d:1f:
18:99:5a:0e:34:7e:35:f3:4c:97:6b:b0:e5:a8:a4:af:ee:b6:
ff:fa:36:a6:7e:7e:a2:8a:22:e7:70:f1:8c:d2:f5:79:57:b7:
a3:7a:8a:26:ee:58:55:cb:f7:b2:de:c9:d4:6b:82:86:65:ce:
94:56:a1:20:f7:ab:04:91:0b:db:1d:40:37:b7:14:42:b8:b2:
a2:ed:96:7b:31:94:49:71:4e:a7:26:02:18:4e:5e:b9:8e:80:
7f:5b:92:e7:58:1c:b3:51:47:cd:96:62:d5:b4:be:e1:ff:b4:
eb:08:26:f2:02:e5:bc:df:db:c5:09:3b:26:87:a2:19:44:a1:
6d:f7:86:0d:bc:89:84:e6:e4:c1:29:fe:78:f0:a3:20:fc:95:
70:e4:81:d2:8f:35:99:b9:c8:92:16:20:9f:61:fd:46:1b:92:
51:f2:23:76:69:c5:f6:e5:fb:5b:f7:c6:cd:6b:0a:e5:a4:2f:
68:07:30:89:23:f0:02:38:62:4b:84:51:25:69:65:c6:e7:31:
e0:1a:b6:d4:04:38:b7:44:01:75:f5:5b:00:98:75:b2:6d:1d:
98:9e:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:34:31 2025 by rpki-client