Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/5DYNtQhmHm5xId84-qYm__d0Jxg.roa
File: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (raw, json)
Hash identifier: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=
Subject key identifier: E4:36:0D:B5:08:66:1E:6E:71:21:DF:38:FA:A6:26:FF:F7:74:27:18
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 019425FC2A0A6C1B90ED0401FDDF918D22AA
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/5DYNtQhmHm5xId84-qYm__d0Jxg.roa
Signing time: Thu 02 Jan 2025 07:47:50 +0000
ROA not before: Thu 02 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205385
IP address blocks: 185.220.48.0/22 maxlen: 24
185.231.36.0/22 maxlen: 24
2a0b:eec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2a:0a:6c:1b:90:ed:04:01:fd:df:91:8d:22:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Jan 2 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4360db508661e6e7121df38faa626fff7742718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:06:e5:30:a6:ec:e8:75:b8:0b:77:b2:0c:
8c:7a:e6:a7:85:75:62:18:ae:ba:7f:dc:32:8c:28:
dc:51:e9:9c:39:84:68:d0:fa:c2:ff:9e:72:bf:d4:
b0:9a:f8:03:b8:95:58:5f:a9:37:e5:eb:a4:45:42:
26:14:48:e8:bb:18:71:70:50:b1:9c:b8:31:b8:44:
53:37:72:fc:16:2c:47:2a:3f:15:d7:95:0d:62:5c:
5f:44:18:81:33:92:81:f2:fa:c5:92:39:bb:bf:a4:
46:c2:70:54:8a:bb:d5:e4:08:24:70:7d:69:15:53:
48:8e:f9:b2:d2:c5:13:91:04:c4:3b:17:f5:5b:be:
79:cd:53:68:87:b7:f9:4e:4c:58:de:16:08:21:a7:
04:c4:f2:0c:f9:21:64:b3:d3:35:5b:59:97:7a:cc:
3b:00:a8:f6:18:c1:bb:41:96:e8:bc:97:8a:5f:1b:
ca:b5:85:f0:59:b7:3d:a6:5d:d4:c2:df:78:ca:e8:
61:43:74:cd:11:f6:30:61:b1:f7:30:fc:a8:96:e3:
56:db:48:bf:df:44:fe:39:b0:10:77:16:2b:4c:30:
61:8e:c1:0e:06:c5:96:c2:59:c3:98:1b:34:c1:c8:
44:52:43:9f:9d:a8:f4:a0:4f:e4:84:6d:a8:54:ae:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:36:0D:B5:08:66:1E:6E:71:21:DF:38:FA:A6:26:FF:F7:74:27:18
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/5DYNtQhmHm5xId84-qYm__d0Jxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.48.0/22
185.231.36.0/22
IPv6:
2a0b:eec0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:87:b6:f5:17:07:d7:85:49:0d:3c:35:a2:e4:2f:cc:58:45:
45:90:ab:ad:56:ac:21:17:7e:d5:64:db:83:2f:87:11:7e:a6:
ce:a7:10:62:6e:a5:f6:4a:90:c0:d9:9a:75:cd:32:36:d7:50:
5f:52:ce:9b:95:4d:02:d0:df:27:45:f5:a9:10:aa:09:27:28:
07:4d:2f:db:09:38:77:49:bc:21:b0:a1:4e:00:46:2d:5a:98:
9a:98:ce:c8:96:30:2b:ed:b3:60:d9:31:8e:b4:4f:44:49:bf:
fb:1f:0f:c8:2c:b8:98:a8:b4:69:05:3c:68:0d:83:65:8e:0d:
1a:90:03:cf:0a:e2:3c:3a:57:f3:af:d0:ce:fc:6e:1c:4b:07:
17:90:4c:26:23:d8:4c:d5:3b:2e:17:f1:d8:75:66:53:5a:d1:
72:e3:52:28:b6:f2:eb:1e:22:b5:86:b3:4d:35:75:d6:9e:f6:
3d:7b:ee:51:88:91:4f:b7:15:32:91:9e:08:e8:8b:35:5c:8a:
43:66:59:07:ae:2e:68:05:45:24:1f:7b:c8:f5:4d:8e:1a:47:
d6:df:17:88:c2:11:38:7a:f3:69:36:4a:dc:c4:ce:0d:c5:59:
ee:45:9d:6a:4a:e1:c0:31:7d:83:2b:3a:5a:2d:46:93:58:75:
ae:e7:6d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:15 2025 by rpki-client