Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/A4UfYrXsQ6iSsiav-YeuLfimOTs.roa
File: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (raw, json)
Hash identifier: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=
Subject key identifier: 03:85:1F:62:B5:EC:43:A8:92:B2:26:AF:F9:87:AE:2D:F8:A6:39:3B
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 019423D6ADA1071A9837C9B804F14BF62DA6
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/A4UfYrXsQ6iSsiav-YeuLfimOTs.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31382
IP address blocks: 185.85.65.0/24 maxlen: 24
185.85.66.0/24 maxlen: 24
185.85.67.0/24 maxlen: 24
185.140.84.0/22 maxlen: 22
193.41.41.0/24 maxlen: 24
2a04:c7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ad:a1:07:1a:98:37:c9:b8:04:f1:4b:f6:2d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03851f62b5ec43a892b226aff987ae2df8a6393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:2d:ca:3f:c9:2a:43:88:fb:a1:6b:be:6e:
b4:56:62:a7:02:90:bd:67:62:f2:87:c6:14:3b:46:
31:21:cd:11:60:50:73:9d:4a:7e:bf:f6:3e:39:a3:
a9:b2:06:7d:83:d3:92:17:af:a7:f3:f6:06:3b:75:
fd:c2:09:78:9f:03:ad:10:27:7d:7c:e5:a6:4b:8f:
e8:1f:4b:7f:85:69:af:93:ec:5e:36:77:3c:ec:43:
b2:15:e3:92:c4:62:34:30:e1:db:2a:18:4b:fd:45:
a6:ec:e6:0a:1b:b1:57:a9:22:3a:c8:50:da:8c:a4:
49:3b:82:6e:ac:ef:56:c5:38:81:e7:5b:17:a5:e5:
86:d5:6d:70:11:79:3e:ca:19:61:31:a7:ac:0c:44:
b1:b6:9e:a7:f5:ae:75:85:69:12:0a:7f:79:8c:2f:
1c:b0:3a:8a:75:b4:cf:da:40:ef:ca:e0:62:43:fc:
87:ff:98:2e:06:d4:d4:e6:80:01:97:b8:d7:85:fa:
f2:83:9a:34:fb:58:68:a5:99:3b:00:f0:33:82:b1:
cc:02:cf:45:96:af:57:f6:d1:ec:d7:dc:5e:1d:0a:
d1:64:d6:f9:00:c9:78:31:12:d2:95:ae:c0:cb:75:
84:b4:f6:84:2b:3b:f2:56:2e:07:a7:19:77:0d:a2:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:1F:62:B5:EC:43:A8:92:B2:26:AF:F9:87:AE:2D:F8:A6:39:3B
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/A4UfYrXsQ6iSsiav-YeuLfimOTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.65.0-185.85.67.255
185.140.84.0/22
193.41.41.0/24
IPv6:
2a04:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:e7:f3:5a:fc:0a:3d:6d:ba:39:98:74:ef:08:18:da:b2:de:
bb:6d:6b:37:8e:7e:6e:1b:32:31:38:ba:0d:ee:4d:41:d8:1d:
a8:42:cf:c3:f5:bb:a5:34:bc:75:6e:f8:82:9b:92:4d:19:68:
33:13:d1:48:92:e7:e7:f3:a4:65:48:b8:7e:d7:a3:58:6b:2f:
53:48:af:f3:37:45:77:71:19:38:46:25:78:fc:d9:ce:4e:c3:
b4:ee:23:ac:e3:62:c4:f7:47:b5:8c:56:6c:29:ab:4e:85:13:
69:55:f3:53:6f:0a:d0:3a:21:82:05:68:0b:ad:54:66:a6:86:
b8:a7:a5:b6:5d:13:7c:bd:d3:2c:97:36:58:45:2f:eb:c1:2a:
42:e7:c9:c2:c7:c0:b0:c5:6d:69:fa:d5:ab:7c:c7:6c:bb:e8:
8c:58:9d:18:c4:f1:64:bd:04:95:b6:ba:22:2e:35:cc:9a:4c:
cd:44:91:db:79:e3:8b:93:f0:6e:41:01:7d:6a:61:f2:04:c3:
ea:2d:27:7f:26:fc:b2:b7:86:2b:33:f3:54:c7:5b:ee:2a:58:
84:e2:ff:cc:d5:9f:e5:a9:27:2c:e9:a8:bd:62:e5:bb:12:51:
a7:69:3e:22:26:32:f1:b0:f1:8f:8c:78:59:34:f4:57:80:4f:
ad:08:96:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:35 2025 by rpki-client