Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa
File: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (raw, json)
Hash identifier: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=
Subject key identifier: 99:29:42:25:9B:F8:B8:B5:CF:5F:D4:C6:E4:5A:9C:9A:F3:1A:8B:46
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 0194206869B8572988B27173000D1173D697
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35435
IP address blocks: 185.6.64.0/24 maxlen: 24
185.6.66.0/24 maxlen: 24
185.6.67.0/24 maxlen: 24
185.164.192.0/24 maxlen: 24
185.164.193.0/24 maxlen: 24
185.164.194.0/24 maxlen: 24
185.164.195.0/24 maxlen: 24
185.169.200.0/24 maxlen: 24
185.169.201.0/24 maxlen: 24
185.169.202.0/24 maxlen: 24
185.169.203.0/24 maxlen: 24
185.183.132.0/24 maxlen: 24
185.183.133.0/24 maxlen: 24
185.183.134.0/24 maxlen: 24
185.183.135.0/24 maxlen: 24
2a02:cf80:3::/48 maxlen: 48
2a02:cf80:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:69:b8:57:29:88:b2:71:73:00:0d:11:73:d6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=992942259bf8b8b5cf5fd4c6e45a9c9af31a8b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:ec:9a:a2:d1:7d:92:b8:96:a9:29:a2:c9:
4e:39:6c:5b:b7:c1:ad:64:12:b2:18:ab:d5:28:8b:
23:f2:a9:cc:90:8c:34:13:04:d0:68:43:3f:60:ed:
09:7f:c4:0e:47:94:ae:4b:ae:14:df:da:3e:bd:76:
fc:d7:76:9a:c7:b6:fa:5c:91:7b:15:39:a9:e2:74:
8b:b7:3c:37:b1:be:09:bf:1a:3a:99:d5:e1:24:c0:
50:55:29:d0:6c:27:97:f5:ce:08:77:8b:96:38:16:
9f:39:52:c4:1d:78:88:d2:50:fd:74:3e:86:79:14:
eb:61:92:d7:df:52:f5:4b:72:38:1a:34:f0:72:99:
7b:f6:89:10:99:5b:0b:15:12:36:a5:30:df:f9:99:
ce:e1:32:ed:95:89:b2:ac:22:bf:97:a5:92:f6:79:
8b:69:69:40:10:b8:05:40:b2:26:1c:f6:9a:d8:f6:
a5:3e:ec:50:30:45:e5:27:da:e1:c2:08:ff:df:b3:
69:e3:d4:c8:74:09:63:d5:5e:2f:4b:db:2d:75:de:
3f:f8:e2:fd:b8:4c:a5:4c:43:d9:d9:4b:82:73:b3:
b3:fd:de:84:0e:a5:cc:c6:e6:ed:69:73:e1:e8:ab:
19:5d:4a:95:cc:53:42:41:c7:c3:2c:26:b8:17:17:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:29:42:25:9B:F8:B8:B5:CF:5F:D4:C6:E4:5A:9C:9A:F3:1A:8B:46
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.64.0/24
185.6.66.0/23
185.164.192.0/22
185.169.200.0/22
185.183.132.0/22
IPv6:
2a02:cf80:3::-2a02:cf80:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:23:2c:c8:1e:c9:9f:6b:d5:9d:3d:3f:d0:34:29:5b:fc:6f:
65:08:8f:94:c4:a5:f3:bc:54:05:65:7c:b7:09:dc:68:49:2e:
6b:57:f5:36:d4:79:ba:5c:ea:ef:51:ba:4c:c0:93:6a:06:50:
0d:c4:35:4a:5f:7c:0b:82:24:ef:49:ae:e6:53:20:ba:15:69:
71:c2:7a:7d:8c:2d:f4:17:1d:54:94:4a:5f:62:f2:05:d9:85:
3d:a0:39:6b:a7:b0:6f:e3:f3:30:52:ab:bc:69:af:9d:26:05:
9a:8b:90:73:c3:c5:1b:05:b1:ac:c9:7b:83:8a:c2:11:36:5b:
a6:c4:39:54:6a:2b:77:7c:a6:02:d3:64:62:cc:0f:ec:e4:56:
e6:cc:8c:b0:c6:eb:88:79:1c:60:65:27:79:24:60:a7:8c:2f:
ed:ab:f6:15:8a:9d:c3:86:85:03:26:3c:b7:7d:02:39:3c:a4:
56:7e:a0:ae:1b:3d:2a:e2:9e:bd:59:3f:c3:a4:4c:06:0c:da:
54:04:97:7f:5c:b4:ab:3c:94:0b:bd:7e:d3:4d:cf:cc:c6:31:
26:0a:ed:8b:4d:ec:ce:d7:69:33:dd:16:45:bf:48:5d:dd:1e:
70:89:68:83:24:12:fb:94:5f:c4:b5:5a:67:48:9b:66:91:eb:
cc:0d:12:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:28 2025 by rpki-client