Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/DRmZJybrlbdXMMtCv-LzVRORQZk.roa
File: DRmZJybrlbdXMMtCv-LzVRORQZk.roa (raw, json)
Hash identifier: 5OPrd1Swg2Ws5p7BB56DIY7Qpw55Ar+XvquToD8doCY=
Subject key identifier: 0D:19:99:27:26:EB:95:B7:57:30:CB:42:BF:E2:F3:55:13:91:41:99
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 0194258EFC5F6E6024BC660949323EAE4A33
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/DRmZJybrlbdXMMtCv-LzVRORQZk.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197227
IP address blocks: 5.133.248.0/21 maxlen: 24
37.247.56.0/21 maxlen: 24
46.175.40.0/21 maxlen: 24
46.243.156.0/22 maxlen: 24
85.234.248.0/21 maxlen: 24
145.14.240.0/21 maxlen: 24
185.81.56.0/22 maxlen: 24
185.131.160.0/22 maxlen: 24
188.211.16.0/21 maxlen: 24
195.80.128.0/21 maxlen: 24
213.5.208.0/21 maxlen: 24
2a03:1280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fc:5f:6e:60:24:bc:66:09:49:32:3e:ae:4a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d19992726eb95b75730cb42bfe2f35513914199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:35:fa:2b:e1:9b:99:65:fd:4f:31:76:82:
6d:d4:bb:48:21:12:44:e0:57:79:03:25:8d:38:c1:
98:f6:5f:03:d5:ae:63:da:74:f1:ee:50:5d:04:ff:
a3:e5:50:40:e4:60:99:90:ac:0d:43:70:7c:07:39:
b7:ff:02:98:4f:d1:69:71:00:8d:18:5d:db:c3:90:
41:14:07:7d:ab:93:60:ec:58:e9:95:b1:8a:2b:a3:
96:23:0d:d4:25:27:52:e5:c9:ac:29:77:b0:ee:62:
10:5f:92:8f:c6:27:0c:b7:bc:1c:ef:52:8b:d5:f2:
2c:e3:12:80:a1:fe:63:9c:ee:c1:b5:61:9e:67:14:
bb:93:bd:c5:9c:86:9c:8a:8d:6f:e4:b0:93:11:88:
d0:14:63:80:a2:3f:47:38:74:19:28:28:1f:21:c5:
87:0d:29:39:90:7f:57:4c:28:11:a9:5d:59:fc:19:
51:f9:b7:84:c7:76:f2:03:c2:03:0f:51:a3:cb:b8:
b0:8d:15:f3:37:38:fc:8c:07:a7:f0:7d:b3:a2:95:
da:a4:fd:36:52:27:50:02:d5:e4:50:85:18:09:a5:
77:27:d0:12:95:b5:cb:66:4d:fc:71:69:45:42:c1:
81:5d:b4:cf:a5:96:51:86:c4:6e:16:5c:a8:c6:c5:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:99:27:26:EB:95:B7:57:30:CB:42:BF:E2:F3:55:13:91:41:99
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/DRmZJybrlbdXMMtCv-LzVRORQZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.248.0/21
37.247.56.0/21
46.175.40.0/21
46.243.156.0/22
85.234.248.0/21
145.14.240.0/21
185.81.56.0/22
185.131.160.0/22
188.211.16.0/21
195.80.128.0/21
213.5.208.0/21
IPv6:
2a03:1280::/32
Signature Algorithm: sha256WithRSAEncryption
12:d1:1f:0f:96:30:0b:88:db:46:c9:89:e6:c4:72:3a:bb:1a:
b0:ae:c0:31:6d:4a:18:52:db:1a:99:80:39:18:90:f6:b6:b1:
f1:e8:15:41:4d:bf:0b:c4:00:83:33:5d:fd:75:a3:f7:5d:de:
f5:48:d5:e2:25:0e:93:bd:ea:c8:9f:7b:51:c2:e1:44:6d:d5:
0c:2b:67:6f:eb:98:6e:7b:ba:0d:f7:69:a5:0c:67:19:49:a9:
35:df:3d:18:bf:c7:01:81:cc:e7:5a:a6:31:66:63:e4:27:e4:
c0:2e:ed:e4:a8:0d:2c:11:27:5d:c4:9d:9d:74:17:a4:fa:33:
2c:a9:4e:0b:fb:b5:82:9d:03:db:8c:88:da:43:2d:ae:e3:23:
86:e2:3a:ca:99:7e:5c:94:e3:b3:c6:46:d5:1a:20:03:e9:6c:
b5:06:f6:55:be:b4:7e:79:0d:ec:32:0b:dd:d2:b1:23:b6:bf:
7f:10:7c:03:b3:cb:c6:0a:8c:9b:b5:ff:18:56:b3:22:c5:45:
b1:59:b3:ab:d1:86:10:27:de:7b:1b:8b:f5:d3:ce:5c:80:49:
fa:b0:38:7b:e0:ea:1e:00:91:e9:20:88:33:d1:8d:45:b2:7d:
aa:04:6d:a8:d8:c4:a5:a7:b8:f6:2a:e3:3f:c5:c7:1f:2a:06:
85:60:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:55 2025 by rpki-client