Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vXI3i9bBlRm6yL-QSwwlcXo9xps.roa
File: vXI3i9bBlRm6yL-QSwwlcXo9xps.roa (raw, json)
Hash identifier: d+9m/HkjngF+HS7pWRRhG95bldaJQog6s2tQMEdJEIw=
Subject key identifier: BD:72:37:8B:D6:C1:95:19:BA:C8:BF:90:4B:0C:25:71:7A:3D:C6:9B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D711C16EB47DEE6036667D9490A80A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vXI3i9bBlRm6yL-QSwwlcXo9xps.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52008
IP address blocks: 185.58.206.0/24 maxlen: 24
185.172.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:11:c1:6e:b4:7d:ee:60:36:66:7d:94:90:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd72378bd6c19519bac8bf904b0c25717a3dc69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:06:9e:9c:fd:80:c1:56:54:2b:21:03:83:
8c:9a:e0:55:39:b5:00:8b:32:d4:52:80:e9:0d:71:
33:da:8a:01:69:d1:b4:c4:6a:f0:94:2a:56:e4:1f:
4d:0d:c2:5d:bf:dc:dc:fa:fd:68:e5:65:74:c3:83:
14:8e:bd:14:d1:5e:aa:7f:a7:0d:ef:d1:35:31:8c:
ba:f1:e4:43:2d:4d:8c:3b:bc:49:ac:12:55:e1:07:
db:39:76:00:d4:8a:91:ed:5a:67:f2:cd:22:00:9c:
59:48:29:dc:32:32:bc:f2:3a:f2:cd:a2:0f:01:8c:
c7:14:56:8b:48:e2:27:f5:8c:a4:2c:4e:e4:5c:9b:
7a:ba:23:f5:41:83:74:81:c3:a8:30:70:cd:a7:18:
26:0a:dc:f5:4c:f1:82:56:c0:6e:36:f7:1e:68:72:
83:19:41:f7:17:8d:23:9a:40:de:b5:43:d1:15:0a:
8d:f8:14:2a:1c:25:1e:56:6d:4c:52:5c:7d:e3:10:
8c:b2:b9:9e:e9:dc:c8:37:55:0c:c1:5f:5a:e3:84:
76:98:e5:87:b8:11:72:84:70:65:89:b5:ef:b6:be:
57:d7:44:63:c3:69:63:5d:79:4e:a3:c1:e1:c3:a1:
3e:a9:7e:a5:2b:43:de:6f:5f:5b:21:c7:08:9c:d1:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:37:8B:D6:C1:95:19:BA:C8:BF:90:4B:0C:25:71:7A:3D:C6:9B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vXI3i9bBlRm6yL-QSwwlcXo9xps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.206.0/24
185.172.128.0/24
Signature Algorithm: sha256WithRSAEncryption
71:7c:de:b9:20:50:68:04:e4:e3:98:73:1a:cb:d0:da:88:82:
04:cb:66:e0:52:76:58:6d:b4:98:89:31:2d:ff:b3:97:1d:39:
5e:25:04:5c:54:b2:0e:a9:a4:22:8a:46:9f:a5:9f:c7:bf:88:
02:91:72:a9:c5:3d:ce:40:43:85:f8:fd:7f:82:e7:23:91:83:
72:09:3e:41:61:a3:5d:04:b0:ca:6b:9e:9c:21:23:11:5b:a7:
e4:1f:83:e0:53:bb:49:ac:a4:70:00:4c:0c:03:11:5d:ca:c7:
f5:8a:71:bf:2e:4c:4a:51:20:c5:ec:11:dc:33:7d:cb:eb:c1:
73:be:f9:d3:07:da:f7:9f:e7:f8:d3:37:97:52:e7:19:a3:f0:
99:51:90:40:b4:01:46:e3:42:ce:ff:cc:f8:e7:c9:c1:4e:89:
90:4c:13:42:21:db:20:c5:c6:87:da:86:99:c8:0b:48:d0:05:
45:ea:11:e5:3b:c9:52:73:71:61:55:67:92:cd:20:64:a0:20:
19:0c:b7:21:41:dc:7d:a3:92:e2:b5:7e:0e:c4:06:de:cd:dd:
11:f9:a1:07:2b:23:66:6c:95:3c:f6:df:ec:12:bf:51:98:1f:
0f:9d:9b:78:f4:ac:97:18:e5:2e:eb:f2:66:d4:2b:24:0f:0f:
39:e8:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:52 2025 by rpki-client