Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/EOklS1jQhodfalq3XsKaGavo1eQ.roa
File: EOklS1jQhodfalq3XsKaGavo1eQ.roa (raw, json)
Hash identifier: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=
Subject key identifier: 10:E9:25:4B:58:D0:86:87:5F:6A:5A:B7:5E:C2:9A:19:AB:E8:D5:E4
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 019421B1D3EC2F300049217483D740D43A76
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/EOklS1jQhodfalq3XsKaGavo1eQ.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203951
IP address blocks: 185.119.4.0/22 maxlen: 22
185.119.4.0/24 maxlen: 24
185.119.5.0/24 maxlen: 24
185.119.6.0/24 maxlen: 24
185.119.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d3:ec:2f:30:00:49:21:74:83:d7:40:d4:3a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e9254b58d086875f6a5ab75ec29a19abe8d5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:b3:7d:4d:00:e7:f9:24:88:47:4a:30:f3:
7d:58:0b:dd:16:b0:d6:0b:96:f3:c7:25:c4:a1:00:
20:48:6d:35:7c:da:ec:ed:b6:2e:fe:af:a2:6e:80:
ff:83:aa:d8:d8:e8:93:6d:a1:61:07:9a:b3:ae:0b:
92:24:38:c6:8f:5e:5c:33:65:ca:9e:1d:76:f8:02:
0c:b0:ad:dd:be:71:39:57:56:4e:83:98:6e:16:65:
32:a8:d2:6b:d0:b9:f1:3d:f9:9e:88:81:3d:8b:77:
92:2b:65:34:11:ae:e4:8d:8f:7c:c5:8a:bc:54:5d:
63:a1:09:9e:45:9c:cd:04:c6:2c:a5:f6:a7:7b:45:
83:38:59:9a:53:73:8b:56:bf:64:97:da:11:21:2b:
db:c9:0a:b3:41:4f:f9:37:eb:0e:6b:e5:8c:38:7f:
12:9d:59:52:68:88:e3:a2:f3:42:4c:f4:a4:95:53:
5e:1b:17:6a:72:b5:e4:13:d8:3c:3f:7c:17:c1:08:
3e:7a:8b:73:2a:fd:ce:fc:22:db:c1:95:3b:d9:cf:
2a:b3:5e:1d:45:35:28:e4:9c:a5:70:e2:33:03:d9:
1a:25:58:cc:7f:46:0a:9f:1e:65:3a:f4:7e:75:5d:
5e:0a:f8:d2:fb:9c:7f:c5:81:39:d8:e3:4a:42:f1:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E9:25:4B:58:D0:86:87:5F:6A:5A:B7:5E:C2:9A:19:AB:E8:D5:E4
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/EOklS1jQhodfalq3XsKaGavo1eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:c3:01:11:2d:5b:61:b4:c7:1b:da:51:ba:8a:8c:10:01:ae:
49:07:1d:03:1d:8d:98:f2:25:a0:b8:2a:84:28:1f:5f:a4:5b:
2d:2c:19:9d:bf:56:bf:47:f8:6b:f3:2c:68:61:5e:e0:90:61:
44:15:63:72:95:de:ad:f2:10:41:b2:38:79:11:95:53:5f:50:
45:da:0e:9c:ef:8d:0d:06:ff:1c:20:88:7a:8c:5f:f0:ac:53:
ad:fd:48:f3:68:f4:3c:40:cc:3f:f6:10:c3:a9:f6:12:57:a7:
ac:ef:da:21:ca:37:2f:e0:05:5a:e0:07:e9:41:ce:38:f4:ec:
92:60:50:a4:17:10:52:a7:d2:66:57:83:cc:4d:c3:20:56:b4:
40:98:90:f7:29:a3:1c:7d:1c:db:fe:d0:21:48:35:f4:d9:cb:
04:73:b3:6a:2a:bb:b9:f5:1b:38:a1:fb:f7:6b:cd:a6:4e:3c:
09:a2:b9:36:4e:6e:69:c3:38:1e:4d:d1:c9:6a:54:90:64:ce:
13:2e:a4:49:da:22:17:2c:85:0a:3f:bd:b1:3f:50:b4:ee:fb:
fe:2f:4d:2d:45:55:57:34:a4:5c:5b:b5:a9:dc:75:ad:87:fb:
74:bc:9f:0f:8b:58:97:34:fd:19:76:d2:82:1f:7d:a4:bd:63:
ca:e6:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:27 2025 by rpki-client