Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/G4a30ttfjHFxij-eVrmW-fidH94.roa
File: G4a30ttfjHFxij-eVrmW-fidH94.roa (raw, json)
Hash identifier: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=
Subject key identifier: 1B:86:B7:D2:DB:5F:8C:71:71:8A:3F:9E:56:B9:96:F9:F8:9D:1F:DE
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 01941F8C04EF867AD4F9DAF39E9C9B5BC218
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/G4a30ttfjHFxij-eVrmW-fidH94.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51871
IP address blocks: 185.239.20.0/22 maxlen: 22
185.239.20.0/24 maxlen: 24
185.239.21.0/24 maxlen: 24
185.239.22.0/24 maxlen: 24
185.239.23.0/24 maxlen: 24
193.34.28.0/22 maxlen: 22
193.34.28.0/24 maxlen: 24
193.34.29.0/24 maxlen: 24
193.34.30.0/24 maxlen: 24
193.34.31.0/24 maxlen: 24
2001:67c:21b0::/48 maxlen: 48
2a13:9140::/29 maxlen: 29
2a13:9140::/32 maxlen: 32
2a13:9141::/32 maxlen: 32
2a13:9142::/32 maxlen: 32
2a13:9143::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:04:ef:86:7a:d4:f9:da:f3:9e:9c:9b:5b:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b86b7d2db5f8c71718a3f9e56b996f9f89d1fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:0a:c9:2e:17:9c:88:40:cf:8c:8e:50:af:
bc:df:59:df:e1:fb:cb:c6:3a:f4:11:10:51:74:81:
ec:1f:1c:07:45:7d:d3:43:d0:d8:98:a5:00:c9:f6:
da:b0:9d:67:8f:da:eb:54:41:ce:0d:13:ed:a0:27:
f6:38:f8:f3:84:0b:19:89:d9:5a:6c:80:dc:8d:47:
40:0c:ca:59:35:42:3f:48:ce:5f:be:6b:35:eb:3d:
5d:1c:2c:b3:15:4d:c9:ac:ed:db:41:e3:d2:cd:dd:
e5:cb:60:60:d1:da:55:12:82:c1:a6:b0:4c:8a:ba:
e3:85:aa:25:3a:bf:86:34:7f:e7:20:45:df:1c:8b:
d6:84:98:11:f9:a8:0e:23:58:ff:00:fb:cb:f4:b5:
6f:71:38:b4:5d:fc:9b:f6:94:e4:11:5b:e0:f6:8a:
17:f2:7d:20:e7:ee:98:a5:bb:bd:e7:da:c7:90:d7:
e8:ce:cd:4b:23:e8:9c:02:d7:9f:02:e2:c2:4d:bf:
02:8b:95:b5:78:4c:ad:8b:da:52:ec:5e:25:d1:6d:
76:34:db:ca:ef:c9:42:3b:4f:c1:d9:bd:2d:a8:7d:
b5:b6:0c:02:b8:52:b6:d8:a7:65:05:36:b1:e2:b0:
f5:01:85:ad:c2:a8:90:fb:6d:b6:20:a6:35:59:0d:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:86:B7:D2:DB:5F:8C:71:71:8A:3F:9E:56:B9:96:F9:F8:9D:1F:DE
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/G4a30ttfjHFxij-eVrmW-fidH94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.20.0/22
193.34.28.0/22
IPv6:
2001:67c:21b0::/48
2a13:9140::/29
Signature Algorithm: sha256WithRSAEncryption
02:5d:83:b3:8d:d0:e3:c8:a3:96:f5:eb:16:e9:fc:24:2f:3b:
38:64:54:2e:69:11:bb:16:1a:1c:c1:46:db:60:99:ae:0f:c3:
7b:43:c3:e0:23:51:47:d9:12:cb:cb:bb:81:0e:fb:e9:55:8d:
cf:00:a6:d0:16:1f:c4:65:ae:51:c9:62:95:ef:84:30:4f:64:
91:49:f3:aa:5b:d3:a3:11:ef:9b:7d:70:7f:9f:ac:d8:22:8f:
8e:f0:26:2f:5e:26:1a:f8:dd:07:ad:c7:77:ef:9f:f7:c4:bf:
d1:f4:86:62:70:1a:62:8a:d4:f6:9a:7f:e7:b6:e8:1f:cb:84:
ea:e4:b9:cc:75:8a:f5:09:50:7c:e0:13:d2:82:ed:a3:5d:0f:
9e:c8:0c:89:e9:96:2a:69:a6:41:13:ed:d6:36:13:03:06:69:
a4:35:ff:91:59:7c:42:95:27:cf:ab:7e:6c:2b:56:31:58:88:
5d:f4:08:30:15:4c:01:5e:4e:94:f0:4b:ac:16:7c:3e:04:c1:
4a:7b:b8:40:1a:97:c7:8d:c2:9f:64:64:fa:d6:a8:80:2f:7f:
16:6d:d6:eb:90:ac:21:be:13:c7:da:0d:9a:af:75:a6:ef:46:
a3:59:59:9b:d8:6d:87:1f:3c:43:c7:f9:b4:71:92:ba:66:87:
28:ef:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:02:58 2025 by rpki-client