Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/42TScFyDsL36h4YpEfhHoHfnzjk.roa
File: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (raw, json)
Hash identifier: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=
Subject key identifier: E3:64:D2:70:5C:83:B0:BD:FA:87:86:29:11:F8:47:A0:77:E7:CE:39
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 0194258F5D90695DEC4BF0FA7517B69D25B4
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/42TScFyDsL36h4YpEfhHoHfnzjk.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.79.72.0/24 maxlen: 24
185.79.73.0/24 maxlen: 24
185.79.74.0/24 maxlen: 24
185.79.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5d:90:69:5d:ec:4b:f0:fa:75:17:b6:9d:25:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e364d2705c83b0bdfa87862911f847a077e7ce39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:18:df:69:b0:42:24:00:52:93:77:45:fb:
8d:64:77:3a:7a:fb:1f:7a:d1:69:78:8f:f0:3b:7d:
2a:8d:de:c8:07:a9:0a:1a:0d:c3:0c:dc:59:39:9d:
7f:d4:c1:97:44:77:1d:12:ff:53:9a:9a:76:b6:b7:
e5:7f:e4:38:0f:3b:17:e6:77:87:a1:1f:80:3d:81:
19:c1:b1:5f:54:a2:a3:b5:bc:da:92:5f:a4:2d:ef:
2f:d2:41:9a:4a:65:55:d7:8e:1c:59:d4:b3:88:10:
95:c5:06:43:01:df:e0:e6:75:02:48:59:4e:16:6a:
d7:3d:d1:fa:0b:ca:78:0b:0b:4d:36:88:5f:12:b9:
bd:8c:59:fc:1c:bf:11:cd:7c:3f:b1:b8:ef:51:96:
ae:53:3a:bc:93:f8:6c:7e:12:40:9c:06:55:00:e4:
ff:40:39:f4:5d:7f:ee:bf:cf:d1:e6:2e:2b:07:01:
26:94:33:d1:1a:a0:b7:61:0a:d2:33:6d:e3:4a:07:
c8:25:60:3b:a7:68:c8:07:bf:5a:cd:05:ab:85:51:
2a:b1:34:4d:0f:5b:48:17:f1:59:58:ea:88:d4:9f:
12:fb:9e:b0:6d:ac:4a:8b:6d:c8:50:80:3f:a5:e1:
be:52:ac:94:ea:ba:ea:0e:93:97:84:79:b7:96:db:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:D2:70:5C:83:B0:BD:FA:87:86:29:11:F8:47:A0:77:E7:CE:39
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/42TScFyDsL36h4YpEfhHoHfnzjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.72.0/22
Signature Algorithm: sha256WithRSAEncryption
51:6e:45:32:a1:a3:09:35:08:db:ce:9a:c0:a1:ce:3a:05:e4:
3d:4c:3d:f8:ef:14:73:18:3a:f8:cb:b3:71:6e:8a:36:10:4c:
67:71:3c:de:bf:26:3f:e5:16:91:4c:23:35:bc:df:f8:2b:16:
7c:b4:f2:2a:94:9b:c2:7a:cf:2c:69:b1:48:f8:58:0c:96:3e:
59:e2:8c:06:d3:15:c9:2a:2b:4a:2f:46:d6:c4:e3:01:db:f3:
b5:02:30:3c:ba:cc:97:94:9a:8a:6e:63:34:9c:cb:d4:cd:50:
e7:4d:f3:d8:52:75:52:d6:8a:64:65:08:50:e7:ba:5e:c9:df:
95:a9:c6:41:a0:a4:e8:1b:b0:8d:bb:ef:87:65:aa:15:b9:eb:
51:c9:48:32:64:46:07:0b:85:5e:f6:e3:10:7b:12:a1:a4:73:
70:a6:7d:0a:db:f2:aa:e4:2f:0f:80:2f:db:10:14:75:ec:46:
84:30:a6:e2:0d:da:18:0e:6a:96:6b:cf:c9:cc:2d:38:32:d8:
e8:32:bc:8d:74:7f:98:59:49:42:1d:d4:73:44:51:8d:5f:eb:
f6:bb:b6:2c:b0:ee:9e:ae:fd:bf:40:e0:1a:59:54:21:3c:9b:
a8:72:f9:0a:22:eb:e9:fb:c1:7e:e3:e3:a9:bb:d7:34:7f:08:
85:51:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:56 2025 by rpki-client