Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa
File: 4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa (raw, json)
Hash identifier: T/rxg5SROv77xR3vA3yXKL1TTkjTzRNlaWirdpsIt6c=
Subject key identifier: E2:F5:D6:49:85:7B:06:E0:6F:F9:4C:BA:83:08:67:1A:36:DA:EA:5E
Certificate issuer: /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial: 019421B241C7C27CDC079A683DEE31B017A2
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49879
IP address blocks: 185.21.204.0/22 maxlen: 22
185.21.204.0/24 maxlen: 24
185.21.205.0/24 maxlen: 24
185.21.206.0/24 maxlen: 24
185.21.207.0/24 maxlen: 24
217.116.192.0/21 maxlen: 21
217.116.192.0/24 maxlen: 24
217.116.193.0/24 maxlen: 24
217.116.194.0/24 maxlen: 24
217.116.195.0/24 maxlen: 24
217.116.196.0/24 maxlen: 24
217.116.197.0/24 maxlen: 24
217.116.198.0/24 maxlen: 24
217.116.199.0/24 maxlen: 24
217.116.200.0/21 maxlen: 21
217.116.200.0/24 maxlen: 24
217.116.201.0/24 maxlen: 24
217.116.202.0/24 maxlen: 24
217.116.203.0/24 maxlen: 24
217.116.204.0/24 maxlen: 24
217.116.205.0/24 maxlen: 24
217.116.206.0/24 maxlen: 24
217.116.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:c7:c2:7c:dc:07:9a:68:3d:ee:31:b0:17:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2f5d649857b06e06ff94cba8308671a36daea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:d3:80:74:30:58:a4:c3:30:c3:98:4a:f3:
99:c0:8e:37:1c:0f:d7:35:ca:74:72:ab:30:49:fa:
45:9a:bf:e0:3a:24:ea:c6:5f:e8:ae:95:c5:0e:75:
06:20:67:78:b6:89:40:b1:7d:7f:92:fe:f2:04:27:
fb:f1:d5:a7:57:57:b8:64:3f:e7:96:93:f0:39:3b:
fa:8c:96:71:ec:e8:59:fa:61:f8:44:b4:4a:ff:97:
21:5f:7c:1f:e7:dc:69:09:3c:4c:69:3f:b8:22:17:
fc:df:78:b0:ea:3a:ed:fe:0f:e9:31:09:2d:1e:c3:
1f:ba:e0:66:42:0a:7e:14:c7:58:6e:f9:9b:2f:32:
4c:90:3d:4c:6d:03:14:68:80:b9:df:f1:01:ea:e0:
71:43:04:f3:75:65:ac:07:94:1b:c3:2d:ee:8f:41:
4b:8e:65:b5:20:2f:f6:c0:80:f4:e2:d0:50:c2:ee:
1d:5d:76:86:db:70:bf:50:b3:a9:82:5d:e5:4a:dd:
6c:d0:fc:df:cd:ef:24:95:c8:31:ef:85:ae:aa:4d:
3f:4a:b7:99:5a:49:d2:05:64:39:29:bf:30:a7:61:
70:a0:95:c0:b9:34:55:3a:87:73:9d:ea:d2:e8:f0:
58:04:b0:13:90:0c:05:25:4d:16:c0:ee:15:f9:b7:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:D6:49:85:7B:06:E0:6F:F9:4C:BA:83:08:67:1A:36:DA:EA:5E
X509v3 Authority Key Identifier:
keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/4vXWSYV7BuBv-Uy6gwhnGjba6l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.204.0/22
217.116.192.0/20
Signature Algorithm: sha256WithRSAEncryption
70:62:b0:c4:3d:2b:63:31:43:c6:b7:c1:3b:96:ce:b4:cd:fe:
87:5d:52:0b:ec:a3:b1:20:5e:7b:b0:1a:51:8c:92:35:88:c0:
f3:de:b5:77:94:99:01:f0:81:40:0c:db:e9:d3:9c:08:bf:13:
1e:f5:fa:8c:28:cf:50:38:0b:14:99:18:d1:23:09:9d:e9:13:
1c:c0:3c:0a:95:92:b9:7d:b3:00:e2:ee:9d:d6:62:58:63:f8:
f1:87:a3:6b:eb:6e:ee:61:5b:4d:6a:00:1b:7e:6e:25:09:a8:
8b:d3:ee:04:23:5f:5b:f1:16:31:ac:1a:7b:12:17:f1:61:26:
6d:ef:46:46:06:99:fb:38:6c:6b:4d:bf:88:76:1f:ac:de:7a:
26:2f:5d:a1:e9:51:49:90:57:5f:1d:2e:0a:0b:7c:a2:2d:6a:
85:8a:d1:a0:96:70:ee:95:18:68:d1:71:ae:9a:ca:5a:25:05:
17:7d:f2:92:d4:9f:b8:a7:01:a3:59:84:c7:f4:e6:49:07:6b:
22:14:0a:8e:83:c4:9d:c2:79:57:c4:cf:1a:88:0d:9b:91:52:
83:e8:79:d7:f8:16:01:b8:0a:40:24:00:39:14:5c:dc:16:a0:
2a:7f:44:ab:21:76:54:a3:62:b2:26:5c:78:32:d4:d4:fd:d7:
c0:45:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:01 2025 by rpki-client