Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/lGUduVHMOMEEfO0VmTWGADXGhsY.roa
File: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (raw, json)
Hash identifier: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=
Subject key identifier: 94:65:1D:B9:51:CC:38:C1:04:7C:ED:15:99:35:86:00:35:C6:86:C6
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 0196B92E2262E88ECDA13861F31448BA044F
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/lGUduVHMOMEEfO0VmTWGADXGhsY.roa
Signing time: Sat 10 May 2025 07:52:10 +0000
ROA not before: Sat 10 May 2025 07:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39154
IP address blocks: 85.158.188.0/22 maxlen: 22
85.158.188.0/24 maxlen: 24
85.158.189.0/24 maxlen: 24
85.158.190.0/24 maxlen: 24
85.158.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:2e:22:62:e8:8e:cd:a1:38:61:f3:14:48:ba:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: May 10 07:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94651db951cc38c1047ced159935860035c686c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:6d:dc:bd:1d:1a:68:f4:a0:85:f9:52:f1:
b8:da:fe:ac:92:29:fb:26:fc:1e:8f:4f:01:17:ff:
b3:05:8a:89:7a:30:58:2b:5a:19:12:34:1e:0d:70:
ba:7c:a6:ba:a3:99:c4:d9:d0:42:5c:ba:41:f8:51:
30:34:38:1f:f0:9a:84:4d:29:14:cb:d3:1c:3d:dd:
2c:1e:5f:24:b1:23:e2:d3:93:13:e9:41:94:c1:d9:
17:8d:4f:b4:ba:db:7b:c1:e3:31:43:23:4e:f4:03:
a7:0c:a8:72:83:34:9e:a8:94:d7:df:27:b4:45:84:
c9:c9:75:be:6a:50:c1:46:1f:04:44:e6:36:3c:90:
32:44:af:4f:c0:80:44:33:03:ce:23:21:9d:2d:59:
4e:75:c0:46:8f:c0:46:0c:a4:2a:2a:02:2e:67:f9:
16:03:79:2e:b4:fb:5c:74:32:76:be:29:b3:d9:6a:
89:53:d3:48:58:7f:04:a8:e6:22:29:cb:a2:9e:7b:
16:55:75:c5:d5:2b:5a:2f:7d:0c:75:7d:b4:cb:57:
c8:a6:24:36:ed:d7:db:2b:34:b0:aa:16:e9:e7:84:
dd:64:47:c5:8f:c3:50:70:58:f4:9f:fc:f7:d3:16:
50:48:4b:4f:bf:ce:43:0d:86:89:eb:d2:d6:80:f5:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:65:1D:B9:51:CC:38:C1:04:7C:ED:15:99:35:86:00:35:C6:86:C6
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/lGUduVHMOMEEfO0VmTWGADXGhsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.188.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:f5:59:5f:8d:43:bd:0e:b8:5d:fe:7b:6f:e4:19:19:6b:a8:
2a:e0:6c:9d:85:f1:7f:76:ae:40:0a:24:f1:6a:38:f8:f0:d8:
cc:ed:ad:15:48:e5:7b:af:26:f6:35:1b:de:43:eb:3e:f7:49:
68:77:8a:d0:f7:ac:1e:e5:0b:7f:53:da:94:3a:da:2d:f2:87:
ec:37:33:2f:8f:27:16:be:85:41:48:dd:8b:7f:ad:97:0d:d0:
4c:b9:e2:21:1d:06:2c:2d:26:d0:42:2d:26:cd:55:e2:97:06:
6e:5f:5d:bb:60:c3:a3:44:92:80:fd:8d:12:2b:4e:19:7b:b2:
3a:7b:35:62:4f:f7:03:8d:15:98:c1:12:55:69:e3:04:13:e2:
45:ef:25:4c:5a:80:62:eb:40:69:32:a6:61:26:1a:bd:50:9b:
a3:fa:bf:f5:ab:1d:2a:de:6a:57:ed:03:e8:74:e7:90:26:4e:
3f:f2:4c:39:e1:c3:78:5f:86:65:2e:38:d5:2b:3b:89:e2:44:
d7:ca:32:23:07:26:1c:42:e5:30:1d:de:d8:ad:6a:a1:e2:b9:
00:a1:b4:fd:64:cd:07:e8:b6:ab:b2:5a:87:e5:5c:ec:f0:cc:
d3:6a:b1:47:d3:cc:d2:9e:27:11:f1:1e:3a:27:21:96:d9:00:
30:0e:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:43:20 2025 by rpki-client