Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/744sD4Jl3i1w7jbI0pdZB5cbKXU.roa
File: 744sD4Jl3i1w7jbI0pdZB5cbKXU.roa (raw, json)
Hash identifier: zre4BVjhFHohj+9Mxiluw9C+kHKcMYzIk5bkS8NnqLs=
Subject key identifier: EF:8E:2C:0F:82:65:DE:2D:70:EE:36:C8:D2:97:59:07:97:1B:29:75
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019686E2281B1063F839E1EDE5623BAE7145
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/744sD4Jl3i1w7jbI0pdZB5cbKXU.roa
Signing time: Wed 30 Apr 2025 13:28:10 +0000
ROA not before: Wed 30 Apr 2025 13:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42532
IP address blocks: 5.34.208.0/21 maxlen: 24
82.115.4.0/22 maxlen: 24
178.173.248.0/21 maxlen: 24
188.253.16.0/21 maxlen: 24
188.253.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:e2:28:1b:10:63:f8:39:e1:ed:e5:62:3b:ae:71:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 30 13:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef8e2c0f8265de2d70ee36c8d2975907971b2975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:8c:11:f9:60:a9:cd:08:bf:9b:ab:4a:91:
ac:32:d3:eb:34:82:26:97:f9:84:be:b8:c2:20:cf:
68:61:3d:c8:3b:2c:23:ad:41:57:94:f3:b9:57:2e:
be:fb:07:34:76:bd:db:3b:ce:7e:9e:5e:46:b2:79:
33:56:39:10:23:1d:f1:b9:32:ea:6f:e5:f4:ae:0c:
c4:58:02:a3:91:2c:26:67:88:4b:8c:a8:15:96:0a:
77:04:ed:d4:6f:d6:2b:9c:20:81:44:71:7c:b6:62:
fa:2e:37:b6:2f:78:be:3c:a1:9c:d0:66:90:ef:68:
fd:27:d9:75:70:63:3a:3e:34:5e:da:90:dc:3a:44:
81:1c:97:e6:c6:f7:53:de:d2:6d:df:91:db:b8:8a:
ad:cc:63:8f:56:a2:2b:8e:e9:1a:29:fd:c8:fe:0c:
da:94:59:6c:12:d0:5a:ac:46:f9:81:b8:1d:40:05:
8b:38:6d:da:30:14:7e:94:e9:f7:6b:8d:e6:7d:35:
6f:47:90:7b:a3:97:cc:60:d3:35:7f:76:2f:b9:1d:
46:24:ed:45:a6:39:33:fe:67:33:ec:d6:c1:14:d3:
34:6d:d5:46:7e:d4:eb:f6:8e:b6:dd:74:8c:d6:a0:
0a:2a:31:bb:e6:5f:ef:b1:19:eb:c6:42:27:22:b7:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:2C:0F:82:65:DE:2D:70:EE:36:C8:D2:97:59:07:97:1B:29:75
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/744sD4Jl3i1w7jbI0pdZB5cbKXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/21
82.115.4.0/22
178.173.248.0/21
188.253.16.0-188.253.27.255
Signature Algorithm: sha256WithRSAEncryption
ad:2b:91:09:e0:81:a4:91:b6:2b:9d:34:74:54:c2:55:16:d4:
65:5c:36:f1:2e:f3:53:f4:42:9b:7d:a7:4c:32:63:68:06:06:
b2:32:1f:9c:06:e6:3a:36:c9:62:41:01:2a:d7:34:73:64:2c:
50:b1:3c:f2:a5:44:7d:73:3c:50:d8:8a:49:fe:40:eb:8a:76:
90:4e:7c:f5:22:9f:ee:bc:76:66:71:aa:b8:54:47:4b:6d:3a:
28:9c:ec:79:a4:4f:c5:c0:5e:0a:35:a9:e6:9f:da:a3:6c:82:
34:db:cc:69:40:d1:aa:d6:85:fd:ba:e1:7d:81:61:b8:0f:28:
97:37:84:5c:4c:e6:9d:97:14:68:2a:9e:ae:87:03:bc:d6:23:
f9:88:e5:23:a9:8c:1d:b4:ba:87:b8:28:be:8d:40:37:b5:76:
67:11:12:a1:52:6e:76:48:bb:d3:1a:1d:ea:0e:ca:ab:15:36:
8d:77:1a:12:21:9b:8a:c3:0e:55:ff:8e:07:e3:fd:2c:37:d9:
a7:3f:18:30:5c:84:ac:8a:a0:1f:1e:d7:1b:bb:9f:63:ee:5f:
ec:e8:d6:c1:9a:89:df:91:99:b2:0a:43:ce:41:5f:e1:e0:92:
a3:08:0d:5c:1f:19:c2:5d:bd:a5:93:d4:f9:81:80:11:98:9e:
92:6e:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:34:22 2025 by rpki-client