Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/1VFRaILqnJnJB3yngV6vDeJcapk.roa
File: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (raw, json)
Hash identifier: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=
Subject key identifier: D5:51:51:68:82:EA:9C:99:C9:07:7C:A7:81:5E:AF:0D:E2:5C:6A:99
Certificate issuer: /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial: 01966C353C9F87440A3E5059FB0611B0E076
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/1VFRaILqnJnJB3yngV6vDeJcapk.roa
Signing time: Fri 25 Apr 2025 09:09:10 +0000
ROA not before: Fri 25 Apr 2025 09:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58193
IP address blocks: 178.251.124.0/24 maxlen: 24
178.251.125.0/24 maxlen: 24
185.154.86.0/24 maxlen: 24
194.48.100.0/22 maxlen: 24
2a02:fae0::/29 maxlen: 29
2a02:fae0::/40 maxlen: 40
2a02:fae0:100::/40 maxlen: 40
2a02:fae0:200::/40 maxlen: 40
2a02:fae0:300::/40 maxlen: 40
2a02:fae0:400::/40 maxlen: 40
2a02:fae0:500::/40 maxlen: 40
2a02:fae0:600::/40 maxlen: 40
2a02:fae0:700::/40 maxlen: 40
2a02:fae0:800::/40 maxlen: 40
2a02:fae0:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:35:3c:9f:87:44:0a:3e:50:59:fb:06:11:b0:e0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Validity
Not Before: Apr 25 09:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d551516882ea9c99c9077ca7815eaf0de25c6a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:2a:45:66:18:db:95:06:ea:13:83:86:77:
6e:af:98:06:b8:ea:81:64:6e:44:02:48:b3:f9:1a:
91:05:e0:21:77:04:db:3e:ef:14:cf:39:81:23:46:
4b:d5:97:cc:3b:55:40:dc:ab:ec:23:2a:a4:e8:f2:
e3:72:9e:36:31:15:d6:41:80:06:11:59:29:61:9c:
cf:d8:be:17:fa:96:0b:12:27:02:95:f5:ce:2a:f3:
9d:74:64:90:14:1a:3f:ba:65:6c:e5:43:31:20:e1:
f9:76:08:48:84:d8:42:af:27:cf:a4:e8:26:86:11:
cf:d4:39:50:a5:97:ae:57:0d:56:d6:b2:8c:38:1e:
f7:28:46:f7:61:2e:7c:1e:b8:98:bd:56:05:49:d3:
83:3c:42:c5:10:98:9e:e9:32:dc:a6:ca:bc:8e:9a:
dd:f6:7d:f2:b4:ad:dc:c9:7d:8d:e5:0c:27:46:df:
5c:c8:b4:8a:97:94:c7:39:98:e4:58:48:9c:91:b9:
a2:49:7f:90:05:72:35:52:b6:9a:b2:d3:4b:fc:52:
5b:09:77:40:d9:d7:c2:87:fb:21:3e:4b:8c:c8:44:
b9:20:1f:54:90:3c:52:7b:fe:7b:40:23:e3:02:83:
60:78:57:9e:1c:a2:82:ca:8b:34:ce:6a:41:9c:8c:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:51:51:68:82:EA:9C:99:C9:07:7C:A7:81:5E:AF:0D:E2:5C:6A:99
X509v3 Authority Key Identifier:
keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/1VFRaILqnJnJB3yngV6vDeJcapk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.124.0/23
185.154.86.0/24
194.48.100.0/22
IPv6:
2a02:fae0::/29
Signature Algorithm: sha256WithRSAEncryption
a2:b1:4c:2f:da:6f:4d:0a:bb:78:39:5d:9a:b2:8a:2a:60:75:
df:3e:d6:e4:73:ac:5f:98:8e:7c:8d:91:7f:01:f2:b3:db:a5:
98:13:af:28:fc:26:85:18:6c:87:c1:09:ac:82:a2:9f:08:8f:
d7:78:0e:e5:0c:7b:e1:d0:2c:72:f8:d6:0e:a3:f6:1d:ec:fe:
81:a9:03:35:99:3f:1d:d7:77:ab:6c:2c:6b:cd:d1:32:be:0f:
b3:27:ee:b3:02:60:f4:86:67:56:7c:75:14:e2:5d:11:b7:aa:
79:f8:22:1f:0f:a8:79:b0:ae:46:e6:94:7a:c1:62:60:06:f1:
b9:f4:47:e7:04:7c:bd:c5:c4:2a:36:71:27:2c:36:60:7d:c7:
33:e0:76:75:c9:a0:1c:92:1d:d7:1e:81:4f:91:f4:87:49:eb:
84:2a:55:0f:b8:0f:1a:20:7f:e8:6a:27:62:d3:1e:f8:2f:e9:
a7:6d:90:ed:dc:29:28:94:7a:81:da:5a:f3:52:b0:05:48:88:
13:e5:ea:44:b1:7d:9c:87:09:68:1c:6a:c2:40:23:c2:5d:9d:
1b:8c:9d:27:b4:e3:23:e3:ab:12:fd:d0:7d:d4:02:23:65:12:
a3:f5:df:f0:d2:bd:b6:a9:7d:63:56:8b:ef:7c:ea:45:a6:c8:
f7:5b:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:57:20 2025 by rpki-client