Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/evez1FLTQMGsXZwjHy5MZpX9Bto.roa
File: evez1FLTQMGsXZwjHy5MZpX9Bto.roa (raw, json)
Hash identifier: O3jcqLGYofqRuZG7p6t5YvjvZHWcAdVOGjXDA+dpDpo=
Subject key identifier: 7A:F7:B3:D4:52:D3:40:C1:AC:5D:9C:23:1F:2E:4C:66:95:FD:06:DA
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 0196C47EDDE5BE059AD5AB707DA87BAC111A
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/evez1FLTQMGsXZwjHy5MZpX9Bto.roa
Signing time: Mon 12 May 2025 12:36:10 +0000
ROA not before: Mon 12 May 2025 12:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49287
IP address blocks: 5.188.174.0/24 maxlen: 24
5.188.175.0/24 maxlen: 24
91.192.82.0/24 maxlen: 24
93.189.59.0/24 maxlen: 24
109.122.206.0/24 maxlen: 24
185.224.251.0/24 maxlen: 24
213.183.34.0/24 maxlen: 24
213.183.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:7e:dd:e5:be:05:9a:d5:ab:70:7d:a8:7b:ac:11:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: May 12 12:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7af7b3d452d340c1ac5d9c231f2e4c6695fd06da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:42:03:d4:66:22:77:25:57:4d:6d:b6:f2:
c2:97:04:72:42:f7:cc:4a:1a:4b:88:ca:69:c3:3e:
cf:56:54:e7:53:58:af:85:e6:e0:86:c8:79:bd:26:
20:48:7a:72:39:28:83:e0:27:f9:97:bd:7b:c8:50:
82:10:27:92:e2:21:a9:4c:20:c8:61:ae:f1:e9:eb:
39:4f:e3:b6:dc:fa:51:9e:94:71:03:cf:b8:ab:e5:
da:54:99:2c:de:03:87:ef:ff:93:e0:8c:7f:c2:26:
56:cc:05:c3:9c:ed:3d:13:c1:40:26:b6:d6:4c:5a:
a2:96:d8:47:78:b4:44:2b:10:2c:9c:8e:ad:04:25:
9f:18:79:4a:ea:a7:51:d9:2d:92:18:87:71:05:f1:
74:0c:15:f8:0b:39:a7:fb:c9:28:50:15:6e:37:40:
fc:f4:66:88:59:ec:1d:78:f7:92:2c:54:61:7b:fd:
e2:5e:05:40:c3:e8:cd:81:e5:db:dd:47:97:7d:d8:
27:df:87:fb:35:b8:dd:bd:6e:99:01:20:60:bb:35:
96:39:bf:15:4f:55:b0:93:41:7b:ad:ae:ac:67:eb:
16:ea:ec:a9:1b:c4:ac:d8:92:1a:8b:d4:37:db:71:
e2:cc:8c:de:60:fb:ad:b9:49:aa:76:bc:25:55:85:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:B3:D4:52:D3:40:C1:AC:5D:9C:23:1F:2E:4C:66:95:FD:06:DA
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/evez1FLTQMGsXZwjHy5MZpX9Bto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.174.0/23
91.192.82.0/24
93.189.59.0/24
109.122.206.0/24
185.224.251.0/24
213.183.34.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:19:8a:1e:2b:c7:d9:01:49:b8:95:d5:40:59:ef:7e:e1:98:
6d:81:1a:5c:39:1a:b9:3b:6a:89:c4:46:14:2a:6c:e9:10:80:
bf:0c:99:c3:50:d0:47:73:04:d2:28:77:46:cf:62:8f:82:30:
35:ad:9a:53:d6:d6:71:e1:6a:a1:2a:23:ee:93:ba:5d:a9:1a:
46:5c:a4:c2:76:f6:f2:f8:4a:56:1d:02:e5:af:76:17:c2:d5:
95:5e:e0:77:c3:88:cd:92:fa:fb:16:db:e7:4a:fe:fc:ec:64:
3f:4c:76:06:3d:f7:ec:f0:c5:08:b9:b2:c3:83:8a:ff:2c:60:
10:ad:cf:50:4c:c6:c4:fd:6c:d7:dc:18:d2:80:ab:f8:86:e3:
d9:a9:bc:5d:c9:e8:fe:17:3d:d9:a6:e9:e4:b6:45:05:57:d7:
e8:47:3d:29:a1:61:7f:c8:51:0d:36:ba:68:7f:3b:dc:95:6b:
97:a6:d7:92:84:82:07:9b:5c:d4:72:87:ef:da:75:72:3a:ce:
22:07:e3:ee:88:a1:16:43:f2:ec:e6:54:01:a6:80:8c:f2:83:
86:ab:e3:4f:a0:6d:9b:a2:88:79:9f:45:b0:1b:c0:71:5e:de:
85:e2:6f:53:c7:a5:db:bf:20:a2:50:8d:02:6b:ad:bf:98:26:
8e:7f:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:42:54 2025 by rpki-client