Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Rv9Mrasr-Tw9H61ivFpn4BoeMBo.roa
File: Rv9Mrasr-Tw9H61ivFpn4BoeMBo.roa (raw, json)
Hash identifier: HXhCV/cxrN7Z5Fu+evufi+hT67Ue5djTWLDsw/asiek=
Subject key identifier: 46:FF:4C:AD:AB:2B:F9:3C:3D:1F:AD:62:BC:5A:67:E0:1A:1E:30:1A
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0196AADB721AC89334E5ECC7D8C0CC3AAB3D
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Rv9Mrasr-Tw9H61ivFpn4BoeMBo.roa
Signing time: Wed 07 May 2025 13:07:10 +0000
ROA not before: Wed 07 May 2025 13:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202553
IP address blocks: 147.181.4.0/22 maxlen: 24
147.181.8.0/22 maxlen: 24
147.181.12.0/22 maxlen: 24
147.181.16.0/23 maxlen: 24
147.181.32.0/22 maxlen: 24
147.181.36.0/22 maxlen: 24
147.181.44.0/22 maxlen: 24
147.181.48.0/22 maxlen: 22
147.181.52.0/22 maxlen: 22
2a04:9a00:1001::/48 maxlen: 48
2a04:9a00:1002::/48 maxlen: 48
2a04:9a00:1003::/48 maxlen: 48
2a04:9a00:1005::/48 maxlen: 48
2a04:9a00:1006::/48 maxlen: 48
2a04:9a00:1007::/48 maxlen: 48
2a04:9a00:100e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:db:72:1a:c8:93:34:e5:ec:c7:d8:c0:cc:3a:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 7 13:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ff4cadab2bf93c3d1fad62bc5a67e01a1e301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:8b:d7:fd:cd:42:16:de:bf:9f:26:57:ec:
58:06:3c:a6:21:fb:60:1d:8e:01:a6:c4:1c:b1:08:
90:06:ec:ad:4d:7e:d0:ea:f9:ee:58:8c:a8:9c:41:
78:17:4c:4b:ec:93:07:c3:4d:20:d1:b0:f0:42:9e:
0b:a0:1e:5a:d2:c3:37:53:fc:74:d2:06:73:8e:be:
d7:1b:47:c7:6e:d2:75:79:77:ec:d0:af:94:9e:d3:
0c:d4:3c:74:72:70:74:cc:05:35:6a:09:99:75:3a:
84:ce:c0:be:4d:b8:d0:55:6a:0d:45:0f:b7:91:40:
54:fc:f2:4d:6d:15:ee:de:6e:06:79:3c:1d:4f:89:
2a:fd:f2:87:80:d5:fe:63:85:e7:cd:3a:25:82:1c:
c6:b9:cd:f7:17:17:9b:4b:b3:75:d9:53:cc:dc:64:
cc:97:50:43:73:0d:3a:71:9c:5f:02:df:2b:ab:a4:
58:b5:88:92:73:c6:cc:6f:58:20:ae:ca:e8:78:03:
3d:e3:ea:87:99:19:85:fc:8d:33:54:42:67:20:92:
39:e6:90:d1:1e:b3:77:95:3c:c0:5e:95:c5:07:45:
bb:fb:d7:ff:e3:86:a8:82:02:a4:03:19:fa:59:74:
46:bd:db:86:1b:6b:15:92:4a:da:16:95:e4:f8:74:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FF:4C:AD:AB:2B:F9:3C:3D:1F:AD:62:BC:5A:67:E0:1A:1E:30:1A
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Rv9Mrasr-Tw9H61ivFpn4BoeMBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.181.4.0-147.181.17.255
147.181.32.0/21
147.181.44.0-147.181.55.255
IPv6:
2a04:9a00:1001::-2a04:9a00:1003:ffff:ffff:ffff:ffff:ffff
2a04:9a00:1005::-2a04:9a00:1007:ffff:ffff:ffff:ffff:ffff
2a04:9a00:100e::/48
Signature Algorithm: sha256WithRSAEncryption
02:c4:32:86:2e:ae:0a:6d:12:5c:35:55:74:0d:09:a2:8b:74:
ef:3e:27:53:eb:67:b4:9f:10:1f:26:78:30:f5:86:e2:65:99:
76:c4:a9:85:db:f0:eb:a7:e2:7b:36:84:3b:32:b9:a5:39:b3:
b4:36:16:c3:50:d5:e1:2b:05:c6:1d:d6:37:4e:41:e8:bd:37:
bd:6b:83:5d:59:8f:0f:b6:d0:01:67:65:f3:b5:8e:bf:63:cf:
ff:ef:d6:4b:77:97:df:7b:39:0d:1a:3a:93:90:ec:95:f0:76:
02:59:23:e8:22:c7:5b:35:3a:d6:01:e8:d4:f2:c8:56:b9:1f:
ac:65:d9:71:9e:c8:96:c8:f4:6a:6d:50:f2:8a:d2:6a:1d:7f:
87:c3:42:4f:bc:85:6c:df:22:08:59:6a:f6:1e:f6:3f:c4:4b:
e2:7f:ff:b2:95:3b:e8:29:c2:2a:ec:33:b3:fc:32:f7:c9:d4:
33:24:a2:b4:92:e6:c5:25:af:8e:c8:2e:b7:90:f3:a0:32:45:
84:3f:cb:6d:d5:90:cd:cd:2b:82:36:b0:5e:58:e2:46:5e:a3:
e8:21:5c:63:96:5b:61:a1:e0:fb:fb:2d:cf:09:e2:75:b9:97:
7b:e2:af:39:08:76:96:7b:d1:f9:7d:df:b2:61:50:1c:49:69:
02:25:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:30 2025 by rpki-client