Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/c2FK1WyScmzcf_ImEz3OQQeNsZY.roa
File: c2FK1WyScmzcf_ImEz3OQQeNsZY.roa (raw, json)
Hash identifier: 462U0RrH9lB0jEZaDdo72wKH2Y23PJgjhCu4pfFF1JU=
Subject key identifier: 73:61:4A:D5:6C:92:72:6C:DC:7F:F2:26:13:3D:CE:41:07:8D:B1:96
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01963361DAA66103E41A29C494124A9FAACD
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/c2FK1WyScmzcf_ImEz3OQQeNsZY.roa
Signing time: Mon 14 Apr 2025 08:19:33 +0000
ROA not before: Mon 14 Apr 2025 08:19:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209945
IP address blocks: 5.182.28.0/22 maxlen: 22
91.201.107.0/24 maxlen: 24
92.118.108.0/24 maxlen: 24
185.255.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:61:da:a6:61:03:e4:1a:29:c4:94:12:4a:9f:aa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 14 08:19:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73614ad56c92726cdc7ff226133dce41078db196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:bb:0c:0b:9e:06:a5:c5:7c:4d:32:c5:dd:
47:a7:55:a2:28:24:bf:61:5f:bf:df:51:da:57:87:
dd:7f:59:8b:61:4b:c9:1c:9c:a5:15:fe:69:3e:c1:
8d:f5:f5:58:ab:73:65:ad:ca:b1:ce:44:2b:46:d7:
7f:0b:48:0a:72:b2:fd:7e:af:5d:99:c9:37:6f:c8:
fd:d9:9c:2f:d3:80:64:52:4c:31:03:d9:77:4d:75:
c9:ad:5c:9b:cf:ae:3e:86:7c:80:cd:12:b3:28:40:
33:c2:4a:31:b5:06:32:05:74:92:61:05:a8:16:7f:
2a:4a:77:e1:97:44:6a:79:95:b0:8c:4c:08:9c:a1:
55:64:90:6d:64:4d:ad:3e:e7:a2:bd:db:5c:58:68:
07:6a:d2:f0:0e:1a:76:93:f7:e1:ba:a8:ce:c1:e4:
29:f6:b3:f7:c4:53:42:f0:da:38:77:28:45:49:e1:
ed:e5:55:dc:ab:4a:9f:0b:00:d9:39:2b:f6:a4:83:
4d:43:63:9f:b8:7b:58:35:6d:34:57:1d:bf:f2:96:
73:c4:9c:d2:84:8e:07:23:5e:2c:ac:92:b5:3a:ce:
44:80:4a:c2:61:f1:e7:5c:06:38:03:e2:69:e9:1b:
90:50:f9:82:41:49:9b:c0:3c:1c:27:c9:6c:a5:a5:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:4A:D5:6C:92:72:6C:DC:7F:F2:26:13:3D:CE:41:07:8D:B1:96
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/c2FK1WyScmzcf_ImEz3OQQeNsZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
91.201.107.0/24
92.118.108.0/24
185.255.98.0/23
Signature Algorithm: sha256WithRSAEncryption
37:64:81:d3:4a:b7:14:c6:5e:33:45:12:2e:e6:c2:e5:1a:19:
e2:d1:7b:c2:57:b8:74:60:53:f4:ec:f6:32:aa:4e:d6:03:3b:
ff:eb:b0:ea:7f:96:88:b3:55:e2:ab:e4:9a:8c:44:6f:bc:88:
33:56:0f:d4:63:2f:7e:47:81:43:2c:f5:dd:08:15:78:ab:00:
40:9b:e3:74:f2:a5:7a:64:7f:5b:82:f5:86:84:94:41:a0:0c:
62:71:10:00:aa:91:3a:7b:90:36:9a:d2:7f:42:9e:f6:c5:bf:
43:cd:1f:75:2d:a8:8a:91:d9:8a:58:08:1f:6e:fb:06:aa:16:
34:ab:73:37:2c:72:dc:e2:33:a9:bb:b0:67:db:b9:e7:0a:c0:
bf:7c:31:0e:1a:a0:8e:5c:4d:72:70:93:bd:63:68:50:55:05:
39:08:dc:de:8a:5c:11:dc:00:fa:ca:d4:6a:68:5c:bb:20:74:
20:8f:5d:14:b1:3a:9f:d2:cf:c5:8b:20:81:64:c0:a2:da:fa:
1b:85:54:bb:37:b9:0b:20:a9:47:17:c0:f0:9d:d1:b7:89:bd:
9a:b8:fc:8e:a1:60:7b:09:3a:33:2e:3a:5b:20:2b:7d:0b:78:
38:ab:21:49:11:bd:a4:b2:66:87:57:f5:0d:c5:d6:d1:53:cd:
f3:3f:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:07 2025 by rpki-client