Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Nt22rSrrFL3xRse1xGIgryiVrWE.roa
File: Nt22rSrrFL3xRse1xGIgryiVrWE.roa (raw, json)
Hash identifier: DMw+eR0zfT8j4+CKYO79SZWxfmZ2JVWpjjV2e9bpJRI=
Subject key identifier: 36:DD:B6:AD:2A:EB:14:BD:F1:46:C7:B5:C4:62:20:AF:28:95:AD:61
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01974E8FD35DB285B11A452295CE886E5C04
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Nt22rSrrFL3xRse1xGIgryiVrWE.roa
Signing time: Sun 08 Jun 2025 08:02:17 +0000
ROA not before: Sun 08 Jun 2025 08:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.202.207.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.236.24.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.239.142.0/24 maxlen: 24
185.250.181.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
194.48.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8f:d3:5d:b2:85:b1:1a:45:22:95:ce:88:6e:5c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 8 08:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36ddb6ad2aeb14bdf146c7b5c46220af2895ad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:53:1d:b4:5b:92:5d:42:34:89:0e:a7:8d:
2c:4e:d9:54:ab:3b:bc:03:22:b8:02:69:3c:f0:1c:
f7:f2:1a:ad:f2:76:4f:50:20:ff:fb:0b:f3:65:41:
29:cb:10:ab:a2:3d:a7:d3:d7:b7:7d:63:74:f9:89:
09:31:d1:c3:b5:ee:62:0f:98:ad:ac:53:98:ff:b5:
ae:a0:5c:ca:bc:6e:59:af:bb:91:68:36:2a:7b:00:
83:ac:b5:1e:0e:e3:37:90:6e:4b:0d:32:34:be:96:
f6:61:ff:0e:87:e0:6d:c4:33:70:93:dd:aa:37:e9:
f8:30:ef:c9:61:a2:2e:49:6c:68:17:56:70:82:51:
7a:9a:52:4d:7d:c5:f5:b5:77:92:d2:00:02:19:85:
48:e2:fc:1b:c8:f5:ce:80:aa:5c:7c:81:ac:c0:53:
e1:a9:e3:52:9d:30:97:be:69:70:d5:15:b8:0c:a4:
e5:7b:c4:12:d7:b9:ba:91:24:d8:29:a3:04:4d:9b:
f6:fc:bd:61:44:1a:67:73:88:f5:12:b3:f2:64:a1:
2e:4c:de:e3:e1:2f:dd:91:4e:e3:d8:14:ae:08:6c:
69:32:ed:7e:77:55:5d:8f:63:a8:99:c9:91:4e:fc:
97:68:3c:62:65:9e:ef:c8:82:75:93:81:7d:01:33:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DD:B6:AD:2A:EB:14:BD:F1:46:C7:B5:C4:62:20:AF:28:95:AD:61
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Nt22rSrrFL3xRse1xGIgryiVrWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.13.0-185.121.14.255
185.202.207.0/24
185.232.204.0/24
185.236.24.0/24
185.239.141.0-185.239.142.255
185.250.181.0/24
185.254.158.0/24
194.48.140.0/23
Signature Algorithm: sha256WithRSAEncryption
91:a1:8a:d0:8f:90:73:1b:c5:53:52:98:b9:12:89:64:60:88:
63:b9:a5:99:d2:aa:81:9a:19:5b:5f:6e:0c:c8:49:a8:19:41:
a4:04:0e:ab:52:62:3d:d8:f0:78:ec:73:dd:89:46:a0:64:f5:
41:fc:b4:2b:77:4a:02:45:81:29:10:e2:76:d1:60:aa:ca:90:
59:0a:1f:52:58:1a:ef:ef:34:66:e1:c7:a8:c1:13:94:99:41:
49:20:b6:63:48:72:36:a0:f1:3c:4c:de:0f:69:58:da:b2:b2:
ef:9f:66:50:62:c6:b8:a7:ac:10:8f:91:76:cb:13:05:e7:3b:
6c:ba:11:c1:9f:0a:0b:f3:e8:11:4f:81:9d:ce:28:8e:88:9a:
8c:4d:1e:24:f5:7b:9e:85:3e:d7:49:90:1c:a1:1d:e0:a5:4e:
14:88:e2:c2:8c:03:00:d6:77:56:f1:fa:99:6e:b5:f3:28:62:
5e:ba:a9:f8:14:7e:51:21:57:00:42:d4:9b:99:49:db:ea:65:
c4:1e:41:ff:e3:bf:ef:d8:84:82:7b:54:2b:29:59:ee:4a:96:
81:b6:1f:8e:db:d6:7e:97:d8:cd:53:2d:07:5c:3a:ec:72:be:
ea:7b:fa:bc:57:ee:b2:09:b8:04:39:8f:e7:8d:bb:7d:b7:a0:
3c:06:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:17:03 2025 by rpki-client