Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/OJTbvvzGPXknTcn0a0PisGO6RMs.roa
File: OJTbvvzGPXknTcn0a0PisGO6RMs.roa (raw, json)
Hash identifier: uuBkvJW42/0DIxeQ/apWNWGffvOofFBXJM//FCrkhBE=
Subject key identifier: 38:94:DB:BE:FC:C6:3D:79:27:4D:C9:F4:6B:43:E2:B0:63:BA:44:CB
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 01954DFFBB5F6D47D6D3D825D52FAB8F470A
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/OJTbvvzGPXknTcn0a0PisGO6RMs.roa
Signing time: Fri 28 Feb 2025 19:19:19 +0000
ROA not before: Fri 28 Feb 2025 19:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47605
IP address blocks: 5.133.104.0/22 maxlen: 22
62.220.228.0/22 maxlen: 22
80.208.240.0/21 maxlen: 21
85.194.194.0/23 maxlen: 23
85.194.220.0/22 maxlen: 22
85.194.234.0/23 maxlen: 23
87.236.152.0/21 maxlen: 21
185.38.0.0/22 maxlen: 22
2a00:1d50::/32 maxlen: 32
2a00:1d50:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:ff:bb:5f:6d:47:d6:d3:d8:25:d5:2f:ab:8f:47:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: Feb 28 19:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3894dbbefcc63d79274dc9f46b43e2b063ba44cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:d1:60:9f:98:df:a3:4a:03:e1:28:01:50:
4a:bd:23:a6:32:94:0d:64:7e:f3:03:a0:d1:8f:af:
73:d7:6d:f8:ad:88:bd:1f:cb:cd:d7:d1:d1:cf:e1:
f8:ff:86:47:94:36:d3:8f:13:85:10:98:e5:e6:ed:
95:ab:1f:e1:0e:6b:c1:81:71:b0:65:b1:44:86:e2:
bd:68:3d:df:7c:18:3a:9e:ba:6b:ac:94:35:19:ad:
a3:2b:37:15:46:27:1a:86:37:3c:1b:99:2c:dc:52:
37:d1:54:26:1a:50:9a:6e:7b:a7:b5:4d:16:72:59:
8a:1a:94:55:02:3b:f5:cb:9e:5d:0a:23:1a:0f:4a:
6d:f4:48:9b:b6:b2:44:29:c8:0d:ef:aa:1b:2c:2b:
19:dc:c3:c4:d9:59:a0:6d:0f:70:7e:32:40:19:ad:
12:19:fb:d9:06:c2:0c:13:d0:f1:2d:8d:1d:7f:d2:
d3:62:db:53:46:11:fe:3b:59:af:66:76:98:5e:e1:
4f:e2:f0:ff:d8:72:bd:cc:88:4f:7d:9b:0d:40:43:
68:1b:03:d5:4b:f8:78:70:07:e1:ee:f1:79:df:86:
c9:ca:a0:55:56:7d:57:69:dc:4e:3a:9b:6e:e2:04:
fc:11:d3:ac:0c:d3:ee:bb:35:24:4d:09:8b:72:a9:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:DB:BE:FC:C6:3D:79:27:4D:C9:F4:6B:43:E2:B0:63:BA:44:CB
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/OJTbvvzGPXknTcn0a0PisGO6RMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.104.0/22
62.220.228.0/22
80.208.240.0/21
85.194.194.0/23
85.194.220.0/22
85.194.234.0/23
87.236.152.0/21
185.38.0.0/22
IPv6:
2a00:1d50::/32
Signature Algorithm: sha256WithRSAEncryption
5d:4f:32:f7:54:9a:a0:51:68:9c:07:11:33:c9:a1:d0:e1:61:
1c:6e:04:90:7d:53:a2:bc:d2:10:72:15:dd:e7:84:de:15:ae:
9d:fc:4e:f3:a5:b6:a7:c8:35:a9:ae:73:a6:c4:9b:be:5a:39:
0c:6f:47:3a:d0:23:a7:3e:54:7b:98:91:b7:13:d8:47:fb:3a:
ca:0e:5f:7e:72:40:02:9b:be:17:24:6a:78:07:2c:7e:01:7f:
5b:b5:21:54:4b:72:af:1f:d0:12:2e:b3:c2:eb:f8:67:ac:ed:
37:85:0d:4f:32:a4:ed:24:bf:73:bd:14:2e:af:81:41:25:3c:
96:4c:03:7e:47:27:13:46:bf:73:b0:02:7f:2a:c6:16:d7:40:
da:53:39:78:69:c1:b9:92:34:6f:5e:8a:1c:54:af:52:ca:fe:
bc:74:e2:5f:41:b7:74:c8:16:d0:d1:eb:30:48:11:e3:5d:47:
6c:c6:e4:8e:88:5b:4f:e6:9a:db:a5:6b:d3:1b:8e:ae:33:ed:
8f:d0:9c:bc:3e:c6:9f:0a:e2:bd:e4:00:3c:d5:7e:30:ac:03:
fd:bb:10:8e:82:1e:e9:78:81:88:9d:6f:99:64:ee:a9:39:09:
a0:7d:9d:56:84:68:49:7d:ac:e0:43:58:54:4e:24:ae:cb:6a:
ae:f2:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:34 2025 by rpki-client