Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/S7t4ADi8YkG9eg6uqtMyBWESHWg.roa
File: S7t4ADi8YkG9eg6uqtMyBWESHWg.roa (raw, json)
Hash identifier: +5rpi63CqZGmWer4CfdRSdaUI1TBrV5YYVTKX63mbAw=
Subject key identifier: 4B:BB:78:00:38:BC:62:41:BD:7A:0E:AE:AA:D3:32:05:61:12:1D:68
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019421B2343545D36F775761660FDE914EF7
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/S7t4ADi8YkG9eg6uqtMyBWESHWg.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209905
IP address blocks: 45.65.72.0/22 maxlen: 22
45.65.72.0/23 maxlen: 23
45.65.72.0/24 maxlen: 24
45.65.73.0/24 maxlen: 24
45.65.74.0/23 maxlen: 23
45.65.74.0/24 maxlen: 24
45.65.75.0/24 maxlen: 24
185.191.72.0/22 maxlen: 22
185.191.72.0/23 maxlen: 23
185.191.72.0/24 maxlen: 24
185.191.73.0/24 maxlen: 24
185.191.74.0/23 maxlen: 23
185.191.74.0/24 maxlen: 24
185.191.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:35:45:d3:6f:77:57:61:66:0f:de:91:4e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bbb780038bc6241bd7a0eaeaad3320561121d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:e7:1d:ce:f1:c9:5a:ea:30:23:c3:61:a4:
04:fe:ca:7b:43:90:16:ef:29:11:45:1d:76:dd:84:
78:39:e1:11:eb:70:ac:01:68:78:ff:dc:1d:f6:bc:
25:3c:c3:26:a3:0e:be:84:7d:16:97:3e:58:9e:11:
f3:ea:fc:60:bc:dd:75:59:29:6d:09:50:ae:4d:e0:
bd:62:22:70:89:c8:6f:cd:9f:34:27:f4:59:32:ea:
05:81:4f:7d:88:99:46:17:75:77:22:b9:b0:26:46:
2d:a3:47:f7:3d:12:e5:c8:03:e6:b6:e9:a5:e3:fb:
a8:2d:3d:0c:71:da:f0:b3:92:a5:33:ad:b2:d2:11:
1b:39:7a:2b:88:2a:ca:c5:47:f7:81:7b:ca:77:5d:
97:16:c8:2b:d3:52:3d:4d:f0:ee:ea:d4:05:fd:1c:
7f:a7:a5:f1:48:c0:68:03:ee:42:78:cd:18:41:a9:
11:61:1f:89:64:73:09:88:8c:f7:16:1e:5c:5c:77:
21:d1:f1:78:56:a1:10:78:82:ce:72:9e:f1:8f:44:
27:dd:c4:7f:13:7f:f6:95:75:97:96:e4:13:9c:82:
66:fb:29:a9:2c:b8:8f:33:f4:76:e6:17:dd:10:a0:
d8:6e:0b:c0:1c:71:88:9d:c4:b2:e2:65:a3:de:b1:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BB:78:00:38:BC:62:41:BD:7A:0E:AE:AA:D3:32:05:61:12:1D:68
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/S7t4ADi8YkG9eg6uqtMyBWESHWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.72.0/22
185.191.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:3a:59:7f:3b:33:b4:27:88:b0:10:bd:7c:1b:38:1a:c6:7b:
b6:65:86:86:07:f2:84:85:9b:56:6f:1f:94:5c:38:91:8a:0d:
5c:2a:1b:80:00:d6:35:b5:dc:d5:f5:72:4d:f0:b3:b9:a1:f5:
87:2b:72:77:04:f4:46:b8:90:ad:a7:3a:6c:d0:05:16:bc:3d:
84:a9:94:df:de:86:b5:81:60:88:2e:99:1a:82:0b:e6:95:e3:
14:44:a0:b4:22:c9:fb:a8:dc:cd:e5:4d:dd:96:ae:f2:76:a3:
d9:7d:76:a8:88:ca:b4:df:a0:f3:10:fa:85:26:3c:d6:c4:dc:
89:68:0d:a1:c2:7e:bf:30:41:e3:6b:65:38:a0:c7:1d:bc:52:
ab:85:09:e9:55:19:f3:f4:dd:c0:64:eb:02:f3:2a:7b:9f:68:
b3:99:31:78:d9:fa:a7:09:90:89:7c:d1:53:e3:e0:b4:f6:09:
78:79:d9:ac:95:51:17:68:95:63:ca:36:1f:39:ec:40:35:aa:
db:8d:c1:f7:b5:c6:cf:fe:8d:d8:10:9c:a3:ab:16:98:04:9b:
65:da:ce:bf:22:60:94:b4:68:62:7b:04:99:36:b9:e0:8a:b0:
00:65:62:dc:85:8e:2c:4a:00:55:3c:79:13:fd:07:bd:f1:e2:
ce:bb:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:28:22 2025 by rpki-client