Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/UvvVIoBvUG5_jxdhtW2WfQIxFDE.roa
File: UvvVIoBvUG5_jxdhtW2WfQIxFDE.roa (raw, json)
Hash identifier: wE8yIMDdETy+IhUlqCWoU56yeiWPmr5aS7jnynBmtsk=
Subject key identifier: 52:FB:D5:22:80:6F:50:6E:7F:8F:17:61:B5:6D:96:7D:02:31:14:31
Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial: 01942143D120487EF0706D183D6410615EBB
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/UvvVIoBvUG5_jxdhtW2WfQIxFDE.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47605
IP address blocks: 62.220.228.0/22 maxlen: 22
80.208.240.0/21 maxlen: 21
85.194.194.0/23 maxlen: 23
85.194.220.0/22 maxlen: 22
85.194.234.0/23 maxlen: 23
87.236.152.0/21 maxlen: 21
185.38.0.0/22 maxlen: 22
2a00:1d50::/32 maxlen: 32
2a00:1d50:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d1:20:48:7e:f0:70:6d:18:3d:64:10:61:5e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52fbd522806f506e7f8f1761b56d967d02311431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:a8:99:fc:23:4c:72:f4:c1:36:b3:92:44:
7e:55:b8:1e:51:8e:19:00:6e:9d:d0:7b:d6:2b:18:
46:b5:ec:b3:57:fc:0d:62:90:26:d1:eb:da:b8:41:
db:e4:72:f1:00:ae:0c:d9:63:52:ff:87:9b:20:ec:
d7:44:6f:2a:5c:d8:26:c5:64:07:92:3e:46:a0:a5:
1c:ab:72:16:0b:e1:a4:ff:fd:21:92:aa:f8:9a:01:
f9:ea:6d:8e:fc:77:94:f2:56:75:36:a2:53:75:a1:
5e:70:b0:46:58:d2:78:3e:ea:3e:97:be:f1:e3:28:
4f:50:6b:bb:49:87:66:14:15:36:ef:20:94:84:1f:
ca:15:97:82:3e:a7:89:24:a8:16:bb:73:31:1d:f4:
bc:20:e2:b7:87:26:92:76:cf:7e:1a:81:37:4c:38:
76:d7:2b:6a:f5:cf:a9:4b:d0:69:7e:a6:14:2f:ef:
1f:7a:02:87:e4:bc:e8:0a:b4:bc:40:d8:83:ea:03:
ac:1d:f2:83:4a:20:2b:80:09:82:f1:bf:bd:c8:84:
e9:4f:03:e9:d8:99:4b:bb:dc:1f:88:6a:99:d6:77:
22:ef:2b:53:6f:a8:78:b4:5c:14:74:6a:03:7c:bf:
1e:a4:06:9f:f4:90:35:20:72:6e:91:a0:35:df:fd:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FB:D5:22:80:6F:50:6E:7F:8F:17:61:B5:6D:96:7D:02:31:14:31
X509v3 Authority Key Identifier:
keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/UvvVIoBvUG5_jxdhtW2WfQIxFDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.228.0/22
80.208.240.0/21
85.194.194.0/23
85.194.220.0/22
85.194.234.0/23
87.236.152.0/21
185.38.0.0/22
IPv6:
2a00:1d50::/32
Signature Algorithm: sha256WithRSAEncryption
5f:7b:93:9b:de:09:b0:36:09:f0:5d:3a:ed:71:c4:77:29:1e:
30:44:06:96:ca:fd:ab:1b:81:00:2e:c8:26:de:f7:dc:3b:11:
0b:31:22:73:ed:81:59:e3:d6:1e:f0:4b:bf:37:36:41:a7:ab:
66:9b:51:25:51:ba:80:3a:96:2c:b9:b2:61:81:22:2d:86:ae:
08:fc:11:62:e4:66:29:d3:31:59:cc:8c:30:18:9f:d9:78:e0:
c4:5b:39:04:90:c1:47:ef:ae:d2:ef:87:de:e8:86:22:ee:8f:
76:24:72:97:60:92:af:6d:2b:d4:8f:a5:e2:af:9b:f1:e3:1e:
c4:10:68:e8:2c:15:5a:b2:ef:42:68:19:08:e8:ed:00:b2:5c:
66:36:66:d3:d3:21:2d:13:30:4e:fb:b1:7d:9b:bc:0f:d2:e3:
df:a3:8e:9a:5b:2f:b5:9f:8f:31:28:95:a7:72:af:88:c1:5d:
27:1a:39:e2:56:ec:b9:cf:8f:ac:63:f5:11:aa:65:21:3a:ad:
b5:ce:de:aa:e8:54:12:26:39:e5:13:3d:ee:e0:16:5c:ad:13:
e4:d0:e4:dc:f4:84:55:9f:1e:7b:bb:92:c3:ef:c1:43:c3:6e:
6d:68:0e:cd:ec:f5:05:fe:99:ff:17:7b:95:b1:68:fa:f8:42:
60:13:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:44 2025 by rpki-client