Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N8OO6y7WJvF9c8vF5NIXjE_JRbo.roa
File: N8OO6y7WJvF9c8vF5NIXjE_JRbo.roa (raw, json)
Hash identifier: 6gJHxQOLgGsyYuy6BuAux4gZVyQdo746zMRtSHF6lxA=
Subject key identifier: 37:C3:8E:EB:2E:D6:26:F1:7D:73:CB:C5:E4:D2:17:8C:4F:C9:45:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282470FF3733929B6018BCF2A363BAE3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N8OO6y7WJvF9c8vF5NIXjE_JRbo.roa
Signing time: Thu 02 Jan 2025 17:51:04 +0000
ROA not before: Thu 02 Jan 2025 17:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34368
IP address blocks: 85.217.192.0/24 maxlen: 32
85.217.193.0/24 maxlen: 32
85.217.194.0/24 maxlen: 32
85.217.195.0/24 maxlen: 32
85.217.196.0/23 maxlen: 32
85.217.198.0/24 maxlen: 32
85.217.199.0/24 maxlen: 32
85.217.200.0/22 maxlen: 32
85.217.204.0/22 maxlen: 32
2a00:1728:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:70:ff:37:33:92:9b:60:18:bc:f2:a3:63:ba:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37c38eeb2ed626f17d73cbc5e4d2178c4fc945ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:60:b2:72:d1:52:f4:83:1b:94:e4:1a:52:
08:fa:f5:a8:45:bb:57:25:f6:a3:8c:94:04:ff:3d:
41:0f:60:14:f4:aa:b0:ae:2e:88:85:e6:d0:c1:72:
fa:c0:35:6f:b6:69:72:7c:56:92:80:6e:23:38:fc:
f9:7a:07:e3:16:79:f7:db:46:69:4e:08:4f:8f:54:
07:c1:04:b2:67:af:02:0f:1f:65:10:e8:f8:46:40:
be:4a:b1:11:bf:21:18:be:d1:62:dc:eb:15:c3:ca:
20:e5:64:4a:39:99:a4:32:1b:d2:3d:de:84:fe:7d:
33:71:b1:b1:9d:d4:94:7e:e0:18:0d:72:32:38:82:
f9:67:14:2d:38:cc:01:21:27:87:c1:1c:88:29:b8:
ce:60:7d:81:fb:77:94:f5:d7:ba:c3:33:f3:23:19:
5f:c0:75:f3:fb:12:3b:9f:61:96:fb:9f:82:8d:3f:
e7:12:a5:1f:08:6d:81:ca:9d:1d:27:b4:c3:d6:05:
9c:4c:16:83:ae:33:dd:7b:1a:ed:f0:46:11:45:c0:
00:eb:0d:77:3f:a4:5e:8f:f0:bc:59:91:26:ca:4a:
3f:f5:81:04:56:e6:fe:a0:2c:5c:9a:52:d5:84:43:
c1:9b:95:2f:d4:80:0e:6c:d0:95:fa:3b:3d:ee:f2:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:8E:EB:2E:D6:26:F1:7D:73:CB:C5:E4:D2:17:8C:4F:C9:45:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/N8OO6y7WJvF9c8vF5NIXjE_JRbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.192.0/20
IPv6:
2a00:1728:18::/48
Signature Algorithm: sha256WithRSAEncryption
63:a5:67:2e:aa:53:89:e9:5a:c0:a1:f2:70:53:5b:87:8b:c4:
cb:98:1d:0d:ff:86:1a:f9:85:61:78:5c:8f:82:cf:21:47:b7:
d7:c0:64:25:47:30:f7:65:85:fc:16:2d:3f:a0:8d:59:24:cc:
87:a7:8d:ff:f5:a6:2d:16:a6:62:a0:2c:5c:04:c3:7e:94:02:
73:10:7a:ab:52:00:6b:e3:be:91:85:1a:05:d3:1c:9b:6b:4b:
05:63:56:d2:a7:b1:e6:3a:71:8c:08:81:2e:b9:45:c1:a8:2e:
4f:25:c5:48:5b:6b:20:02:dc:42:88:12:1e:33:88:c1:43:56:
6f:f7:c9:42:22:f9:54:04:bd:69:20:28:5e:9d:df:fb:93:b9:
69:9b:e8:b6:55:b8:04:d4:44:0f:fb:33:b5:2a:e5:9f:44:9d:
58:57:3f:14:5f:d5:3e:85:61:d9:64:78:8f:95:c8:03:a9:db:
ef:81:d9:5c:f0:63:51:14:ba:84:12:ad:80:11:59:c2:84:54:
20:e3:bf:ba:ff:08:e6:50:45:c9:73:a5:de:93:f5:3e:be:33:
99:f2:af:ce:43:9a:1e:04:33:bf:22:5b:f1:43:e5:6e:e9:13:
31:62:c7:5e:cd:90:e0:09:d1:f7:e1:8c:58:7f:38:94:74:03:
91:91:94:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:37 2025 by rpki-client