Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dPCDubnqPhEgnSPtjUBejW0QpNs.roa
File: dPCDubnqPhEgnSPtjUBejW0QpNs.roa (raw, json)
Hash identifier: m4alqyAk4GI7x4829ECl8H4u9CVrg85QTCAw393oXfw=
Subject key identifier: 74:F0:83:B9:B9:EA:3E:11:20:9D:23:ED:8D:40:5E:8D:6D:10:A4:DB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195AF6B29737709BBAC57385909DDF8E94B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dPCDubnqPhEgnSPtjUBejW0QpNs.roa
Signing time: Wed 19 Mar 2025 17:19:50 +0000
ROA not before: Wed 19 Mar 2025 17:19:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208287
IP address blocks: 82.115.211.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:6b:29:73:77:09:bb:ac:57:38:59:09:dd:f8:e9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 19 17:19:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74f083b9b9ea3e11209d23ed8d405e8d6d10a4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:4e:0c:39:99:4f:44:8d:08:02:60:0d:0e:
e7:20:bd:ea:d8:a5:b6:d7:51:39:03:b7:09:f7:41:
7b:ef:1a:45:50:23:52:1f:9c:a2:77:f1:55:50:96:
97:bc:e9:7a:af:b5:b5:ba:4f:68:e2:b6:a0:e5:dd:
bc:ba:e4:63:f7:e9:74:70:ee:92:8d:ea:58:20:cb:
f8:af:62:f4:64:c8:78:61:e8:21:2a:db:ba:56:29:
8a:6f:28:13:fa:81:18:bd:11:8a:c9:36:78:a5:f4:
4f:c9:40:9a:28:a8:15:04:ca:6b:29:c2:3c:94:e4:
b6:52:ae:b4:4b:18:75:6f:de:20:f9:02:ea:5d:14:
c1:8b:c3:59:c4:3a:37:e7:c0:0e:2a:0f:76:f3:3d:
3c:80:80:12:1e:0c:44:f4:44:97:40:0a:77:23:97:
b3:f4:d6:11:c2:67:77:c5:46:97:0e:70:b3:a8:e3:
3a:b3:a6:62:70:b2:7b:c0:03:3c:fb:e4:ac:64:54:
38:c2:b1:b4:34:68:23:98:2c:81:b5:36:13:56:80:
b3:f4:e7:8b:54:af:3d:7c:64:26:82:84:0a:46:d9:
d0:61:77:d7:0a:08:8d:45:b4:f7:ce:43:37:4c:ba:
69:d4:67:e3:dc:6d:37:dc:0b:e5:7b:5a:cd:57:1b:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F0:83:B9:B9:EA:3E:11:20:9D:23:ED:8D:40:5E:8D:6D:10:A4:DB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dPCDubnqPhEgnSPtjUBejW0QpNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.211.0/24
185.222.160.0/24
185.222.162.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:43:d7:f1:c0:48:d3:b1:f3:45:97:61:f3:8c:75:b9:8e:4b:
b1:d1:a1:d1:d1:6c:42:a9:f7:fe:b3:11:f2:c7:26:54:69:41:
48:2f:6e:46:25:0a:ce:cb:74:e7:5e:3a:ab:c0:ad:18:e6:c8:
f5:2f:09:a0:e6:13:aa:86:01:6b:71:92:5f:06:9b:f3:27:b5:
a1:ac:1d:85:45:eb:56:59:df:29:74:90:ca:0c:d5:66:6c:46:
e9:4a:b8:b1:7a:a7:60:7f:73:24:44:05:54:42:b2:57:b4:e9:
d4:7c:73:67:89:06:09:0f:e6:de:cb:a2:ea:7e:6d:81:96:c6:
24:61:8a:89:1b:91:42:07:a6:7a:d1:cb:a1:1b:f1:d3:74:ff:
ff:a3:bf:ec:ba:e2:c8:aa:4b:3c:b6:7a:b3:ce:f6:56:8c:f3:
f8:8a:45:81:0a:99:59:ad:c0:0b:ed:69:46:d9:6c:26:d8:63:
86:ab:65:1e:c8:32:7a:53:3e:50:72:4c:31:35:a3:3e:c9:8d:
c7:96:7e:84:6a:a9:ff:31:56:4a:d5:27:44:52:ce:f3:5d:53:
35:8c:29:67:f5:d3:61:9b:d3:db:be:b8:48:25:cc:cf:b0:07:
4a:b4:2d:aa:4a:e5:62:aa:ca:cc:da:f8:ad:90:db:f4:c5:46:
8f:6d:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:40 2025 by rpki-client