Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xn0xEPQIeJrK5qakEKEDKuIwpiU.roa
File: xn0xEPQIeJrK5qakEKEDKuIwpiU.roa (raw, json)
Hash identifier: BryI59Au1aSFpTyIA/xVrSPh+cb8pVsyU7TDEVUBNm4=
Subject key identifier: C6:7D:31:10:F4:08:78:9A:CA:E6:A6:A4:10:A1:03:2A:E2:30:A6:25
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194CBF6F46271267B7ED3CB8DCEB8C73AD9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xn0xEPQIeJrK5qakEKEDKuIwpiU.roa
Signing time: Mon 03 Feb 2025 13:19:06 +0000
ROA not before: Mon 03 Feb 2025 13:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213514
IP address blocks: 45.84.90.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
94.156.6.0/24 maxlen: 24
185.226.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:f6:f4:62:71:26:7b:7e:d3:cb:8d:ce:b8:c7:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 3 13:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c67d3110f408789acae6a6a410a1032ae230a625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:48:1a:38:52:08:40:ad:6a:f3:d1:7d:a1:
2a:9c:df:67:95:6f:29:cc:c1:c1:c9:b6:3d:2e:f9:
ef:2b:e8:42:ec:b9:1c:2d:cf:c9:e7:ae:a7:c5:50:
b1:e4:29:08:09:c8:5a:e5:07:83:b3:3f:42:f5:7c:
07:ca:71:7d:51:ec:86:8b:a0:4a:79:87:4e:f9:f6:
73:79:7e:85:11:e8:d0:a5:57:2c:aa:32:eb:ba:e9:
96:3f:81:c3:fd:04:33:95:64:64:25:38:53:d2:be:
c3:54:5d:27:c8:a8:d0:30:03:b6:85:a8:ea:0b:1c:
02:3a:08:6f:06:f2:e2:97:60:12:ce:7b:76:04:ff:
0d:10:f7:7d:f3:c7:04:f3:35:65:7e:5b:46:b9:8f:
59:c8:dc:f7:98:61:25:96:57:c1:6e:9c:2f:d7:2f:
a6:77:4c:3c:bd:00:ac:90:60:b7:10:df:81:cc:a1:
25:f2:dd:e6:2a:a2:d7:b4:f5:a5:fa:30:1d:77:d1:
1a:ce:7e:e6:6b:ec:f9:10:15:ae:4a:c4:1d:f1:0c:
18:00:ec:f5:7c:49:fb:2c:d1:e2:86:5c:c1:eb:31:
7f:3c:a0:fc:11:ce:60:e1:93:70:51:d6:40:fc:00:
1e:53:42:88:a7:af:7a:d1:b5:6b:ee:01:ac:05:bc:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7D:31:10:F4:08:78:9A:CA:E6:A6:A4:10:A1:03:2A:E2:30:A6:25
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/xn0xEPQIeJrK5qakEKEDKuIwpiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
93.123.80.0/24
94.156.6.0/24
185.226.174.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1e:53:4d:eb:a8:e5:4d:95:70:ea:48:b1:d4:d4:03:35:0b:
70:2e:bb:73:40:72:dd:b0:d7:6b:98:43:36:dc:ea:cd:70:f4:
ca:5f:b9:27:6e:d1:65:32:12:18:0d:5a:e3:17:88:46:5b:84:
75:0c:99:fe:79:a3:d6:21:82:14:ea:09:24:93:79:f3:42:a4:
54:39:5a:50:30:7b:c0:f7:27:18:06:63:1c:4e:91:a9:03:de:
d9:a5:b9:fd:91:d3:74:e0:86:3b:c5:16:af:dd:f7:aa:7f:97:
55:43:61:66:f5:61:58:44:16:1b:fe:37:aa:e4:8a:18:e7:fa:
6f:9d:73:14:9c:fd:fb:cf:73:4f:ea:44:b0:5a:93:f3:2d:ac:
6f:c5:c5:2d:a6:f6:38:28:b2:f4:f8:a8:e9:62:48:1e:0b:f7:
9e:2a:8b:47:f3:a8:fb:b5:1d:b0:37:25:30:d6:e4:65:2d:d6:
1e:82:f4:e9:af:89:cc:ed:01:fa:da:f0:33:85:bb:9f:26:d6:
d9:a2:bb:55:b7:bb:bf:c7:62:8a:d8:da:d2:e2:94:2a:d0:f2:
1c:01:3f:f8:45:d0:6b:19:f7:74:58:39:f2:f6:72:74:ba:ab:
df:79:36:ac:bc:e9:e4:b1:01:db:96:88:7d:d0:9b:57:66:e4:
a6:ad:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:25 2025 by rpki-client