Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/iZ5p5MN0N4aCqnIjU0jjwKvIZns.roa
File: iZ5p5MN0N4aCqnIjU0jjwKvIZns.roa (raw, json)
Hash identifier: DtCRo0LBdqkJmTlhbB6eN/7hU3EdBp5G+2hoRmL97Vc=
Subject key identifier: 89:9E:69:E4:C3:74:37:86:82:AA:72:23:53:48:E3:C0:AB:C8:66:7B
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 0194228D8939F20C49E00618315C59702845
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/iZ5p5MN0N4aCqnIjU0jjwKvIZns.roa
Signing time: Wed 01 Jan 2025 15:48:08 +0000
ROA not before: Wed 01 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56798
IP address blocks: 45.66.220.0/22 maxlen: 22
45.86.36.0/24 maxlen: 24
91.200.144.0/24 maxlen: 24
91.207.207.0/24 maxlen: 24
185.34.102.0/24 maxlen: 24
185.54.7.0/24 maxlen: 24
193.17.33.0/24 maxlen: 24
2a0f:9180::/29 maxlen: 29
2a0f:9180:1::/48 maxlen: 48
2a10:d440:1::/48 maxlen: 48
2a10:d440:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:89:39:f2:0c:49:e0:06:18:31:5c:59:70:28:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jan 1 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=899e69e4c374378682aa72235348e3c0abc8667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:d2:eb:82:ef:f4:b7:e8:b9:55:e7:8f:34:
23:d7:f4:11:fb:98:d4:8f:ab:37:dd:69:ed:3e:fa:
90:9d:b1:91:e5:a9:f1:fc:ae:30:ae:e3:2e:aa:4b:
ec:30:a3:da:b0:0f:50:cd:bf:7d:d0:14:20:97:27:
66:e1:d0:56:2e:53:43:c7:e0:75:ad:f3:e6:30:e4:
a0:a4:21:c3:4d:cb:10:e6:33:d0:41:60:3b:8e:84:
19:0c:15:ab:44:e8:e5:45:e8:d6:40:1d:2d:ea:d7:
4f:29:e4:94:e5:d3:8b:08:89:7a:e2:7a:cf:3b:ca:
3a:b5:c0:b2:34:ea:77:d8:8d:c5:37:55:6d:c1:7f:
bc:5a:d6:69:2b:cf:ea:15:68:c8:45:85:d1:57:23:
cf:de:42:d0:b3:db:00:54:d3:4c:a5:fd:41:bd:64:
ce:b6:8d:ac:2f:0e:f9:3d:a3:d3:be:06:ac:2c:78:
ce:f6:f4:55:9e:ba:80:52:c5:2a:26:65:02:ff:a7:
ac:b8:4d:5f:13:e6:60:02:38:72:f4:e1:52:3d:f9:
ae:3a:75:69:92:60:ed:30:72:91:86:71:d0:5c:31:
fc:78:fc:dd:e0:22:e0:31:fe:bb:37:3d:22:c4:de:
5f:0f:ca:44:52:23:74:e6:a8:60:b6:25:27:9e:06:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:69:E4:C3:74:37:86:82:AA:72:23:53:48:E3:C0:AB:C8:66:7B
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/iZ5p5MN0N4aCqnIjU0jjwKvIZns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.220.0/22
45.86.36.0/24
91.200.144.0/24
91.207.207.0/24
185.34.102.0/24
185.54.7.0/24
193.17.33.0/24
IPv6:
2a0f:9180::/29
2a10:d440:1::-2a10:d440:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:e6:76:d6:b4:f3:a4:97:a6:78:db:8b:60:39:42:15:13:73:
68:77:bc:2e:e7:a5:6e:d5:a2:16:64:c0:1a:a5:24:ec:b1:2a:
12:b8:e0:1a:6d:4e:1c:01:b1:42:74:81:ec:54:e5:a5:f8:62:
00:ba:cd:2a:1c:0e:bc:e2:ce:ba:f6:2f:c4:1d:03:42:a8:fd:
b9:72:db:80:59:41:06:c2:38:ab:66:a7:d4:91:85:53:76:40:
96:bc:b9:03:d6:f6:ef:cd:fe:73:25:4b:37:e4:39:c9:1b:f5:
1a:f5:d5:f7:ef:45:2c:fc:71:90:6f:93:41:e6:ee:44:05:07:
d9:90:3c:ad:c7:65:ca:1a:94:bb:54:62:cc:72:a8:27:ee:00:
94:a8:ef:eb:65:18:0b:c1:9a:50:d7:b3:e5:74:e1:3b:3b:7e:
68:4a:5d:4b:05:e6:0c:6f:22:ce:41:fa:e7:b2:29:d1:12:49:
80:01:0f:88:5f:08:11:96:5b:b6:71:14:1e:ca:18:72:85:77:
2e:56:b2:00:57:52:7d:b3:23:13:20:b1:e2:92:3b:d8:14:e8:
f0:e4:52:68:b9:6e:b8:ce:40:7c:2b:34:ec:f3:75:f1:e8:f0:
28:94:e2:cb:d1:75:d2:f8:8b:23:21:77:47:1c:c8:65:7d:03:
6f:75:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:58:16 2025 by rpki-client