Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa
File: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (raw, json)
Hash identifier: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=
Subject key identifier: B9:C4:0D:C0:3C:04:DA:F7:67:F1:A4:F9:35:E0:5F:71:A3:0F:E3:12
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 019421B253C8E4853B9CBC25A919DDFF0D38
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 85.158.128.0/21 maxlen: 21
85.158.128.0/24 maxlen: 24
85.158.129.0/24 maxlen: 24
85.158.130.0/24 maxlen: 24
85.158.131.0/24 maxlen: 24
85.158.132.0/24 maxlen: 24
85.158.133.0/24 maxlen: 24
85.158.134.0/24 maxlen: 24
85.158.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:53:c8:e4:85:3b:9c:bc:25:a9:19:dd:ff:0d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9c40dc03c04daf767f1a4f935e05f71a30fe312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:57:3e:98:f9:dd:33:b2:0c:89:2a:0f:7f:
28:29:c8:28:0b:90:b7:09:ba:9a:45:a7:99:37:46:
28:af:26:3f:15:97:32:27:ec:6f:65:2d:b0:7f:bf:
53:32:1a:76:8a:74:48:1d:86:17:b2:0a:83:f3:89:
f4:b3:b1:da:ba:bc:c2:b1:32:a7:64:2e:e7:e4:d0:
d3:5e:1a:fe:d4:e0:06:26:ce:ba:3e:9e:4f:c5:fa:
74:85:ad:e2:ea:84:11:ee:4e:d0:5e:3d:f5:04:0b:
f9:c7:9c:2e:28:f7:dd:b8:eb:03:f3:a7:17:14:05:
12:a3:32:01:df:19:36:61:85:17:35:03:c4:02:d0:
d1:58:a3:99:75:18:67:32:b7:3e:60:06:37:7c:9d:
7e:92:f4:5e:bf:d9:93:92:65:fd:5e:a5:8e:a4:aa:
3a:f5:4f:1c:d8:2b:6b:94:38:3e:f5:ea:bc:2f:82:
b8:7f:4e:2f:64:6c:ee:e3:c2:09:00:9a:e6:83:91:
3a:52:ef:ec:5d:a7:6d:e3:48:43:66:35:dc:60:c1:
73:87:1d:45:b5:6a:cc:d2:c6:e2:20:45:88:82:21:
61:1b:71:dd:1e:da:55:3e:43:b4:9e:e9:a8:79:ad:
ab:0f:bd:5f:26:65:34:38:2e:be:96:d3:ca:e3:dd:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:0D:C0:3C:04:DA:F7:67:F1:A4:F9:35:E0:5F:71:A3:0F:E3:12
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.128.0/21
Signature Algorithm: sha256WithRSAEncryption
86:1b:5f:62:46:2c:b7:18:61:7d:6e:a7:4e:53:d1:63:13:02:
0a:f0:60:b7:6b:46:7c:93:4e:ea:d6:37:1f:68:1a:9c:c1:3e:
6d:78:86:ca:36:8d:30:04:cd:fb:2a:9f:6b:52:cf:2b:7c:b2:
84:eb:f8:16:94:2f:92:d6:cb:c5:a4:ec:d6:75:db:94:a6:3b:
b8:d8:46:69:8a:ae:62:93:cd:70:ae:a4:eb:fe:5b:0f:19:e4:
a2:90:4d:81:51:8d:30:d9:4b:55:fc:ec:94:c4:fb:ad:df:24:
36:bb:78:ac:6e:3f:1b:d8:8a:07:50:5c:04:de:2d:cb:e8:73:
a9:14:23:9a:5e:e3:c4:83:bd:3a:d4:40:8f:21:b9:1d:8b:a5:
1a:54:20:d5:70:7a:28:14:f6:db:c4:0f:6f:ee:9b:a7:59:e4:
54:de:0b:1f:0f:d6:33:2c:a0:bd:cc:67:38:8a:3f:3c:9b:27:
7a:27:a2:34:e1:19:3d:ec:3a:06:07:c3:a6:94:7e:0c:01:64:
35:94:b6:57:be:3c:80:02:c0:d1:ba:99:44:26:11:ee:79:d2:
5a:8e:2a:ff:24:59:bc:9f:fc:7e:06:3e:2e:34:5c:e3:3a:dd:
09:06:71:48:38:6e:79:79:24:d7:85:dd:b4:88:8c:31:4d:54:
6d:1d:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:16:43 2025 by rpki-client