Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/iItCjBu7NqQrWbQleZcs2InABtI.roa
File: iItCjBu7NqQrWbQleZcs2InABtI.roa (raw, json)
Hash identifier: cxiVo1wViQ58OFWvWqbHd9qDUKA+J+hZBuev/y366W0=
Subject key identifier: 88:8B:42:8C:1B:BB:36:A4:2B:59:B4:25:79:97:2C:D8:89:C0:06:D2
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019423D6FD7160BF1EF780A0310471950274
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/iItCjBu7NqQrWbQleZcs2InABtI.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 2.58.76.0/22 maxlen: 32
45.67.4.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
46.254.105.0/24 maxlen: 32
80.73.243.0/24 maxlen: 32
87.236.144.0/24 maxlen: 32
92.119.168.0/22 maxlen: 32
93.157.108.0/24 maxlen: 32
103.110.160.0/22 maxlen: 32
103.113.29.0/24 maxlen: 24
103.195.144.0/22 maxlen: 32
103.219.212.0/23 maxlen: 32
137.59.4.0/22 maxlen: 32
146.255.187.0/24 maxlen: 32
178.212.226.0/24 maxlen: 32
185.72.240.0/22 maxlen: 32
213.173.60.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fd:71:60:bf:1e:f7:80:a0:31:04:71:95:02:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=888b428c1bbb36a42b59b42579972cd889c006d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:10:db:8d:01:69:8b:67:4e:86:03:65:0f:
9d:15:17:2b:4d:da:27:f4:86:fa:5d:20:13:69:6e:
22:7f:cb:c7:d4:5b:5d:cd:66:42:93:77:e3:46:d9:
8b:95:1b:09:76:0c:05:eb:a5:80:83:33:c7:31:de:
e1:0c:8b:76:f9:92:28:47:08:a3:81:d9:46:58:e2:
2c:97:de:40:dd:24:a8:93:56:40:ae:4b:64:9a:5d:
36:35:69:b9:44:86:6a:a2:75:ad:19:09:96:31:91:
74:8e:42:6c:29:f2:9e:b9:40:30:c6:1d:49:81:62:
f4:17:4b:3b:7f:8b:c0:f4:ed:b4:6f:7d:fc:70:c0:
5b:c1:37:d1:6f:75:ad:c9:02:e3:08:50:92:7d:6a:
17:6a:5f:3a:8d:8d:b4:5e:0d:cc:dd:1a:71:b9:39:
8f:3e:e5:be:05:c4:f9:20:2f:ae:ba:b8:bc:4b:25:
81:7a:21:bf:13:19:c4:03:c2:94:0a:5b:f3:20:69:
df:2b:5f:44:6f:8f:ed:55:67:5b:c1:93:4a:b2:a7:
eb:89:d0:d8:6d:e7:48:03:4f:6a:6c:e4:e9:46:43:
2c:df:42:42:cf:ef:9e:f6:07:e7:77:3f:ef:83:70:
35:69:3d:de:c8:71:8b:8f:6b:6c:c3:46:87:ab:ff:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:42:8C:1B:BB:36:A4:2B:59:B4:25:79:97:2C:D8:89:C0:06:D2
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/iItCjBu7NqQrWbQleZcs2InABtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.76.0/22
45.67.4.0/22
46.16.32.0/24
46.254.105.0/24
80.73.243.0/24
87.236.144.0/24
92.119.168.0/22
93.157.108.0/24
103.110.160.0/22
103.113.29.0/24
103.195.144.0/22
103.219.212.0/23
137.59.4.0/22
146.255.187.0/24
178.212.226.0/24
185.72.240.0/22
213.173.60.0/22
Signature Algorithm: sha256WithRSAEncryption
be:4b:21:d2:71:bc:5f:91:ed:c6:57:c6:e1:95:10:15:47:35:
9b:32:84:13:49:00:2d:99:43:02:2c:d5:66:d2:9a:e0:88:79:
93:90:8f:df:09:d9:3a:21:37:90:ce:14:93:c5:4d:13:a4:b8:
0d:e9:fd:0c:2d:38:b6:f1:15:56:10:bb:40:56:87:2d:26:3e:
35:69:c8:da:36:40:04:40:5e:a7:51:24:95:f0:a2:9e:4d:e1:
1a:65:57:14:c1:dd:27:81:8d:11:7a:94:88:32:d8:56:54:0e:
f5:5e:8b:a1:40:69:ae:f8:42:12:08:80:02:73:8d:39:ac:83:
69:df:09:fe:ef:6e:52:c4:a6:eb:33:68:8e:14:c8:4e:2f:95:
e4:e4:40:07:bf:97:5a:bb:e2:c8:95:16:bd:27:b6:9b:ee:08:
5d:4d:76:e9:b9:b9:1f:92:4b:4a:a3:57:ff:6d:a0:89:e9:e0:
6c:71:16:c5:09:f4:50:1b:15:a0:85:01:a7:6a:04:c7:15:71:
cb:6a:5f:e0:39:4c:01:dc:7b:2e:2e:a7:64:f4:33:2f:39:fa:
78:aa:02:54:cd:e7:5c:84:13:45:12:9d:54:a8:36:df:4e:09:
73:7a:0a:52:70:88:71:7d:79:fc:fa:2c:04:97:b7:98:a0:4e:
99:82:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:57:48 2025 by rpki-client