Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/RiNsdcvxD0PdXlr09eZFcKvk8jE.roa
File: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (raw, json)
Hash identifier: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=
Subject key identifier: 46:23:6C:75:CB:F1:0F:43:DD:5E:5A:F4:F5:E6:45:70:AB:E4:F2:31
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019421B1567C978C7377257ED135565790D3
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/RiNsdcvxD0PdXlr09eZFcKvk8jE.roa
Signing time: Wed 01 Jan 2025 11:47:37 +0000
ROA not before: Wed 01 Jan 2025 11:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 85.119.0.0/21 maxlen: 21
178.250.56.0/21 maxlen: 21
185.172.92.0/22 maxlen: 22
2a03:bd80::/32 maxlen: 48
2a03:bd81::/32 maxlen: 32
2a03:bd82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:56:7c:97:8c:73:77:25:7e:d1:35:56:57:90:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Jan 1 11:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46236c75cbf10f43dd5e5af4f5e64570abe4f231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:83:4b:f7:ef:b3:7f:5a:3d:eb:4e:b6:c4:8a:
a1:f7:fd:74:74:e4:d4:06:65:69:de:a6:8a:bc:11:
84:62:85:33:c2:eb:cc:c0:02:68:8b:ea:65:fe:ec:
10:f1:30:67:fb:aa:02:cf:fe:3b:fb:61:00:8e:aa:
f7:d2:63:5e:bf:6c:cd:bb:84:1c:cc:60:d2:8b:c3:
1b:de:81:94:12:db:20:ef:93:0e:ed:2c:41:f6:08:
70:ed:80:52:f4:33:44:6d:79:0d:3c:10:be:90:54:
91:bd:cc:41:70:43:76:af:48:4c:fa:6e:76:2d:93:
58:fd:44:af:16:75:54:c4:c9:35:4f:57:96:bc:c6:
e5:ce:4a:ac:69:8b:eb:15:b1:e1:c2:55:31:ae:f4:
54:d3:1c:2f:4c:06:64:1d:54:73:ff:20:69:a7:ad:
1c:3c:a7:ff:2d:85:7f:d1:59:e2:ef:01:a0:92:6c:
78:24:f4:5a:63:2d:c8:ae:04:d6:31:0d:a9:d9:3f:
57:96:63:28:ca:c3:b0:8a:70:ff:2c:d1:f9:6a:71:
46:04:18:02:0b:0d:cc:b7:51:f6:8b:ce:8b:08:73:
31:2b:58:18:ce:ae:a5:dd:71:fb:84:66:26:28:50:
ea:51:23:b0:10:93:66:39:9f:ba:12:c8:85:c4:1e:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:23:6C:75:CB:F1:0F:43:DD:5E:5A:F4:F5:E6:45:70:AB:E4:F2:31
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/RiNsdcvxD0PdXlr09eZFcKvk8jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.0.0/21
178.250.56.0/21
185.172.92.0/22
IPv6:
2a03:bd80::-2a03:bd82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:16:7d:df:77:a0:51:be:95:eb:16:d4:0b:b3:29:a6:56:35:
51:34:34:d3:97:66:21:df:1e:a7:66:3c:ca:4d:c1:5f:d1:3d:
57:25:94:e2:d2:85:92:e7:6a:e8:32:af:60:e0:ac:0c:66:c9:
80:b6:c4:60:bd:b9:92:9e:be:5e:a7:b7:e3:8b:f7:d2:b3:06:
f5:4b:e0:10:a9:9a:e5:22:77:67:4d:32:1e:f0:7e:80:35:92:
2a:22:cd:14:4c:20:5e:a1:e6:ab:63:61:af:9d:53:c7:30:80:
12:62:52:13:9e:ae:ad:0e:30:cc:dd:13:ea:f0:7c:3d:d1:f2:
77:a4:be:c8:9d:b4:55:ad:19:69:dc:a9:78:2e:0f:db:aa:0b:
86:92:e0:a9:1e:e7:a1:b3:22:90:c2:33:74:3e:be:f5:4d:fa:
25:d7:77:9a:48:67:48:6b:01:b9:36:73:e8:5c:f0:62:c0:d4:
ce:c3:bf:a2:5c:3b:78:b9:7f:cd:ab:69:fa:6e:3f:21:66:bb:
3d:28:75:62:af:a5:32:14:a9:88:63:21:ca:31:69:41:56:3d:
9b:30:81:9f:2f:f2:2d:3e:63:8b:d1:15:36:a1:db:2f:6c:fb:
b3:30:7a:c5:15:47:d0:3d:c0:d2:cb:a3:94:51:7e:dd:c7:ed:
33:30:f2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:16 2025 by rpki-client