Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/95gcbx3OiKpywnIqGRHqdWdi9uU.roa
File: 95gcbx3OiKpywnIqGRHqdWdi9uU.roa (raw, json)
Hash identifier: lww53n9/68KVFWNwvUTAXefm+kgN2CbkWMXT2MvRGmI=
Subject key identifier: F7:98:1C:6F:1D:CE:88:AA:72:C2:72:2A:19:11:EA:75:67:62:F6:E5
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683CBE72B02051BEAC757C53C9D2D8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/95gcbx3OiKpywnIqGRHqdWdi9uU.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39238
IP address blocks: 147.45.52.0/22 maxlen: 22
147.45.56.0/22 maxlen: 22
147.45.80.0/22 maxlen: 22
193.233.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3c:be:72:b0:20:51:be:ac:75:7c:53:c9:d2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7981c6f1dce88aa72c2722a1911ea756762f6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:59:4e:a4:55:61:e2:62:89:e4:de:ae:1e:
f5:2f:78:c4:d8:80:57:f2:eb:d3:ea:ed:78:2d:5e:
2f:d0:fb:15:94:70:97:69:52:05:da:78:11:ac:0e:
18:a2:9c:5f:35:7d:a5:48:ad:df:1a:1f:02:7e:b3:
d4:62:e4:61:b3:2c:f5:07:b0:74:8a:a8:8b:e4:63:
65:4b:7d:f8:ac:e6:b0:48:ae:19:6e:8c:3f:83:b4:
9e:0e:c2:c4:a4:55:a3:1e:ff:6c:b9:3c:14:48:0e:
05:15:3a:ce:6a:83:b1:f4:4d:86:d3:30:bb:9e:03:
6d:52:84:47:52:26:6e:47:f4:2f:b1:71:99:cf:40:
5c:95:02:6b:8e:18:9a:af:a3:6e:97:7e:5d:31:d1:
2e:2b:90:2b:04:16:35:28:93:02:1a:4b:03:2b:23:
0c:3e:0a:75:19:ee:ca:64:22:aa:03:4b:fc:36:fb:
9c:b8:79:97:8f:72:f3:ef:56:41:31:af:ad:e6:96:
6b:30:3a:30:4d:07:e8:06:c3:50:09:5e:56:0a:e4:
71:55:ed:92:2d:ad:46:eb:2c:80:f4:27:65:d9:6e:
b3:13:8c:10:ff:bd:04:d9:76:4b:24:24:d5:1c:21:
02:1e:9c:a8:fa:9c:e2:74:90:c8:87:53:6c:2d:0e:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:98:1C:6F:1D:CE:88:AA:72:C2:72:2A:19:11:EA:75:67:62:F6:E5
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/95gcbx3OiKpywnIqGRHqdWdi9uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.52.0-147.45.59.255
147.45.80.0/22
193.233.238.0/24
Signature Algorithm: sha256WithRSAEncryption
88:55:cb:a0:86:63:f0:a9:e4:56:65:e5:c8:ba:f8:aa:57:a1:
66:a0:81:d6:1a:99:a4:47:ab:78:98:33:2e:a0:00:14:06:5b:
38:20:f0:e1:fc:77:17:95:6d:05:66:b1:ee:a4:c9:0b:4a:3a:
c5:e4:ff:ef:c3:dc:11:56:a6:33:08:2d:20:d9:3d:99:52:a8:
42:df:8a:12:5e:85:e4:97:1b:d0:da:52:fd:5f:ae:27:c8:5b:
83:9c:3c:fb:b2:ab:41:64:f4:e8:54:eb:a3:31:6e:32:4f:65:
d0:c3:1c:2e:35:3b:28:6f:ba:5c:f4:b6:b4:89:f6:f4:e4:54:
50:9d:8d:80:46:b2:34:0a:d5:ea:4d:c9:b8:36:bf:13:56:22:
4d:8c:fa:cf:57:d4:de:e8:25:99:f9:c5:3d:cd:1f:f7:5b:c6:
9a:09:93:32:ae:ad:0d:cb:05:bf:a9:fb:f6:92:99:68:eb:5a:
ab:5f:b5:bc:37:fb:a5:ef:c8:ce:19:aa:7d:62:65:a9:03:88:
fb:ab:b7:27:16:8d:89:b5:19:dd:0c:11:cd:4e:f3:b4:61:52:
2c:9c:00:4f:23:21:a8:fd:b2:39:2b:cd:36:94:8f:d2:9f:c0:
95:91:12:4c:c3:a6:69:9c:f7:6b:20:0f:f2:06:71:cb:b1:6a:
4f:ab:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:03:50 2025 by rpki-client