Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/3oQgBF8b0SlPmJhLRByZqFye4Kg.roa
File: 3oQgBF8b0SlPmJhLRByZqFye4Kg.roa (raw, json)
Hash identifier: kYRYhVl9nNIlfjRJmfhpqtBDhLtp2pSGg+NrF/eLIP0=
Subject key identifier: DE:84:20:04:5F:1B:D1:29:4F:98:98:4B:44:1C:99:A8:5C:9E:E0:A8
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 019423D6AE21B6A085945CF17F2F09A4A153
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/3oQgBF8b0SlPmJhLRByZqFye4Kg.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204996
IP address blocks: 45.67.8.0/22 maxlen: 22
45.67.8.0/24 maxlen: 24
45.67.9.0/24 maxlen: 24
185.170.248.0/22 maxlen: 24
185.170.248.0/23 maxlen: 23
185.170.248.0/24 maxlen: 24
185.170.249.0/24 maxlen: 24
185.170.250.0/23 maxlen: 23
185.170.250.0/24 maxlen: 24
185.170.251.0/24 maxlen: 24
193.30.134.0/24 maxlen: 24
193.30.162.0/24 maxlen: 24
193.30.165.0/24 maxlen: 24
193.30.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ae:21:b6:a0:85:94:5c:f1:7f:2f:09:a4:a1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de8420045f1bd1294f98984b441c99a85c9ee0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:13:82:67:6e:68:f3:bd:81:5d:f4:da:43:
6b:14:e4:c9:4e:1b:dd:4d:18:5c:da:26:a5:24:5d:
f8:3a:11:83:4c:a1:8b:c2:d4:82:0d:f6:da:50:cc:
80:ba:6d:21:28:21:5e:ca:3e:96:f6:15:b1:10:d4:
d3:95:64:bf:3f:b0:e0:3f:3b:87:d8:bf:ba:c8:b7:
a3:9e:d5:79:92:73:9a:60:8f:d6:dd:56:8a:8a:54:
3f:17:dc:52:a7:2e:e0:18:d8:5f:b3:31:3e:f5:03:
d4:14:b0:d9:49:d0:7b:b9:61:f2:67:f6:45:e9:f9:
4f:4b:d8:b1:0e:cc:dd:04:a4:b7:3e:db:c1:02:47:
d7:f8:e3:88:09:eb:08:ab:74:35:14:7d:88:48:41:
95:e3:0e:cc:ea:7a:5f:4f:8d:6c:d6:3c:5e:b8:b9:
cc:ba:21:c5:fc:d6:44:f8:4c:ab:ec:68:3b:65:a4:
be:3a:a1:b5:36:e3:c4:98:ea:da:2a:bb:d0:56:46:
f5:e2:94:26:21:b7:da:d3:d9:2a:be:77:6b:ba:ae:
44:63:c0:21:62:e8:07:05:9c:57:df:90:b3:bb:c1:
88:a2:03:ca:73:3f:b9:39:ce:c7:7d:4c:d8:31:a6:
d8:66:2b:8a:c1:a0:e0:cc:03:83:78:97:47:93:60:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:84:20:04:5F:1B:D1:29:4F:98:98:4B:44:1C:99:A8:5C:9E:E0:A8
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/3oQgBF8b0SlPmJhLRByZqFye4Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.8.0/22
185.170.248.0/22
193.30.134.0/24
193.30.162.0/24
193.30.165.0-193.30.166.255
Signature Algorithm: sha256WithRSAEncryption
a2:d0:e5:4d:f1:5a:0d:3f:33:97:26:05:ca:77:52:ba:35:cd:
18:a4:36:af:0f:3e:d5:0f:3b:40:54:7f:be:ed:c0:c3:c9:e9:
01:3d:79:d1:b3:a9:36:e1:5e:fd:60:dd:58:7d:40:44:db:68:
f2:62:10:e4:81:6a:85:a3:3e:68:d5:d0:92:14:8f:e3:52:68:
17:66:3c:62:b8:51:5c:12:f8:f3:9a:78:93:de:6f:1f:fd:3c:
03:e5:dc:98:e5:b8:18:61:f0:6c:9d:5a:60:9b:1a:f3:ab:b8:
7e:5f:b4:95:ba:cd:b6:5a:48:f5:35:3a:2e:21:34:18:54:e9:
c0:b6:a3:19:0e:63:c7:23:ab:a5:39:a7:02:fb:c4:94:40:17:
e3:61:3c:e0:2e:29:da:ad:20:f3:26:96:8e:ef:da:10:f1:85:
ca:22:c7:27:40:1c:1d:b8:d1:c8:5c:18:6c:d1:a4:d3:96:27:
d0:21:4c:f4:43:77:0a:0f:5f:72:0e:28:a8:f1:ed:b0:8b:e4:
45:26:0a:c0:7f:a7:89:38:c4:65:47:a2:e3:d1:9b:e8:53:79:
fd:44:e2:8f:41:72:25:a0:33:ff:e3:32:55:1e:fe:61:0a:1e:
06:56:b3:d0:55:6b:8f:75:3a:8c:3d:18:f6:b7:6c:72:c1:4d:
f8:e2:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:17 2025 by rpki-client