Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa
File: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (raw, json)
Hash identifier: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=
Subject key identifier: 21:F4:8A:58:1C:16:57:A4:1C:56:C4:52:32:32:7D:C0:63:1B:51:49
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 01942521C58D108217F3434C3C653A6CD5F1
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205467
IP address blocks: 85.12.0.0/22 maxlen: 24
85.12.4.0/22 maxlen: 24
193.138.223.0/24 maxlen: 24
2a01:788:213::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c5:8d:10:82:17:f3:43:4c:3c:65:3a:6c:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21f48a581c1657a41c56c45232327dc0631b5149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:1f:3a:03:74:64:82:9e:e9:55:6a:8e:12:
49:dd:4d:54:7f:5d:fa:90:56:fb:62:1d:c4:9f:d7:
db:45:07:90:55:93:d0:dd:83:1b:03:af:4f:1d:f2:
6d:e9:66:44:78:fa:86:2b:16:d8:7b:83:14:23:2a:
05:66:3a:3a:46:cf:dc:48:ed:44:c7:b9:7d:8d:cf:
13:88:22:e5:2c:ca:ad:18:f9:c1:a6:b8:c3:ec:2e:
83:fe:05:8b:66:b0:08:c4:55:08:47:ed:ca:f0:09:
aa:1a:f1:66:29:7d:ae:69:50:71:99:df:a7:eb:c3:
34:1c:31:b6:ce:14:57:34:5e:45:0d:90:78:cd:14:
00:a8:94:2c:5f:e3:15:56:61:95:99:25:8b:e4:fa:
7f:25:6c:8d:df:1b:d9:e3:47:cd:eb:55:87:bb:dd:
c1:89:bb:5d:94:66:23:05:2a:83:5d:b0:ed:c5:ad:
ad:14:0a:01:b7:67:e4:f2:05:40:0e:d8:47:bc:66:
e2:0f:2b:4d:6b:bc:51:50:3f:b1:fa:0d:17:19:7d:
da:cb:7f:d1:fd:d3:bc:bb:7a:e0:77:72:6e:e8:0d:
51:a5:08:5a:3c:a5:cf:a7:3c:e6:68:80:d7:6c:68:
71:0f:71:48:19:09:4f:f2:e0:27:3b:33:fa:9c:ae:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:8A:58:1C:16:57:A4:1C:56:C4:52:32:32:7D:C0:63:1B:51:49
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.0.0/21
193.138.223.0/24
IPv6:
2a01:788:213::/48
Signature Algorithm: sha256WithRSAEncryption
5d:38:f8:0d:51:cf:b0:20:dd:e3:73:f0:f8:a3:48:4b:8c:72:
a0:64:77:9e:4b:68:36:18:7e:d7:e7:7b:8f:bc:14:d8:3a:d8:
61:db:6b:2c:08:2f:a0:42:8f:84:3f:f5:b4:ff:45:eb:47:79:
56:ed:30:dd:d3:8e:dc:23:36:51:cb:2d:20:59:6c:19:d1:af:
a8:ea:12:cc:73:e1:77:f3:5f:b9:46:00:59:b0:df:f2:8a:01:
05:c0:d7:45:78:9f:56:ce:21:4a:77:2c:78:f7:20:20:39:d8:
88:c7:5a:d5:09:73:9e:15:00:b9:7f:7a:bc:72:a4:8d:6b:3d:
26:e6:b3:6b:76:2f:23:ef:e4:3a:b5:f8:a3:db:0a:f5:0d:1f:
c5:e3:79:66:5e:a1:72:b8:6a:9d:6a:d8:a7:be:d3:0b:01:b7:
92:4e:a0:08:3a:1f:2f:68:21:c5:bb:0c:e6:56:88:0b:a0:ea:
b5:40:ed:5d:1f:7a:2a:b9:39:9b:e3:18:a6:db:35:56:fe:40:
24:c2:10:ab:16:11:1e:62:aa:c7:55:db:b4:74:05:4c:a2:90:
8c:28:62:ad:34:9f:f2:97:8f:c8:92:88:d1:f2:f4:12:5e:39:
79:91:b3:ba:ef:bd:8a:86:33:3d:1a:57:95:7e:58:09:fe:7d:
af:26:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:53:46 2025 by rpki-client