Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/AygjfPSd-BYn9y5589qLTfq5Rzs.roa
File: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (raw, json)
Hash identifier: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=
Subject key identifier: 03:28:23:7C:F4:9D:F8:16:27:F7:2E:79:F3:DA:8B:4D:FA:B9:47:3B
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 0194DAAA472E76D622D87612DB9C2BAC3A1A
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/AygjfPSd-BYn9y5589qLTfq5Rzs.roa
Signing time: Thu 06 Feb 2025 09:49:39 +0000
ROA not before: Thu 06 Feb 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203936
IP address blocks: 45.144.248.0/22 maxlen: 22
89.40.238.0/24 maxlen: 24
89.43.72.0/24 maxlen: 24
89.43.198.0/24 maxlen: 24
89.44.145.0/24 maxlen: 24
185.249.232.0/24 maxlen: 24
185.253.144.0/22 maxlen: 22
185.253.145.0/24 maxlen: 24
185.253.146.0/24 maxlen: 24
185.253.147.0/24 maxlen: 24
193.39.92.0/22 maxlen: 22
193.39.92.0/24 maxlen: 24
193.39.93.0/24 maxlen: 24
193.39.94.0/24 maxlen: 24
194.15.219.0/24 maxlen: 24
194.15.232.0/24 maxlen: 24
194.15.236.0/24 maxlen: 24
194.26.1.0/24 maxlen: 24
2a03:6280::/29 maxlen: 29
2a0c:1380::/29 maxlen: 29
2a0c:3cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:aa:47:2e:76:d6:22:d8:76:12:db:9c:2b:ac:3a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Feb 6 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0328237cf49df81627f72e79f3da8b4dfab9473b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:64:13:27:af:22:31:23:9b:d5:57:8f:22:
87:88:25:b7:36:e3:c5:04:21:3e:39:01:ff:43:90:
16:6e:e0:2a:1b:48:5b:1a:f9:e4:2e:08:ab:4b:3e:
bb:84:cd:2b:34:a8:5d:95:ee:96:24:0e:0a:e8:cd:
12:be:ab:1c:58:b2:f8:f2:34:6f:94:4e:96:26:73:
a0:4a:fc:47:0a:15:33:92:37:c6:1c:60:52:26:7f:
07:f7:c3:17:fe:d7:84:08:f4:5d:ed:39:70:12:d1:
c5:7a:02:dc:5d:2f:f7:5f:0c:c4:9e:22:f8:b1:c1:
78:f7:9f:2c:26:c5:e0:f8:43:da:3f:81:a1:4f:e5:
d2:19:a6:3f:2a:d8:b3:de:e6:13:20:de:35:ac:16:
8a:2e:40:3a:70:29:42:70:43:70:66:29:0e:a6:b9:
f2:1d:2d:e6:11:79:24:ac:9c:5e:43:c9:dd:75:5d:
5f:7a:64:80:6a:56:d4:c7:76:ba:f1:41:fd:dd:1c:
4b:70:08:29:c0:c5:ae:21:42:fa:fa:f6:ad:b5:06:
fd:12:a1:bc:ab:a5:d7:07:a7:54:6e:d1:10:0e:d8:
10:8a:57:eb:de:c7:92:ac:f2:2f:23:61:52:96:80:
09:3b:1f:cb:88:b4:9e:ca:b8:59:1f:8c:cc:56:a0:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:23:7C:F4:9D:F8:16:27:F7:2E:79:F3:DA:8B:4D:FA:B9:47:3B
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/AygjfPSd-BYn9y5589qLTfq5Rzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.248.0/22
89.40.238.0/24
89.43.72.0/24
89.43.198.0/24
89.44.145.0/24
185.249.232.0/24
185.253.144.0/22
193.39.92.0/22
194.15.219.0/24
194.15.232.0/24
194.15.236.0/24
194.26.1.0/24
IPv6:
2a03:6280::/29
2a0c:1380::/29
2a0c:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
83:a8:14:8e:27:45:ce:8e:ac:22:45:97:c9:21:9e:d7:23:82:
04:9a:bc:42:b8:c3:5d:3e:b0:d8:dd:cc:0c:d5:a3:81:03:73:
ad:65:ea:b7:26:19:87:88:79:d4:d4:24:06:bc:10:fc:6f:e3:
8d:75:09:3f:65:86:a0:3d:4b:71:4a:38:3c:8e:83:f2:88:66:
e4:2f:50:72:6d:67:cd:c9:c6:86:35:34:6a:4b:fb:d0:7f:c0:
6c:08:2b:5a:b9:7d:82:d3:25:95:ee:67:65:00:64:7d:75:ce:
62:8e:a5:32:8f:5e:a1:14:6b:fe:9e:21:96:48:2f:f4:92:95:
7e:2c:d2:27:45:2b:33:03:c3:44:1a:3a:78:67:c1:54:43:4f:
67:e1:1d:b0:d4:16:9a:42:c0:78:45:a0:f4:6c:09:fc:ae:7a:
b3:e6:e4:dc:a7:17:ad:c7:4a:7a:24:4d:58:49:6b:3a:0a:3f:
b2:59:13:c9:ae:99:63:7c:4f:f8:d4:94:71:74:93:dc:1b:a8:
ba:3e:fe:92:ce:49:9a:71:e5:1e:8c:b0:02:39:b3:02:1a:6a:
3d:55:25:40:19:d4:3f:e2:9d:02:00:f5:d9:66:40:06:33:77:
90:84:87:74:e9:2b:0a:ce:62:61:d1:73:a8:1b:3d:7b:d7:f9:
59:dc:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:29:18 2025 by rpki-client