Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa
File: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (raw, json)
Hash identifier: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=
Subject key identifier: E7:95:08:76:85:47:83:3F:F3:55:0D:3A:67:04:D6:35:5E:46:5E:F1
Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial: 019420684148F45B1E66A1B61AC2C3254962
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44652
IP address blocks: 185.147.164.0/22 maxlen: 22
2a07:59c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:41:48:f4:5b:1e:66:a1:b6:1a:c2:c3:25:49:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e79508768547833ff3550d3a6704d6355e465ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:b5:23:5d:3f:20:97:83:3b:3a:97:c9:52:
a4:08:b8:fc:42:dd:15:28:99:1c:4b:03:87:48:bd:
2a:c6:f0:3d:14:27:dd:d3:31:ce:f6:0e:90:75:20:
96:17:19:ba:9f:64:16:98:52:1f:44:fc:f4:7e:99:
14:14:23:78:fb:4e:9d:86:33:21:c5:7f:ff:4d:50:
2a:12:b2:62:36:d5:a6:ba:91:43:38:85:cc:f9:44:
f2:e3:a9:9c:24:9c:eb:3c:18:e3:05:16:08:40:36:
07:f1:26:01:81:9c:fe:87:35:b5:5b:4b:05:bd:b1:
52:45:e4:e1:6a:cc:07:32:17:d6:f3:86:2d:98:75:
38:85:6d:e9:a8:af:a1:0d:8d:ad:5c:e8:64:8e:10:
6c:f1:cf:40:46:88:86:01:d7:e2:88:6c:15:7c:c4:
cd:60:c9:83:61:05:66:b0:20:0a:d5:b6:0c:47:20:
78:d6:f3:21:cd:75:f1:63:25:0c:49:a9:0a:88:f0:
6e:fa:93:bc:5c:b0:cf:c0:0e:1d:76:43:ac:12:13:
dc:58:e3:59:99:bf:75:92:28:d0:cf:8b:0f:b9:33:
21:18:14:0c:c0:71:ee:65:a9:53:ce:14:b3:8f:99:
22:2a:0f:cc:1a:44:92:52:c4:a8:ec:44:05:de:83:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:95:08:76:85:47:83:3F:F3:55:0D:3A:67:04:D6:35:5E:46:5E:F1
X509v3 Authority Key Identifier:
keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.164.0/22
IPv6:
2a07:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:af:c6:eb:61:4a:16:90:db:ba:7c:af:5c:3e:70:e1:5f:9f:
7b:93:48:af:cb:2f:b6:5b:05:f9:14:a3:4b:da:72:72:96:3e:
dc:d1:12:f4:df:22:f8:d9:c9:0b:74:61:60:65:d6:59:8a:b9:
81:aa:40:76:fd:71:06:8b:22:00:50:07:dc:d3:ec:88:9f:0b:
62:5d:24:fa:d4:1f:ff:61:7d:39:3c:6b:aa:05:98:f6:35:f9:
c3:9c:15:0b:fb:54:92:a4:d0:f4:1a:7a:6e:0f:62:4a:ce:e3:
28:c9:67:d5:88:c9:81:5c:53:d0:d0:c9:c3:83:9c:99:78:86:
9a:2f:3b:d7:b5:2c:ca:3e:b9:50:6c:01:ad:b9:89:46:2d:e8:
49:36:eb:b2:5c:0f:23:09:ce:24:f0:2d:6a:07:5c:57:01:f4:
6c:ca:48:10:c8:d4:16:21:8c:df:4f:72:cb:2c:88:e5:40:1c:
6d:95:64:78:6c:26:eb:6c:fd:f2:22:4c:7e:61:97:b0:40:cf:
e5:c5:0f:b5:ea:4b:d1:48:f0:5d:07:e5:84:74:a7:28:03:50:
43:11:0f:ec:23:2a:8a:44:dc:ff:23:b3:82:13:8a:6c:89:70:
45:6b:f9:c7:c3:85:00:f0:a8:0f:6a:82:20:29:0b:a2:3a:b4:
6a:6e:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:27:37 2025 by rpki-client