Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa
File: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (raw, json)
Hash identifier: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=
Subject key identifier: 1C:82:72:0A:21:18:E2:6D:01:FB:82:3F:D5:F7:07:02:3F:19:61:F4
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019421443B5A429DB40D74EEA5211228ABD2
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41622
IP address blocks: 77.245.176.0/20 maxlen: 20
185.244.112.0/22 maxlen: 22
217.194.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3b:5a:42:9d:b4:0d:74:ee:a5:21:12:28:ab:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c82720a2118e26d01fb823fd5f707023f1961f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:8f:dd:3e:2a:42:c3:70:dc:ec:91:e5:f6:
3d:4d:f8:42:5f:b5:14:76:63:03:0b:b7:3b:12:7c:
67:7c:e8:dc:0a:da:58:da:2a:13:87:9d:a5:34:d3:
14:28:35:e2:e8:ed:98:a3:c4:ef:95:8f:ee:ec:fa:
fe:fc:6e:29:87:ee:ac:32:3c:69:66:b4:d9:57:ad:
f7:b9:48:60:2a:8e:39:32:17:66:1e:2e:e8:83:62:
38:dd:c2:50:45:cb:63:3a:f7:3d:15:b1:c0:42:93:
0b:62:b5:e8:65:69:70:33:67:60:40:14:af:38:07:
9a:02:47:04:6c:21:ca:8f:8b:86:5f:fb:46:b8:8a:
98:d2:72:61:0f:8d:bf:5e:00:68:4c:56:94:cd:74:
55:e1:cc:a4:c1:92:ce:27:b6:ea:16:e2:45:39:ac:
4a:d1:25:b8:64:bc:59:00:56:ff:eb:42:3b:fe:26:
34:01:a0:98:9e:c6:84:a5:1e:71:eb:8b:63:db:ca:
1b:98:9e:8b:db:64:41:ee:01:5c:84:c4:ad:5e:cf:
f3:d9:0a:c6:51:c3:e6:a1:0e:6f:7d:02:94:02:c1:
b3:9b:e6:84:39:c6:9e:6b:0a:01:c8:ba:d0:7d:2a:
28:c0:76:a4:94:90:1f:b5:35:1f:be:f4:15:15:68:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:82:72:0A:21:18:E2:6D:01:FB:82:3F:D5:F7:07:02:3F:19:61:F4
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.176.0/20
185.244.112.0/22
217.194.48.0/20
Signature Algorithm: sha256WithRSAEncryption
22:cd:f8:d6:14:2d:f2:67:60:59:f3:0a:9f:cd:49:c5:e8:6d:
0e:e8:6c:de:d8:e1:7e:b6:f8:10:b3:4e:a8:da:4f:ed:46:9f:
ac:ba:a5:9e:9a:e7:79:a0:a7:ac:cb:66:9b:d7:2b:af:c2:ff:
c1:9f:f8:d5:7c:5c:78:46:b3:3f:e4:d0:38:9f:55:ea:fb:a7:
23:35:84:4f:17:28:79:80:5d:85:a3:20:05:83:1d:a0:e4:81:
46:05:ed:61:4c:3b:54:09:f2:b9:4e:45:02:07:8a:61:c7:ef:
cf:6f:df:4f:e5:dd:6c:00:fc:48:2a:46:4d:b8:4d:c1:54:d2:
82:24:93:75:8f:49:0b:5d:a5:7b:9a:d8:66:2c:de:c2:43:64:
47:85:27:ca:29:09:86:e8:d4:cb:9d:ec:91:70:7b:70:a6:86:
74:45:3e:eb:b2:0a:e7:c8:4a:df:01:74:21:0e:8d:87:e1:90:
be:84:41:21:54:36:74:40:d7:8d:c6:95:ec:c0:50:f6:85:0b:
fc:60:1a:56:3c:38:57:c7:e0:3b:c5:0f:bc:8b:32:56:84:3c:
68:03:e5:c8:a2:85:87:5d:3c:b1:ef:87:a2:a8:41:3b:51:cf:
8b:0a:ee:b1:8e:4a:04:38:11:d0:89:42:08:44:b4:44:22:3f:
56:68:1a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:26 2025 by rpki-client