Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa
File: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (raw, json)
Hash identifier: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=
Subject key identifier: 75:F5:1B:93:E5:5D:CC:5C:47:7D:0A:58:62:B6:38:5D:6D:21:98:5E
Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial: 0194244562D7E50D6815D08965F870367A39
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201739
IP address blocks: 45.152.0.0/22 maxlen: 22
45.152.0.0/24 maxlen: 24
45.152.1.0/24 maxlen: 24
45.152.2.0/24 maxlen: 24
45.152.3.0/24 maxlen: 24
185.22.252.0/22 maxlen: 22
185.22.252.0/24 maxlen: 24
185.22.253.0/24 maxlen: 24
185.22.254.0/24 maxlen: 24
185.22.255.0/24 maxlen: 24
185.65.108.0/22 maxlen: 22
185.65.108.0/24 maxlen: 24
185.65.109.0/24 maxlen: 24
185.65.110.0/24 maxlen: 24
185.65.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:62:d7:e5:0d:68:15:d0:89:65:f8:70:36:7a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75f51b93e55dcc5c477d0a5862b6385d6d21985e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:01:eb:6f:7e:25:ed:8e:fa:14:f3:e6:a2:
f3:36:05:41:9e:bc:dd:45:8e:d9:06:d5:12:24:9b:
43:c5:13:3c:c9:d1:4c:b8:70:d0:06:65:cd:7a:5f:
ca:31:db:b2:ad:3f:60:01:af:a1:66:94:ee:49:6b:
20:5f:3c:aa:7e:2e:59:68:13:d1:43:55:ab:50:5c:
93:23:85:f8:7d:af:62:09:ff:19:72:28:97:2d:f6:
53:a6:0e:54:44:62:9b:10:78:36:d5:90:34:71:a7:
df:78:e3:53:06:2c:50:4b:9f:98:39:e3:6e:ce:2f:
c4:c6:d4:ec:6c:21:a5:04:6f:8d:7e:b2:45:cf:63:
8f:66:ae:2e:7b:f4:80:ff:be:46:85:43:c3:be:16:
6e:d7:89:75:cb:a9:7d:b0:af:84:71:97:c4:b9:e8:
e8:99:d7:0e:8a:20:2c:b7:c4:8d:6e:53:b3:e4:46:
68:7b:7d:48:e2:f6:31:b3:90:5a:76:26:b1:7e:f9:
d8:0c:68:9e:79:b9:a9:fe:0c:d7:dc:15:a7:d9:57:
e3:b9:f2:c8:c1:2f:a3:e0:f6:14:46:4d:e3:af:42:
9b:26:45:72:55:65:d6:11:f1:af:ef:fb:59:54:55:
da:9a:fd:f7:71:f0:a8:2e:8d:ec:fe:18:25:25:83:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:1B:93:E5:5D:CC:5C:47:7D:0A:58:62:B6:38:5D:6D:21:98:5E
X509v3 Authority Key Identifier:
keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.0.0/22
185.22.252.0/22
185.65.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:cb:23:96:1f:c8:e5:e1:63:a6:78:5a:ef:7f:8b:43:0b:e4:
c3:c3:b0:a0:ba:16:25:f1:b8:05:0c:44:70:28:c4:ac:de:13:
98:f2:3e:00:b9:2a:57:d6:c8:3b:68:c0:21:0c:14:d0:04:32:
61:28:78:2b:15:c7:6a:0e:43:64:74:0b:24:98:aa:32:7e:13:
d2:85:cf:56:ec:8b:a6:50:76:a2:c3:72:8a:fe:60:9e:04:9d:
99:a8:a4:09:a5:d9:c0:d0:d2:65:e1:eb:67:d4:ee:c3:ee:83:
f3:81:e8:3d:c4:a2:71:3b:35:50:95:61:59:01:67:bd:b2:90:
9f:83:18:3c:4a:d5:96:38:9b:73:d9:78:f1:cc:cb:cf:ac:b4:
2d:6f:4a:05:ec:f4:06:eb:f1:c6:9a:b4:3d:ad:06:05:f0:e0:
73:80:9b:be:82:8b:eb:f4:4c:a4:81:7f:84:0d:1a:ea:42:54:
80:ac:02:06:e1:c6:51:fe:ba:35:71:69:00:11:1c:2f:fb:7a:
0b:9f:48:d6:c3:f7:fd:41:68:3a:b8:ad:53:fe:c1:c3:ab:7c:
1f:54:05:55:d0:56:e6:c6:14:7f:71:c3:b2:70:d2:6a:04:08:
52:9b:07:30:e3:4e:4d:4b:6d:b2:d9:38:b4:fa:e4:f9:8b:19:
31:2d:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:01 2025 by rpki-client