Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/_O5lI_NrxjYhfLVpiDzpC5pBpNo.roa
File: _O5lI_NrxjYhfLVpiDzpC5pBpNo.roa (raw, json)
Hash identifier: kRyUBDk7DeOK1Op874QsCkY85Pkvq4XHwWApA0Uvb60=
Subject key identifier: FC:EE:65:23:F3:6B:C6:36:21:7C:B5:69:88:3C:E9:0B:9A:41:A4:DA
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 0195CC7C8E065AB0D64D4BE1DDC39A7CBE46
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/_O5lI_NrxjYhfLVpiDzpC5pBpNo.roa
Signing time: Tue 25 Mar 2025 08:47:49 +0000
ROA not before: Tue 25 Mar 2025 08:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199290
IP address blocks: 5.180.248.0/22 maxlen: 22
5.180.248.0/23 maxlen: 23
5.180.248.0/24 maxlen: 24
5.180.249.0/24 maxlen: 24
5.180.250.0/24 maxlen: 24
5.180.251.0/24 maxlen: 24
45.8.64.0/23 maxlen: 23
45.8.64.0/24 maxlen: 24
45.8.65.0/24 maxlen: 24
45.8.66.0/23 maxlen: 23
45.8.66.0/24 maxlen: 24
45.8.67.0/24 maxlen: 24
185.79.4.0/22 maxlen: 24
185.196.16.0/22 maxlen: 24
185.241.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:7c:8e:06:5a:b0:d6:4d:4b:e1:dd:c3:9a:7c:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Mar 25 08:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcee6523f36bc636217cb569883ce90b9a41a4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:13:a9:3e:6f:39:06:bc:09:d1:1b:2d:f8:
87:89:c0:5a:61:3b:29:ae:ea:23:92:07:dd:3f:b8:
f9:c9:f2:c3:07:bf:83:3f:31:ba:86:28:2e:ef:60:
db:c4:3f:4f:22:c7:50:17:da:b6:68:8a:41:e7:c2:
fc:96:a1:79:6b:01:fb:db:48:28:4b:db:0c:f6:30:
1f:60:43:0e:55:0d:63:98:c5:fe:10:1a:45:c1:d0:
4e:f1:69:82:08:6d:9f:fd:44:6b:ad:39:8d:b1:c9:
ef:d3:0c:40:bf:bf:5d:8d:93:cb:d8:88:d8:a8:63:
38:8b:87:06:54:b6:0d:04:6e:76:0e:50:28:09:89:
4b:3d:f9:d4:94:e0:c3:2b:fe:e9:10:07:6f:f9:2f:
b1:1b:1a:ba:70:a5:59:cb:dc:4d:0d:85:40:aa:42:
19:6d:b7:5e:15:86:d7:65:18:e3:f0:ab:5d:4b:96:
d5:bb:9e:5e:7f:f4:0b:33:9b:1c:2b:4c:d1:b2:5d:
a4:d5:fa:88:d0:bf:ba:1c:36:a1:fc:2e:0e:3e:b4:
13:97:9f:be:dc:7a:a3:53:ed:4c:64:66:ce:fe:ee:
b1:ca:f1:ca:bd:0d:c6:36:c4:ab:26:73:63:ed:e8:
7b:ea:c7:11:cd:34:95:32:c9:9b:cf:ec:e4:db:d2:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EE:65:23:F3:6B:C6:36:21:7C:B5:69:88:3C:E9:0B:9A:41:A4:DA
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/_O5lI_NrxjYhfLVpiDzpC5pBpNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.248.0/22
45.8.64.0/22
185.79.4.0/22
185.196.16.0/22
185.241.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a1:dc:21:26:35:4d:d4:84:fc:bb:c6:2c:da:5c:46:f3:57:
28:5c:80:15:fa:22:00:8b:5f:5a:d0:c8:a4:79:e3:3c:df:f7:
e2:e0:9e:53:3b:25:81:38:43:d1:be:83:ec:3f:43:34:6f:cb:
11:a8:82:05:5c:9c:3d:f1:6f:8b:71:98:5a:6e:ea:a7:96:d4:
bc:92:4e:89:8f:13:84:d2:2d:eb:90:02:ef:29:0c:b9:4c:c9:
25:0d:b0:f4:b9:f3:d4:44:6e:a3:de:2a:a4:32:3f:cc:f8:eb:
89:36:44:4a:f8:2d:f6:99:77:c0:2d:66:1b:5d:a8:e4:5a:db:
c4:ec:42:36:fd:1a:4c:a6:77:08:b1:24:d5:71:3e:1d:08:79:
a0:02:a1:41:21:60:7c:c3:25:bf:b7:e2:8c:20:64:6c:56:c3:
a3:29:5d:ef:25:e0:c9:50:e8:aa:f7:9e:03:fb:2a:ef:f8:4b:
2b:f9:e2:b3:94:73:9d:42:3f:65:e0:89:8d:2e:f9:7c:f8:b9:
58:ca:ad:b3:cb:92:f2:d4:30:e5:e3:7a:e1:e3:12:c6:af:0b:
1f:c6:91:cf:60:50:4f:c5:29:1a:93:f3:1a:2e:a0:e0:ec:8c:
a0:e8:dd:82:eb:ec:b0:49:86:cd:6e:a1:f1:55:74:f8:75:78:
ff:d6:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:39:20 2025 by rpki-client