Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa
File: 1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa (raw, json)
Hash identifier: 7aGZcVrrNLU0uixa8/gBU4YvCztU5V0t53AcHm6cX3E=
Subject key identifier: D6:B9:14:3C:7A:14:09:AE:E6:36:F6:7E:D4:C7:12:BF:85:53:94:BE
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 019420684C313F50CCBE2AFC5738D176DA82
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62179
IP address blocks: 185.44.72.0/22 maxlen: 22
185.44.72.0/24 maxlen: 24
185.44.73.0/24 maxlen: 24
185.44.74.0/24 maxlen: 24
185.44.75.0/24 maxlen: 24
2a01:7220::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4c:31:3f:50:cc:be:2a:fc:57:38:d1:76:da:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6b9143c7a1409aee636f67ed4c712bf855394be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:f0:ce:a3:3e:97:2c:61:14:89:dc:ec:57:
39:24:f7:d9:15:14:f1:5e:4f:01:4e:79:4b:90:ce:
e8:b6:8d:2c:b1:ef:8c:87:28:54:17:0a:5c:a5:72:
c9:9b:28:0a:f8:8c:10:7b:9c:0e:fd:f1:ca:6e:63:
04:85:c0:b4:8d:3c:34:26:34:f1:da:d8:a6:fb:b6:
d5:dc:f9:79:d1:55:d6:72:1b:bf:44:da:10:e9:5a:
0c:db:75:2d:1b:04:d2:f6:07:ae:8d:d8:c5:f6:20:
cb:47:a1:e9:27:0c:39:b6:91:7d:96:24:b5:a0:a1:
b7:84:8c:fa:8d:df:96:dd:e1:5e:8b:de:41:3d:22:
e8:0c:f9:17:78:24:60:69:be:05:58:0c:13:fd:cf:
62:9d:06:64:7c:65:49:43:5d:76:be:95:4e:30:f7:
f3:b6:4e:bf:92:7e:5a:eb:17:02:2a:ac:0d:18:0b:
61:c0:8f:d8:d4:d8:e7:b8:10:ab:7b:3c:f0:02:a8:
a1:65:5e:a2:5b:50:5d:cd:d1:f0:10:8f:2a:3f:7e:
39:6f:92:89:86:c6:19:20:4e:d4:fe:81:8f:8f:fb:
a1:22:e6:c6:0a:69:b2:43:8b:c4:7b:f3:6b:e9:ee:
17:a1:f1:e5:d4:dc:e4:2a:57:ac:9a:e0:e5:86:74:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B9:14:3C:7A:14:09:AE:E6:36:F6:7E:D4:C7:12:BF:85:53:94:BE
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/1rkUPHoUCa7mNvZ-1McSv4VTlL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.72.0/22
IPv6:
2a01:7220::/32
Signature Algorithm: sha256WithRSAEncryption
b5:2a:b7:ea:3e:35:f3:02:8f:85:a4:8b:f2:cb:1a:d7:f5:08:
79:22:0f:8d:34:f3:c3:04:6b:58:e3:73:0c:17:92:d5:62:15:
f6:25:df:e7:1f:e9:aa:ca:ff:f0:28:cc:f3:f1:0a:9c:c4:0a:
f2:47:51:52:66:86:71:11:da:2e:9f:22:31:55:8b:95:15:6a:
a2:a3:5e:4a:bd:6d:90:d0:1a:69:95:6e:6e:ba:6c:0b:d0:59:
59:b9:48:7a:1f:3c:6d:f4:d4:d0:32:83:7d:09:6b:d7:50:c5:
68:d6:a3:e8:33:48:83:ff:a7:41:b9:01:2a:73:90:45:43:15:
be:ee:20:0e:24:e7:04:74:50:a3:96:0a:1c:67:85:68:0a:32:
03:9c:cf:84:59:da:eb:23:f4:e7:b1:78:05:2d:6d:f5:e3:61:
70:c0:c4:a7:5f:84:8a:1a:23:34:55:de:24:2c:7b:7d:7c:c1:
75:d6:33:c9:05:05:03:65:b5:f4:94:8f:88:ca:88:7e:82:44:
45:d5:8c:18:1a:c0:0d:56:af:4a:9d:da:19:e8:b6:51:65:9b:
db:11:68:66:d9:f5:7f:c2:93:4b:41:50:91:35:18:98:ef:e7:
d4:2e:2f:9b:ca:c8:34:f6:b5:76:d1:a0:e0:2e:16:60:bb:65:
21:b0:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:29:45 2025 by rpki-client