Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/U8GRHKScYdSNdnB2mr1xryjNCyA.roa
File: U8GRHKScYdSNdnB2mr1xryjNCyA.roa (raw, json)
Hash identifier: gCSVLFeQA2Qb3RyGGtdWNAIaM4Y9u0sDXVDglP6HH5k=
Subject key identifier: 53:C1:91:1C:A4:9C:61:D4:8D:76:70:76:9A:BD:71:AF:28:CD:0B:20
Certificate issuer: /CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Certificate serial: 019427B60AB1BF03FE6BCDF3BE90ECD0DEB2
Authority key identifier: 8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/U8GRHKScYdSNdnB2mr1xryjNCyA.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211582
IP address blocks: 5.45.144.0/22 maxlen: 22
80.243.224.0/22 maxlen: 22
185.214.188.0/22 maxlen: 22
212.60.24.0/21 maxlen: 21
2a10:b040:1::/48 maxlen: 48
2a10:b040:2::/48 maxlen: 48
2a10:b040:3::/48 maxlen: 48
2a10:b040:4::/48 maxlen: 48
2a10:b040:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0a:b1:bf:03:fe:6b:cd:f3:be:90:ec:d0:de:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53c1911ca49c61d48d7670769abd71af28cd0b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:f0:7e:40:62:4b:4e:bf:3e:e4:04:5c:b3:
52:80:57:86:f7:ac:22:93:05:e9:64:a9:fb:63:92:
0b:69:2f:c5:a4:77:02:9a:5e:51:b9:9a:05:90:73:
c6:45:25:5e:8b:29:e0:14:8e:d0:2e:04:04:6b:68:
0a:25:2c:3f:3f:3d:cc:5d:dd:ac:86:8b:ee:bc:d0:
3d:16:0e:f5:ef:0d:05:5b:37:65:47:80:f7:fc:9f:
f6:9d:2a:39:45:fe:20:74:c5:04:52:72:4a:a2:1b:
5b:50:32:5a:24:0d:f3:a1:9d:05:2c:58:a6:73:24:
48:a3:a6:78:4f:56:f3:ce:3a:5f:0c:12:d7:6f:f5:
01:e9:b4:3d:a5:a7:b7:39:f7:7f:6e:92:3d:a4:5b:
f2:8a:cc:f1:b6:08:2e:92:ab:ca:4d:2b:95:3b:43:
27:a3:51:23:f4:9c:21:9e:f6:22:5a:0f:e0:bf:84:
12:80:d2:ae:5c:86:74:15:2d:db:70:4f:b3:14:48:
ea:cf:ba:f0:15:06:97:75:c5:84:8e:2b:1a:25:17:
43:29:0c:4e:d5:89:bb:5f:21:36:3d:d1:ff:0d:d7:
29:63:f1:7b:a0:93:63:7c:ea:5b:cd:26:3e:1c:ce:
9b:7e:bf:a2:9e:9e:5c:46:68:84:c0:27:53:fc:e3:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C1:91:1C:A4:9C:61:D4:8D:76:70:76:9A:BD:71:AF:28:CD:0B:20
X509v3 Authority Key Identifier:
keyid:8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/U8GRHKScYdSNdnB2mr1xryjNCyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.144.0/22
80.243.224.0/22
185.214.188.0/22
212.60.24.0/21
IPv6:
2a10:b040:1::-2a10:b040:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:26:97:0a:81:4b:4c:fe:10:05:20:ce:04:d3:19:98:be:55:
67:86:95:11:8b:c0:a6:7a:e4:6c:83:66:c8:ab:3c:30:93:17:
2b:64:d4:07:f5:9e:17:dc:3c:27:7f:08:33:e5:9b:7c:9f:c6:
09:74:05:ac:64:08:a5:1e:a4:25:5c:2d:83:00:25:88:21:a8:
c0:7c:2f:27:17:cd:41:d5:8f:22:25:c5:42:d6:b4:ee:39:5f:
d1:e7:51:7a:07:5a:15:1f:bc:3c:5a:f2:0d:12:37:82:4d:ec:
c8:f4:43:40:5d:89:6a:a1:65:c0:f7:fa:34:d9:f0:04:4e:c0:
9d:84:56:22:74:95:a3:87:9d:9e:27:e3:1e:cc:6d:63:ac:92:
45:d8:20:07:c2:bc:66:19:b9:c2:29:86:05:5c:35:1f:d4:45:
3e:f7:1f:d4:27:d5:7f:11:7a:fb:1c:89:b0:4c:73:64:e4:b5:
eb:17:a1:d8:94:08:ad:ca:19:95:51:d1:8c:49:64:4b:ca:c1:
bf:e3:0f:1a:20:cd:5e:7f:b2:59:24:20:6b:0b:19:40:69:a1:
b7:38:10:1f:7f:2c:56:cf:43:30:c6:fd:d2:1b:77:8e:8a:88:
90:b6:ae:df:42:24:f1:e5:f3:df:69:ba:48:43:20:89:7e:3c:
c2:25:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:34:44 2025 by rpki-client