Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Sb8mURdcC3DoVAmZvFl5Gj58_XY.roa
File: Sb8mURdcC3DoVAmZvFl5Gj58_XY.roa (raw, json)
Hash identifier: NGjgFjukEoaeag2V1w/HSmfenywGjZ+2HUhJbf9UJdA=
Subject key identifier: 49:BF:26:51:17:5C:0B:70:E8:54:09:99:BC:59:79:1A:3E:7C:FD:76
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 01942748461595EBFA3D87AC4B1FB0C92D2E
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Sb8mURdcC3DoVAmZvFl5Gj58_XY.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 85.203.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:46:15:95:eb:fa:3d:87:ac:4b:1f:b0:c9:2d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49bf2651175c0b70e8540999bc59791a3e7cfd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:f9:13:f7:b2:94:07:b6:bd:2b:f7:60:9d:
c8:96:f1:37:1a:04:83:a0:e7:7f:b3:3a:32:a4:9b:
16:30:80:9a:25:c9:7d:7a:2e:4f:47:66:e7:b3:29:
18:d7:84:06:7d:78:a3:09:5c:59:dc:e0:53:6c:85:
72:cc:9c:d9:97:4a:66:50:7e:7e:2a:57:84:84:54:
48:9b:fa:3a:b4:99:0e:81:b9:fd:83:fe:7e:ba:48:
a9:be:48:40:df:f3:bc:9c:2b:48:1a:3b:a2:96:82:
30:82:f7:b0:b1:0d:18:7d:df:e8:56:1c:24:fc:71:
3e:2c:0a:a7:08:35:8b:19:73:0e:6c:7c:7b:ea:da:
ad:2b:58:df:bc:3f:5c:fd:7d:71:24:80:d6:ab:71:
9d:63:72:58:c1:a7:7c:b5:58:4a:cc:b1:0d:e0:a3:
bc:c7:24:be:97:45:db:cd:c5:3d:8e:a1:65:89:4c:
8e:ac:fd:0c:46:2b:db:c1:87:c8:5a:02:a9:d3:29:
8a:bb:b3:fa:0b:46:b9:c5:a6:15:d3:6f:86:d6:45:
a1:5e:83:99:31:44:20:58:a7:c4:b6:31:f7:ef:84:
bf:dc:6e:e9:a4:64:ae:52:c1:6a:e6:ba:d3:fd:5b:
75:22:fc:69:eb:c2:fe:b0:ed:ed:cd:fe:31:82:c2:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:26:51:17:5C:0B:70:E8:54:09:99:BC:59:79:1A:3E:7C:FD:76
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Sb8mURdcC3DoVAmZvFl5Gj58_XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.28.0/22
Signature Algorithm: sha256WithRSAEncryption
77:52:f1:a9:cc:c9:0b:4a:cc:75:e5:71:f8:48:b1:8b:cb:03:
9d:6e:4d:56:85:72:fc:c6:92:7e:46:1f:06:3f:af:bd:01:20:
4c:da:4b:2c:97:ce:67:59:d7:b3:e7:dd:8c:41:d6:65:7f:6c:
f6:6b:d7:e7:d1:25:d6:29:c3:3c:6d:b6:44:ce:93:be:55:10:
4d:2a:57:e2:94:eb:db:f4:b8:ec:0d:5c:69:42:f3:dc:1d:54:
4a:bd:89:49:36:07:d7:79:e6:44:29:b1:a3:4d:13:44:55:1e:
20:16:51:0a:ab:32:fb:bb:03:04:a7:98:f2:f5:2d:79:66:21:
51:97:ca:32:2e:09:91:0b:e2:78:5c:53:44:f0:96:bc:e8:f3:
82:8a:4c:62:e8:54:23:6a:c5:ed:03:33:3c:47:b1:a4:e9:5a:
46:cb:42:c1:17:29:37:43:c4:7f:15:65:79:ae:3d:7c:f1:af:
d6:cd:21:ac:0c:cb:ca:12:56:aa:4a:a8:1d:55:8f:c9:80:9d:
37:56:75:57:d0:c0:d2:3f:a9:7b:f1:bf:27:c4:1f:d1:cd:2a:
34:da:91:cc:a0:db:35:d0:15:3f:08:3c:41:4f:32:f7:58:81:
1b:eb:76:f1:01:d0:08:d9:d7:71:99:78:1f:dd:0b:24:26:8d:
bb:88:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:06:24 2025 by rpki-client