Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/r4jElKUXDSFmf7k9qfdtLfuCZQc.roa
File: r4jElKUXDSFmf7k9qfdtLfuCZQc.roa (raw, json)
Hash identifier: vjH6W3AUmmd9vA+QJQoNonGjoT4Pr1wH07Nk2vQDNL0=
Subject key identifier: AF:88:C4:94:A5:17:0D:21:66:7F:B9:3D:A9:F7:6D:2D:FB:82:65:07
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 019427484AEAA09EBCD4F97C77E78CB5D413
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/r4jElKUXDSFmf7k9qfdtLfuCZQc.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 85.203.48.0/22 maxlen: 22
85.203.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4a:ea:a0:9e:bc:d4:f9:7c:77:e7:8c:b5:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af88c494a5170d21667fb93da9f76d2dfb826507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:10:77:17:b0:af:e7:c5:a5:ad:7c:b7:f7:
e4:a0:02:6f:7c:cc:12:55:34:f2:9b:4b:8c:dc:bc:
10:16:53:7a:bb:d0:7e:7e:a5:b2:43:72:5f:00:73:
47:2c:13:4c:a2:dd:61:2a:30:d2:3d:27:cd:5c:cd:
80:7d:da:73:cb:93:35:3a:aa:ae:db:b8:97:f2:b5:
82:3c:0c:11:1d:bb:d5:2d:e6:67:92:dd:22:01:19:
ae:b1:25:79:58:4b:e2:70:ad:43:0e:bd:f3:5e:90:
65:8b:e8:8a:68:b3:ea:37:f8:9f:5f:bf:64:97:c9:
b2:f5:10:32:92:f8:0d:79:1e:0e:74:63:bc:14:67:
28:83:f6:b9:0b:48:a1:a0:35:5d:1a:e8:a7:82:b0:
1e:b0:01:84:39:c1:ff:ca:1b:ce:71:d2:8e:97:18:
33:3a:bf:88:bd:1e:1d:55:a0:97:a2:c3:75:6f:e5:
57:83:18:4d:20:25:c9:d2:be:29:6e:d0:cc:83:36:
d8:d2:a2:9c:96:92:70:a7:38:91:74:f7:0d:b4:11:
52:54:87:b7:43:c1:25:b4:8e:17:ce:8c:b1:4d:d7:
2e:63:24:f7:57:8c:ac:f7:fd:9f:37:00:6c:77:5f:
20:dc:a1:15:20:cf:cf:f1:6f:26:3e:02:70:4d:ab:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:C4:94:A5:17:0D:21:66:7F:B9:3D:A9:F7:6D:2D:FB:82:65:07
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/r4jElKUXDSFmf7k9qfdtLfuCZQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.48.0/22
85.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
81:8f:f7:cc:5c:e3:fb:50:ac:06:2f:cf:92:10:c1:b8:7d:c6:
db:19:cf:53:fc:ee:3f:87:94:c5:24:05:c4:2b:92:ea:a8:b4:
4c:0d:88:8e:3c:d8:68:fa:41:84:c6:4e:8f:3c:66:21:e2:71:
0b:4d:39:08:89:4b:62:e9:2c:3a:ac:7d:ed:36:f4:66:90:b1:
11:41:77:53:8d:ff:86:59:85:cc:05:b4:4c:5e:7a:38:0a:37:
15:a3:5a:fe:cf:34:e8:d0:5e:d1:23:25:b4:73:84:92:89:31:
6e:30:f2:35:dd:36:16:8a:2a:ae:e4:a7:44:4d:5b:72:ab:b9:
70:61:4f:29:33:a7:ba:4b:cd:59:97:da:3e:43:ed:7e:d4:f5:
f1:7b:a5:6d:05:85:c9:f9:3e:c0:91:35:d7:0a:bc:f6:47:38:
0f:31:5f:a8:89:10:f8:b8:8c:77:ba:5c:62:cd:17:fa:68:25:
4f:53:d7:86:15:6d:53:e7:2e:3d:02:fe:12:67:86:e8:40:a7:
06:eb:78:bd:da:35:55:1b:05:c0:6c:2a:33:74:2c:a8:b9:b1:
3b:ab:d6:d5:b9:af:1b:89:20:3c:fe:a9:70:06:83:6c:d2:d8:
9a:dc:64:9c:b0:05:dc:42:fb:e4:4b:c8:fb:ec:9e:26:00:28:
bf:60:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:39 2025 by rpki-client