Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/_w36PBooYvePauBkPOTldD_qNZc.roa
File: _w36PBooYvePauBkPOTldD_qNZc.roa (raw, json)
Hash identifier: hpJoX8luKbQz9GDhdRpg1rk5Zn+lxQz5UWYQbVjTs1Y=
Subject key identifier: FF:0D:FA:3C:1A:28:62:F7:8F:6A:E0:64:3C:E4:E5:74:3F:EA:35:97
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019423690D28EA60A18F763F121CB34E7314
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/_w36PBooYvePauBkPOTldD_qNZc.roa
Signing time: Wed 01 Jan 2025 19:47:54 +0000
ROA not before: Wed 01 Jan 2025 19:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 85.116.128.0/23 maxlen: 23
85.116.130.0/23 maxlen: 23
185.89.220.0/23 maxlen: 23
185.135.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0d:28:ea:60:a1:8f:76:3f:12:1c:b3:4e:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff0dfa3c1a2862f78f6ae0643ce4e5743fea3597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:54:9d:81:6c:b8:0e:9c:c6:dd:8b:f5:07:
f1:24:1e:b2:4d:5b:9d:56:8c:cb:a9:58:df:17:45:
c4:8f:7c:9a:6b:8a:2f:a0:1a:9d:fd:de:4a:11:cd:
59:ff:e0:2c:3e:10:ca:66:9d:c4:e2:a5:43:f6:4b:
45:d6:d1:c1:f8:60:37:4f:32:68:ca:60:67:39:d7:
0a:48:35:9a:50:b6:91:16:2f:30:9a:9d:5a:40:b7:
52:ff:e6:7e:f6:57:be:c6:de:09:a9:f5:9b:84:da:
b6:8f:9e:ae:de:10:11:da:d2:85:9b:de:9f:fa:92:
e1:80:93:e8:ec:22:9e:95:f5:e8:11:e0:e1:94:fc:
9f:52:2b:6d:96:11:34:14:7d:b8:47:8d:d5:22:b8:
4b:b8:5c:a4:3b:9e:82:22:aa:a4:fb:dd:01:7a:ae:
d1:60:18:d8:cd:6d:d4:f9:88:63:2b:97:c9:39:98:
85:45:ef:81:c2:90:fa:a2:f2:67:63:f2:0a:b0:44:
ba:20:b9:73:54:29:b5:07:4b:21:69:67:ba:92:19:
b9:87:cb:b8:14:f1:71:6c:ae:0c:f1:14:42:f8:87:
87:4c:5a:9e:e2:2d:de:2d:ce:eb:de:a9:c1:3a:fa:
7a:7a:b5:95:c4:dd:ab:62:2f:ea:ab:47:cb:7b:a6:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0D:FA:3C:1A:28:62:F7:8F:6A:E0:64:3C:E4:E5:74:3F:EA:35:97
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/_w36PBooYvePauBkPOTldD_qNZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.128.0/22
185.89.220.0/23
185.135.103.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c8:59:3b:d6:cf:9c:7e:49:80:8d:ee:a2:69:60:11:27:c2:
16:f1:ef:e5:e4:79:f2:02:7b:fd:4d:cb:5e:07:3d:4e:ba:d2:
47:62:41:e4:a0:e1:ee:73:59:d1:32:eb:91:67:33:25:fc:b2:
9c:0a:ce:86:09:86:58:b4:18:4d:c3:42:6f:58:34:64:c5:23:
fc:bc:96:78:bb:dc:b8:48:e9:e5:7f:82:fd:9e:62:e9:88:e6:
19:cb:d1:ac:2d:8d:e4:3d:73:dc:be:0f:9b:72:dd:b7:ec:7b:
12:1a:c0:17:b4:30:77:f7:b4:12:ac:21:70:d2:4b:d9:6d:9e:
96:7a:5e:9b:f5:b7:f0:e0:10:c7:19:d4:fa:72:1f:18:62:56:
3e:0d:da:a7:dc:5b:bf:61:11:90:cb:f7:8e:d6:9b:2a:14:36:
28:d0:3b:0e:49:fc:5b:27:23:3e:1c:1f:f2:20:27:b0:5d:4b:
7d:d4:e7:9b:c5:87:fe:02:18:45:a2:fa:93:5b:fa:ad:b7:fe:
8a:ca:7a:61:92:6b:e6:71:36:fc:a9:46:60:a2:02:08:f5:f9:
4b:01:f4:b7:6c:8b:3f:d3:9d:48:86:42:f4:ce:f0:39:fe:8c:
a3:3b:d9:a0:88:dc:d1:32:01:c0:f1:32:46:9e:79:b5:14:cb:
c3:64:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:40 2025 by rpki-client