Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/RCgFf0XiItPjSlxmmEgqaSoxxs0.roa
File: RCgFf0XiItPjSlxmmEgqaSoxxs0.roa (raw, json)
Hash identifier: 2UGMZ2yZeYOIM9kVwRezFG9Ou19OaN3jo1kdBDera9U=
Subject key identifier: 44:28:05:7F:45:E2:22:D3:E3:4A:5C:66:98:48:2A:69:2A:31:C6:CD
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 019427B647E8E7BA011BB3B5BC060ACCCCED
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/RCgFf0XiItPjSlxmmEgqaSoxxs0.roa
Signing time: Thu 02 Jan 2025 15:50:44 +0000
ROA not before: Thu 02 Jan 2025 15:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58073
IP address blocks: 2.58.20.0/22 maxlen: 22
2.58.23.0/24 maxlen: 24
37.220.32.0/21 maxlen: 24
45.10.116.0/22 maxlen: 22
45.82.44.0/22 maxlen: 22
45.88.16.0/22 maxlen: 22
45.93.32.0/22 maxlen: 22
45.129.176.0/22 maxlen: 22
45.145.252.0/22 maxlen: 22
45.152.192.0/22 maxlen: 22
46.182.104.0/24 maxlen: 24
46.182.105.0/24 maxlen: 24
46.182.106.0/24 maxlen: 24
46.182.107.0/24 maxlen: 24
46.182.109.0/24 maxlen: 24
46.182.110.0/24 maxlen: 24
46.182.111.0/24 maxlen: 24
185.38.12.0/22 maxlen: 24
193.104.186.0/24 maxlen: 24
2a02:2a38::/32 maxlen: 32
2a02:2a38:37::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:47:e8:e7:ba:01:1b:b3:b5:bc:06:0a:cc:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: Jan 2 15:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4428057f45e222d3e34a5c6698482a692a31c6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:a4:af:51:d9:36:f9:c1:40:18:9d:31:99:
dd:fc:df:14:c5:b4:b3:95:41:44:b1:73:8e:68:6a:
a2:a9:00:fb:20:7a:f5:1e:52:94:74:d3:0a:84:a1:
58:d7:25:c1:4b:35:3f:69:a9:6b:a0:e6:47:ad:b2:
fe:16:70:9a:e3:4b:a5:62:41:f7:0a:9f:55:e6:e1:
c1:ec:27:73:e2:f5:8b:23:01:a8:b2:70:1e:4f:89:
6a:55:56:66:86:64:f8:80:d9:e4:71:11:7f:26:55:
86:d9:1d:1d:d2:77:14:c4:dd:fb:66:e4:82:f0:c2:
54:5f:7c:dd:64:2f:d7:a7:64:d9:bd:13:1b:b8:0c:
30:bf:db:73:4b:51:27:0c:30:e7:79:53:d5:32:ce:
36:8d:38:3f:ed:9e:94:77:8f:c5:31:8b:a7:31:2d:
c9:66:89:2b:c3:b5:4c:ca:71:e9:2f:fe:4b:e5:cb:
58:3d:12:39:63:0e:73:3e:33:8e:56:09:7a:7e:fe:
8a:83:ba:eb:11:aa:0b:de:b2:b4:6b:29:92:28:9f:
96:05:db:3f:1a:10:16:de:60:eb:f0:8a:26:eb:f1:
d4:c2:95:5a:f3:6c:a0:f6:50:1d:91:94:78:f9:35:
e7:1a:19:dc:20:ee:be:73:91:f2:cd:d1:bf:8d:9b:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:28:05:7F:45:E2:22:D3:E3:4A:5C:66:98:48:2A:69:2A:31:C6:CD
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/RCgFf0XiItPjSlxmmEgqaSoxxs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.20.0/22
37.220.32.0/21
45.10.116.0/22
45.82.44.0/22
45.88.16.0/22
45.93.32.0/22
45.129.176.0/22
45.145.252.0/22
45.152.192.0/22
46.182.104.0/22
46.182.109.0-46.182.111.255
185.38.12.0/22
193.104.186.0/24
IPv6:
2a02:2a38::/32
Signature Algorithm: sha256WithRSAEncryption
5f:23:f5:b6:11:c8:b5:4c:7f:0d:20:4e:7e:59:76:59:f9:b0:
af:d8:c1:67:e7:51:ff:d0:bd:ab:b3:04:08:18:67:e1:1d:02:
7e:af:70:79:7f:35:51:67:84:6a:76:ef:bd:2f:02:eb:ce:f7:
da:ae:a4:92:99:a1:b3:47:6a:d2:b3:18:8a:43:f5:84:90:e5:
e4:0c:2b:3f:e9:cf:f4:ab:b5:aa:f5:78:df:3b:d8:3c:a8:ce:
10:c7:4b:09:42:9b:a9:76:3d:ae:ce:05:e2:5a:ef:2a:b2:11:
fc:f6:e6:48:57:0a:38:37:5b:49:ca:45:a8:7f:12:15:1c:bd:
a9:36:ff:d1:50:13:1e:fc:9b:64:37:e2:de:26:5a:08:a6:b1:
ef:d4:6b:6d:fa:3b:16:2d:9d:c9:c1:41:65:6b:6d:36:27:02:
4c:41:83:16:4d:be:af:c6:56:44:cc:43:51:4e:a9:79:47:ba:
fa:77:e6:14:ba:ce:40:e5:a4:f2:5c:cd:77:a6:44:7f:52:e9:
37:7b:43:0c:5f:2b:88:c9:cc:81:ae:76:69:fa:1a:2a:ca:b7:
8b:82:c5:08:87:67:1c:c0:89:54:7c:58:6e:53:39:44:e8:9a:
12:ca:d0:ea:cc:1d:fe:30:2e:25:5d:bc:12:7a:e1:64:b8:32:
f9:50:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:08:40 2025 by rpki-client