Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa
File: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (raw, json)
Hash identifier: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=
Subject key identifier: D3:08:0B:D3:C4:11:D9:38:3C:0C:3E:32:9B:DC:A5:D9:C5:A0:93:86
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019427458E3A5D0416C0E25CF7D92701EA72
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa
Signing time: Thu 02 Jan 2025 13:47:37 +0000
ROA not before: Thu 02 Jan 2025 13:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47527
IP address blocks: 45.95.208.0/24 maxlen: 24
46.30.120.0/21 maxlen: 21
62.69.152.0/21 maxlen: 21
91.223.235.0/24 maxlen: 24
91.230.239.0/24 maxlen: 24
178.23.176.0/21 maxlen: 21
185.31.76.0/22 maxlen: 22
185.126.152.0/23 maxlen: 23
185.208.212.0/22 maxlen: 24
188.116.39.0/24 maxlen: 24
194.247.61.0/24 maxlen: 24
195.182.36.0/24 maxlen: 24
213.142.140.0/23 maxlen: 23
2a00:1b18::/29 maxlen: 32
2a00:1cf0::/29 maxlen: 32
2a00:b920::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:8e:3a:5d:04:16:c0:e2:5c:f7:d9:27:01:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jan 2 13:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3080bd3c411d9383c0c3e329bdca5d9c5a09386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:52:0a:68:b9:bc:81:eb:5b:fb:e5:bd:ca:
21:b5:c2:99:0b:c1:05:87:2b:79:6e:ae:29:79:3c:
86:30:d0:02:8a:07:32:8c:95:62:d1:db:36:f1:ff:
01:1f:f6:23:1c:aa:a1:0c:d8:d3:8d:22:52:e3:6a:
a0:6c:75:43:72:eb:a7:13:53:0b:51:e3:85:bf:30:
0f:55:7b:72:ea:34:9e:2f:55:d1:1f:c1:f8:e1:9e:
30:f5:21:2c:70:bd:4a:d1:91:bd:19:7d:aa:f2:02:
6e:fa:3c:62:7b:38:b9:72:a5:b2:61:5a:bf:4b:09:
82:ea:15:ef:38:a9:de:46:0f:56:e4:88:b1:ae:61:
68:ec:ad:11:4e:5d:02:d1:ba:a6:ca:49:1d:c0:57:
26:f0:6b:77:19:92:3c:16:e6:13:42:08:a5:4b:8f:
6b:b8:e8:44:cf:1c:5b:31:65:be:05:93:94:48:c9:
fe:06:8c:26:8f:50:51:42:e9:fb:ce:53:15:da:4f:
ed:5d:cb:87:8e:ea:22:b0:e7:d8:da:6c:a6:87:9d:
ba:1c:db:38:e4:9f:92:b8:3d:c8:29:66:84:c5:20:
20:6a:6d:f5:cb:73:fd:0a:e7:c7:62:6c:6a:9d:bf:
b7:60:a7:16:e7:a7:dd:0a:60:d5:52:b2:dc:4e:fd:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:08:0B:D3:C4:11:D9:38:3C:0C:3E:32:9B:DC:A5:D9:C5:A0:93:86
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.208.0/24
46.30.120.0/21
62.69.152.0/21
91.223.235.0/24
91.230.239.0/24
178.23.176.0/21
185.31.76.0/22
185.126.152.0/23
185.208.212.0/22
188.116.39.0/24
194.247.61.0/24
195.182.36.0/24
213.142.140.0/23
IPv6:
2a00:1b18::/29
2a00:1cf0::/29
2a00:b920::/29
Signature Algorithm: sha256WithRSAEncryption
31:a0:5a:35:94:79:66:7a:c0:56:3e:c2:ca:2e:7c:7f:67:ac:
bc:65:05:a7:ee:8d:da:22:6e:d3:0a:0c:f8:84:e7:78:4f:0f:
3b:34:d3:9d:3b:75:c0:69:2d:85:1b:c3:ee:ed:a1:54:24:68:
18:25:aa:fc:ce:f7:d4:99:e8:96:1e:db:b4:20:79:98:b8:f4:
35:ee:40:e9:59:0a:54:b2:a7:8c:fa:e7:58:00:00:d5:14:47:
0c:8c:f8:67:ae:81:f7:d9:22:d4:48:63:67:7e:b2:65:0f:af:
86:a7:7f:d1:46:61:95:ac:a5:aa:5b:95:a2:f0:79:1d:72:9e:
75:e6:21:62:a9:42:f1:ee:c3:6e:b1:0d:10:70:76:f8:59:f6:
4c:72:04:b6:20:88:f7:77:6b:d9:ec:72:05:4c:fa:a2:28:5d:
0b:8c:48:1f:fd:7b:9c:e6:a7:84:2f:5f:2d:dd:3b:dc:0f:67:
cf:07:3a:a0:70:e2:50:fb:6d:d8:60:ad:34:bc:9e:eb:1b:87:
8b:dc:e8:43:f4:a6:13:ea:43:83:98:69:a0:4b:09:36:ff:c4:
35:db:d4:77:57:59:12:49:4d:26:aa:19:d4:6a:ae:6a:30:18:
92:f0:69:9c:5f:3d:59:60:45:a6:03:89:ea:d1:e4:ad:f0:12:
ab:34:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:08:34 2025 by rpki-client