Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/aSUGfC8WVdHXrkeRZf6pzwHN77M.roa
File: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (raw, json)
Hash identifier: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=
Subject key identifier: 69:25:06:7C:2F:16:55:D1:D7:AE:47:91:65:FE:A9:CF:01:CD:EF:B3
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 019424B28298BCA8D54F6BE750F595FEA3A7
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/aSUGfC8WVdHXrkeRZf6pzwHN77M.roa
Signing time: Thu 02 Jan 2025 01:47:46 +0000
ROA not before: Thu 02 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198435
IP address blocks: 85.208.248.0/24 maxlen: 24
85.208.249.0/24 maxlen: 24
85.208.250.0/24 maxlen: 24
85.208.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:82:98:bc:a8:d5:4f:6b:e7:50:f5:95:fe:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Jan 2 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6925067c2f1655d1d7ae479165fea9cf01cdefb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:cf:39:94:f7:f1:fc:34:20:28:16:03:7d:
66:b9:b1:34:10:6a:1e:18:26:38:c7:ab:78:85:8b:
6a:4a:ac:3f:4a:35:17:a6:62:93:5f:ec:28:a6:7a:
9c:90:14:da:a7:32:86:59:bc:76:ad:56:e1:d0:06:
2f:60:04:1c:51:96:fc:e5:37:9b:71:36:f5:65:b5:
b6:13:22:e1:3f:1e:3a:5b:19:30:c0:ae:b7:ee:9b:
36:7a:04:7c:02:ae:e3:cb:e8:b5:f1:6b:58:00:6d:
f2:36:aa:fe:cf:8f:a3:2a:d1:b6:5d:78:5c:f0:26:
f3:5d:29:ab:24:ea:bb:d0:75:2d:52:c6:b0:35:dd:
7d:c2:a1:29:27:f3:90:12:91:66:a2:c5:bc:ce:61:
f9:1c:9d:0c:dc:46:d9:8b:6e:bd:cb:1a:b1:7e:27:
1a:91:05:04:e4:b1:d7:c1:67:79:0f:03:ef:53:72:
94:1d:38:82:48:17:02:8e:9d:fa:14:79:8e:6e:a3:
ae:99:27:a2:80:2d:57:c6:c1:e4:a0:1b:a5:f2:77:
bd:82:ec:45:1b:1d:4d:5d:22:32:62:bb:f9:38:61:
13:e2:9b:69:9f:3e:6e:d6:d6:bc:4c:81:cc:be:0b:
c0:74:e7:3c:e1:81:be:12:c2:f8:e6:ed:8a:be:ee:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:06:7C:2F:16:55:D1:D7:AE:47:91:65:FE:A9:CF:01:CD:EF:B3
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/aSUGfC8WVdHXrkeRZf6pzwHN77M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.248.0/22
Signature Algorithm: sha256WithRSAEncryption
35:ec:de:9e:b3:29:ee:cf:90:e3:42:a5:8a:e5:d5:a9:a9:6a:
e5:b1:8c:2d:db:b5:91:9e:a7:65:a2:d5:7a:7c:40:3f:4a:f4:
60:bb:e2:51:61:a5:b1:6d:09:8e:80:03:38:3f:75:46:bf:e2:
5c:57:a1:8f:3b:52:35:93:6e:de:6a:59:c7:b5:8b:e3:60:43:
9c:2c:44:05:03:d0:94:21:41:35:26:74:ae:e8:86:4c:af:7e:
1c:2a:4a:b8:d0:f9:74:d7:21:61:63:d0:16:1f:ec:95:e0:ac:
55:ba:b6:d0:fb:89:fc:88:28:83:76:b6:9a:db:ee:ef:45:c7:
44:fe:cb:39:d4:74:70:72:31:04:6e:de:14:12:0c:e3:89:ba:
b2:0c:25:46:59:b7:a3:72:c9:89:77:29:45:cd:ea:c1:b1:d3:
3f:be:7f:ae:0b:eb:af:60:ff:91:8b:21:4d:9d:de:17:44:52:
a1:af:48:d7:82:a1:cc:78:02:c1:eb:e1:52:71:3e:0d:85:42:
ee:60:7e:ca:d5:29:5f:d7:8b:16:ec:5b:a6:e7:ef:f4:10:7f:
ed:82:de:99:85:1d:31:e7:df:2f:fc:37:be:27:6c:8d:d7:47:
e6:eb:a6:c3:f8:d8:9a:10:5e:ee:b3:39:33:55:72:18:d7:23:
e9:c9:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:09:56 2025 by rpki-client