Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa
File: rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa (raw, json)
Hash identifier: 0aZ57+4HyGjyCi96NHu8lhNftEY/9TGUygRLm0qsl7Q=
Subject key identifier: AC:B7:13:FF:FD:72:D9:9D:0C:09:20:62:4F:AF:FE:60:4E:10:F7:52
Certificate issuer: /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial: 0194221F455631ABEB35BF960619E3B7E323
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa
Signing time: Wed 01 Jan 2025 13:47:42 +0000
ROA not before: Wed 01 Jan 2025 13:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24663
IP address blocks: 37.200.120.0/21 maxlen: 24
45.150.204.0/23 maxlen: 24
45.150.207.0/24 maxlen: 24
80.250.224.0/20 maxlen: 24
94.127.216.0/21 maxlen: 24
178.23.224.0/21 maxlen: 24
185.30.228.0/22 maxlen: 24
2a03:8080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:45:56:31:ab:eb:35:bf:96:06:19:e3:b7:e3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
Validity
Not Before: Jan 1 13:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acb713fffd72d99d0c0920624faffe604e10f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:14:47:c3:98:a0:9e:13:7f:ef:f9:c8:0d:
e4:21:dd:e5:1b:99:35:52:0a:1e:5c:3f:40:4f:94:
10:ca:5b:4a:20:61:57:05:1e:73:ae:84:b3:9e:0d:
01:af:fc:37:f9:14:db:cf:8c:50:9b:62:30:eb:fd:
9f:a4:4e:d0:77:22:a2:85:80:95:fd:da:53:d0:9e:
28:a4:5e:81:30:91:b9:c7:c6:d7:71:5e:19:04:e8:
fb:f9:8b:d7:47:f9:a7:ba:96:5f:f1:c9:36:4c:4c:
a7:5f:0a:9a:24:dd:70:64:48:19:fa:f8:31:09:af:
99:ad:83:53:3f:06:84:ef:79:4e:1a:01:3b:70:27:
a7:41:e1:a0:62:52:f3:48:a2:5f:c2:47:d5:57:fb:
14:1c:f6:b1:ac:be:35:88:ed:7c:32:c4:16:29:fc:
a2:af:bf:f1:6b:19:73:d1:f3:e6:74:ec:6f:a7:8e:
f7:d8:1d:cd:a9:15:48:34:0e:28:55:45:87:06:38:
e4:12:23:71:41:43:fd:d4:ca:62:b4:25:01:10:8f:
9e:e2:96:57:57:86:5f:75:4b:c5:8e:95:7f:ac:51:
81:60:58:88:72:40:2a:77:64:c9:49:0f:ef:db:8e:
e7:c1:82:1f:d4:71:21:ca:55:f1:90:5c:2e:c8:78:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:13:FF:FD:72:D9:9D:0C:09:20:62:4F:AF:FE:60:4E:10:F7:52
X509v3 Authority Key Identifier:
keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.120.0/21
45.150.204.0/23
45.150.207.0/24
80.250.224.0/20
94.127.216.0/21
178.23.224.0/21
185.30.228.0/22
IPv6:
2a03:8080::/32
Signature Algorithm: sha256WithRSAEncryption
83:09:c6:33:99:21:5a:dd:e9:69:50:6d:32:ad:05:21:03:08:
e8:be:0a:77:16:06:4f:d2:e6:d8:ee:17:9b:99:48:57:28:66:
60:77:b2:ad:9b:18:ba:5e:8b:df:dd:a2:30:ac:f5:f0:11:5f:
15:36:13:e0:cd:9c:a2:24:2e:1b:ca:cb:a4:1d:5c:33:d2:5b:
9f:d0:72:78:01:26:0b:35:68:70:05:c4:d6:b3:fc:5b:e7:25:
85:e0:f8:4f:de:fb:5e:22:9a:7b:f6:7a:16:20:6d:8b:c8:a9:
2f:c3:10:a3:e7:d9:b5:63:33:12:08:a2:6c:2e:6c:7d:f1:9f:
81:45:6c:3b:72:40:49:c0:7c:3b:01:82:d4:de:ba:4a:ca:7a:
d2:f1:63:c0:b0:55:d0:00:e4:2d:96:5d:66:6b:d9:46:3b:69:
63:ea:39:6f:6c:56:c2:f3:20:1e:95:c0:b3:1f:af:e3:7e:9c:
de:9f:d1:9f:61:6d:f4:40:ef:40:1a:79:43:c1:8f:c1:09:c0:
d2:78:e7:39:d2:27:a4:d1:fc:db:f9:6b:84:1b:18:95:96:3b:
3b:33:18:1c:eb:04:59:46:69:9c:27:ec:e9:42:bd:9f:25:01:
b9:66:62:95:62:0a:ba:6b:d1:57:12:e7:96:8a:c7:31:08:15:
93:dc:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:34 2025 by rpki-client