Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/sBAxckkYtrfgcrfBR2IV3YAZOPc.roa
File: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (raw, json)
Hash identifier: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=
Subject key identifier: B0:10:31:72:49:18:B6:B7:E0:72:B7:C1:47:62:15:DD:80:19:38:F7
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0194214417669B829C2674FCFB3B6391DF72
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/sBAxckkYtrfgcrfBR2IV3YAZOPc.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47902
IP address blocks: 31.223.240.0/20 maxlen: 24
46.19.232.0/21 maxlen: 24
46.254.232.0/21 maxlen: 24
82.193.32.0/19 maxlen: 24
93.189.184.0/21 maxlen: 24
185.100.108.0/22 maxlen: 24
185.202.184.0/22 maxlen: 24
2a02:9a8::/29 maxlen: 48
2a03:6800::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:17:66:9b:82:9c:26:74:fc:fb:3b:63:91:df:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b01031724918b6b7e072b7c1476215dd801938f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:21:5b:34:e6:a2:db:5c:c8:32:ae:6d:14:
a4:9f:f9:15:31:a5:fd:25:c2:be:77:eb:cd:2a:90:
76:11:68:b5:5c:6c:27:61:e0:56:a7:96:23:7e:38:
a4:09:3f:f9:cb:8a:c8:84:73:83:68:1b:82:68:ab:
45:c9:ae:83:e2:65:82:7e:d3:4f:a5:3b:d5:b1:eb:
00:06:85:1c:9d:7b:11:6c:38:69:51:0d:a1:7a:e0:
b9:a1:7b:7d:31:0b:ac:74:63:f9:9e:f1:39:38:d7:
fd:53:b4:e9:1c:03:e6:42:7f:86:f9:19:8c:53:74:
1d:36:51:57:26:94:22:d3:4b:71:07:b4:46:91:5e:
00:c4:74:e5:14:7b:81:9b:5d:7c:8f:ae:9f:3c:af:
9f:27:d5:41:f1:e5:e4:d1:46:95:2e:2e:e3:77:d5:
04:96:88:3d:c1:73:6f:87:9c:fa:22:b8:e1:d8:a4:
ac:8a:86:c2:a9:1a:e3:dd:44:0c:7c:51:78:24:1d:
32:f0:dc:7f:8d:de:87:3a:06:96:d1:0a:95:d1:a6:
cd:bb:7c:6b:cc:5f:3e:ee:e9:20:a4:36:af:4e:0f:
51:fe:c2:80:ee:95:e3:a2:04:cd:7f:14:6e:51:7b:
3d:01:d7:8a:d8:b6:1c:99:e8:11:7d:ee:6d:bc:ed:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:10:31:72:49:18:B6:B7:E0:72:B7:C1:47:62:15:DD:80:19:38:F7
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/sBAxckkYtrfgcrfBR2IV3YAZOPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.240.0/20
46.19.232.0/21
46.254.232.0/21
82.193.32.0/19
93.189.184.0/21
185.100.108.0/22
185.202.184.0/22
IPv6:
2a02:9a8::/29
2a03:6800::/29
Signature Algorithm: sha256WithRSAEncryption
01:42:de:52:f4:b8:3d:64:35:58:95:40:e5:47:6d:5c:87:ff:
f7:86:f0:49:d2:12:7e:41:1d:e5:78:f9:25:15:87:b8:dd:48:
02:a3:6c:b4:d0:1a:83:d5:6d:42:44:34:8d:ca:b9:1d:f6:a0:
88:20:27:40:91:2e:8e:9c:c5:cc:66:aa:26:df:87:33:2f:cb:
3a:d6:fc:7b:65:1f:70:1e:bd:4b:0e:75:88:5a:9b:b4:7d:9a:
0d:b5:8b:3b:b5:4f:c7:6f:4d:0f:52:85:9e:a6:67:c6:65:76:
38:11:e0:9c:bd:ec:b1:90:9c:ab:ff:5f:5f:9e:d8:f6:59:18:
e6:b9:0e:cd:6b:d8:58:5e:e2:02:2e:3c:5d:a7:8e:aa:b2:1c:
9f:f7:dc:4e:6c:e6:4f:f6:c9:99:30:a3:79:c0:9b:da:bc:e6:
57:d5:7a:2e:25:54:7e:7f:bf:fa:2a:2c:d1:d2:59:4e:1c:c2:
e5:8e:11:a4:a6:c3:38:77:4b:b1:ff:ac:80:e7:3c:7e:23:ed:
14:e8:d7:52:f1:e5:c4:2e:05:66:27:65:2f:4f:b0:3d:85:d7:
21:cd:0d:70:70:dc:79:dd:0f:32:33:25:6d:97:58:14:c0:b3:
ee:9a:d1:c0:f3:fa:44:58:5d:1c:56:bf:20:1a:82:79:0e:5d:
d1:d9:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:37 2025 by rpki-client