Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/xcdxsrUjEBV7WF24jzMhc8IqKVo.roa
File: xcdxsrUjEBV7WF24jzMhc8IqKVo.roa (raw, json)
Hash identifier: hBVbnIFi48onJ15EyX9//i4bQVarPZB24udvlAZ7VnQ=
Subject key identifier: C5:C7:71:B2:B5:23:10:15:7B:58:5D:B8:8F:33:21:73:C2:2A:29:5A
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0194214416D2E7E69A4A5F868788B2C69660
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/xcdxsrUjEBV7WF24jzMhc8IqKVo.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28716
IP address blocks: 45.89.180.0/22 maxlen: 24
46.243.32.0/21 maxlen: 24
46.243.38.0/24 maxlen: 24
77.95.136.0/21 maxlen: 24
77.95.136.0/24 maxlen: 24
78.159.192.0/21 maxlen: 24
78.159.216.0/21 maxlen: 24
80.94.112.0/20 maxlen: 24
80.94.116.0/24 maxlen: 24
185.41.212.0/22 maxlen: 22
185.61.12.0/22 maxlen: 24
217.19.144.0/20 maxlen: 24
217.19.151.0/24 maxlen: 24
217.19.156.0/24 maxlen: 24
2001:1bd0::/29 maxlen: 48
2a01:5d20::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:16:d2:e7:e6:9a:4a:5f:86:87:88:b2:c6:96:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5c771b2b52310157b585db88f332173c22a295a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:00:3f:e6:5b:26:ff:bb:73:28:70:18:54:
f9:2f:24:89:e3:d4:dc:4a:88:9e:8c:a1:20:f5:c8:
34:d9:3a:17:f2:f9:0f:90:c7:3e:33:d5:98:4b:59:
80:82:ee:2d:9f:c3:e7:1c:07:85:75:fc:5d:67:2d:
98:de:6a:56:b9:a6:93:2a:43:e0:b4:91:a7:04:b2:
51:13:5d:3f:fc:cd:d0:33:36:8b:a4:f1:8b:73:ce:
f4:d0:40:f3:7b:14:c7:20:8a:5c:63:a0:65:e5:5d:
fb:97:c3:02:e5:a9:d8:09:b8:69:7f:65:94:ae:17:
9b:66:d0:70:cf:d7:28:60:40:8e:14:e1:87:0f:b8:
77:7e:a7:97:90:c3:9b:82:ce:28:fb:1a:8d:a6:19:
0a:ce:85:19:ff:94:85:a5:e6:e6:5e:db:70:91:44:
17:e9:1f:0a:20:66:bb:3a:a1:44:f9:72:27:00:23:
f1:dc:04:ad:26:84:f3:36:8a:14:25:a0:dd:73:31:
f2:af:b2:03:fc:3c:92:cc:23:98:ec:bc:96:42:86:
66:5e:e9:4d:3e:9d:61:72:eb:64:a8:ca:d5:bc:e5:
6e:a1:59:bd:06:e3:f7:14:da:20:b7:56:e2:b1:8a:
9a:b4:2b:90:88:70:94:ba:8b:43:7e:fc:98:90:cc:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C7:71:B2:B5:23:10:15:7B:58:5D:B8:8F:33:21:73:C2:2A:29:5A
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/xcdxsrUjEBV7WF24jzMhc8IqKVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.180.0/22
46.243.32.0/21
77.95.136.0/21
78.159.192.0/21
78.159.216.0/21
80.94.112.0/20
185.41.212.0/22
185.61.12.0/22
217.19.144.0/20
IPv6:
2001:1bd0::/29
2a01:5d20::/29
Signature Algorithm: sha256WithRSAEncryption
3b:a9:e4:ef:c7:c0:3c:87:36:bb:fc:89:63:d6:b2:33:f1:0b:
c1:1c:0a:15:d5:ab:a7:5e:8e:e4:e4:46:2c:f3:5c:94:eb:b6:
d3:eb:03:1b:b0:e2:41:7d:61:bc:c6:87:37:87:d5:ed:ab:5c:
fb:69:06:1e:2d:e9:bd:fe:e6:84:d9:3d:ba:44:fb:1c:02:69:
4c:90:1b:ae:8b:d3:b8:dc:e1:8e:08:5c:60:a9:f2:f8:e2:ce:
3e:cc:71:f2:6c:b3:89:2f:03:01:33:a3:bb:d4:f6:39:16:ee:
c4:38:db:48:68:f7:98:7c:cf:bb:e2:f8:63:7a:f4:73:2d:72:
f8:87:c5:91:bd:79:e2:65:9b:84:61:c7:8b:8a:99:e0:1d:a6:
50:fd:66:b7:b9:8a:b4:dd:34:09:20:e2:21:2c:f7:2c:9c:76:
0f:e0:49:e1:e1:fa:85:2b:61:a3:ef:62:26:9d:2d:af:da:7c:
42:b0:d2:79:53:59:d9:ce:69:d2:c3:28:5b:7a:8d:ad:d3:b2:
0c:ac:82:eb:13:5e:46:48:28:aa:78:cf:f9:d1:33:74:c8:09:
85:67:54:ff:1f:dc:7f:2d:9d:af:24:15:d2:a1:aa:45:f1:59:
68:80:b6:da:ac:80:80:44:f9:79:96:98:1c:7e:f5:f6:12:85:
e2:c0:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:11 2025 by rpki-client