Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/R0Y_8680398wT7CzR2ae2QTPR2w.roa
File: R0Y_8680398wT7CzR2ae2QTPR2w.roa (raw, json)
Hash identifier: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=
Subject key identifier: 47:46:3F:F3:AF:34:DF:DF:30:4F:B0:B3:47:66:9E:D9:04:CF:47:6C
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019420D5B3A5FBB64D0A60BE4E8AABB0115B
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/R0Y_8680398wT7CzR2ae2QTPR2w.roa
Signing time: Wed 01 Jan 2025 07:47:43 +0000
ROA not before: Wed 01 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56911
IP address blocks: 176.58.80.0/21 maxlen: 21
185.49.248.0/22 maxlen: 24
185.146.64.0/24 maxlen: 24
185.169.236.0/23 maxlen: 24
185.169.236.0/24 maxlen: 24
185.169.237.0/24 maxlen: 24
185.169.238.0/23 maxlen: 24
195.234.92.0/24 maxlen: 24
2a01:a620::/32 maxlen: 48
2a0a:7300::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b3:a5:fb:b6:4d:0a:60:be:4e:8a:ab:b0:11:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47463ff3af34dfdf304fb0b347669ed904cf476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:c5:4e:54:4a:43:ea:34:63:d2:74:b3:7e:
37:34:d2:c8:38:29:24:fe:87:1c:0c:9f:ae:4d:9a:
dd:4a:c6:c0:6b:5a:b9:39:63:36:6d:9b:39:a0:49:
51:ac:31:4c:70:e0:87:e9:e9:a7:9f:4d:c1:75:22:
c7:06:ac:b1:3d:65:c0:f0:09:be:13:98:18:f9:bb:
d7:ad:5c:ac:3e:a2:25:d2:ff:83:25:fc:3e:81:a0:
92:94:d4:8c:73:8c:43:eb:4e:c6:b5:43:37:98:69:
dc:f9:14:59:95:d3:9f:10:0c:ba:75:91:6c:45:37:
5c:d3:85:77:c1:a4:a0:c8:8f:b9:b9:07:e4:63:b8:
05:d4:5c:61:7d:40:71:15:61:e6:69:9f:f1:31:66:
c6:c8:0d:c8:d4:45:ae:10:39:17:cb:91:7b:b9:e7:
b2:0d:91:19:f0:a1:02:6f:c3:41:ee:12:37:ad:b4:
bb:10:b7:c7:b2:2c:d1:7c:ad:0e:98:c2:ba:4e:0a:
d4:8c:b6:18:d2:a5:31:4b:4c:9c:bf:37:fc:0f:b0:
df:a7:11:01:a5:8a:20:22:09:fe:ff:be:94:fe:9b:
95:59:5d:b7:0e:64:f1:f1:76:82:d9:54:32:6f:bb:
7c:bf:43:94:09:a6:87:03:38:da:8c:25:ca:d8:90:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:46:3F:F3:AF:34:DF:DF:30:4F:B0:B3:47:66:9E:D9:04:CF:47:6C
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/R0Y_8680398wT7CzR2ae2QTPR2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.80.0/21
185.49.248.0/22
185.146.64.0/24
185.169.236.0/22
195.234.92.0/24
IPv6:
2a01:a620::/32
2a0a:7300::/32
Signature Algorithm: sha256WithRSAEncryption
2f:74:4e:aa:9c:f8:97:98:33:85:3e:1b:0a:01:02:d2:a4:a5:
85:5e:19:73:d9:dd:c4:6c:bf:76:c1:2c:38:25:7b:33:64:46:
6c:35:a0:49:fc:a1:fe:e0:8b:cd:b1:68:26:bc:e6:89:90:5a:
43:3a:a6:f9:e4:35:1c:9f:f2:73:53:b4:91:fe:1f:f6:cb:b7:
da:18:d7:a4:43:16:fa:8c:be:90:ca:9d:80:ee:fc:70:01:2b:
1d:32:6a:e4:56:d9:05:f7:57:f9:bd:7f:dc:77:4d:a8:44:f7:
d6:bd:35:83:03:2d:a5:08:d4:1f:d2:8f:56:9f:d1:92:54:4f:
b2:40:05:a4:2a:06:4b:3c:f8:fd:79:3e:39:0f:e5:64:2d:f2:
f2:58:31:1d:31:90:94:be:36:2f:45:f4:c4:90:8e:d9:49:88:
a4:63:38:87:19:62:bd:eb:50:89:ab:68:b9:43:03:ab:b5:e2:
9b:e8:a0:e0:30:df:c3:13:fc:7c:33:70:cd:97:8e:5c:40:ac:
f0:7b:ae:45:47:a8:9b:c8:92:99:e6:8c:77:f6:5e:c8:16:82:
91:e0:e9:19:13:ef:c5:e8:95:ee:46:f9:ef:43:b2:05:14:44:
97:2e:61:93:6b:c0:b2:fe:3b:6f:81:35:2b:02:bf:a3:6a:0c:
0a:37:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:26:44 2025 by rpki-client