Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/TH3iTyQHdiPtwrxen-ik0aBRXKI.roa
File: TH3iTyQHdiPtwrxen-ik0aBRXKI.roa (raw, json)
Hash identifier: 9e3J8Nl+Dc6K9RH7KE3BYQUYhRYoAJ/tNPR6z9IBOhE=
Subject key identifier: 4C:7D:E2:4F:24:07:76:23:ED:C2:BC:5E:9F:E8:A4:D1:A0:51:5C:A2
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 019421B1F87C3EA49E721FDCC4B40B763574
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/TH3iTyQHdiPtwrxen-ik0aBRXKI.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50795
IP address blocks: 185.83.80.0/22 maxlen: 22
185.83.80.0/23 maxlen: 23
185.83.80.0/24 maxlen: 24
185.83.81.0/24 maxlen: 24
185.83.82.0/23 maxlen: 23
185.83.82.0/24 maxlen: 24
185.83.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:7c:3e:a4:9e:72:1f:dc:c4:b4:0b:76:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c7de24f24077623edc2bc5e9fe8a4d1a0515ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:04:ff:2e:02:61:bf:1c:e1:c8:40:87:3d:
33:03:53:ab:6c:b0:ef:be:08:79:0c:3d:43:39:1c:
22:d4:1a:d6:d4:5b:ed:fa:a2:57:ef:b7:af:7e:b6:
02:9c:51:49:c4:08:e0:e7:76:5a:39:52:a3:52:39:
eb:fb:b2:d1:2c:63:cd:5f:ab:23:70:d9:25:8f:8c:
8b:33:be:87:c4:9d:f0:c8:30:72:71:3c:30:da:88:
40:2d:13:8f:7e:b2:cc:3b:da:9e:87:63:09:a7:32:
06:c1:5c:80:17:76:6e:73:81:68:a7:73:48:75:9e:
4b:11:43:dd:ba:bd:ea:50:18:a7:1b:af:ed:19:69:
31:d5:e7:a7:da:31:6b:41:85:3c:63:f4:05:c2:b7:
47:19:e5:dd:9a:f5:c8:0d:01:1a:51:f0:c8:97:83:
3e:3b:f2:94:34:08:39:79:96:48:e3:a2:09:bd:04:
2d:12:52:08:aa:6f:88:5f:81:aa:17:cc:82:7b:d0:
73:18:f7:bb:79:86:d0:52:a9:29:97:8e:78:0a:ce:
36:25:85:fc:c6:26:fe:a5:aa:13:dd:9c:3c:c5:d2:
61:16:41:04:4a:cf:65:32:ba:45:4f:02:75:93:d2:
0d:c6:04:1c:9f:1e:81:7b:1c:4b:6b:6b:52:ab:7e:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:E2:4F:24:07:76:23:ED:C2:BC:5E:9F:E8:A4:D1:A0:51:5C:A2
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/TH3iTyQHdiPtwrxen-ik0aBRXKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.80.0/22
Signature Algorithm: sha256WithRSAEncryption
25:6e:8e:69:6a:34:ab:18:c2:97:2b:6f:9c:44:59:b7:00:23:
e6:2e:ca:d5:99:9f:8b:2b:b7:09:62:d7:1b:a2:aa:fe:45:c0:
c1:9c:65:d9:85:b6:eb:7d:64:a1:2b:c5:61:e8:b5:95:18:43:
9e:1e:9b:05:2a:85:a0:5e:24:74:f3:92:ac:51:58:10:f5:75:
65:79:ed:b7:4d:8e:d9:94:6f:99:46:28:77:96:22:47:80:a2:
71:91:2c:23:7a:5b:0c:c8:89:f0:bf:23:8c:ae:f5:2d:30:46:
d2:30:c3:f4:72:d2:b7:b9:1c:5c:40:df:56:8c:37:6f:91:27:
7e:5c:96:3c:80:6c:12:b3:21:6f:8f:a5:69:7b:bb:a9:ef:88:
e1:be:53:9b:6b:c2:b7:c2:fd:a9:fd:f5:51:fe:b3:88:36:b2:
ad:f9:3a:9f:e3:17:c1:8c:2d:01:81:63:57:78:d1:c7:0d:d3:
2c:3f:03:f0:50:14:b4:7b:76:63:5c:4f:63:55:09:72:17:11:
16:bb:23:b8:22:c3:92:56:f9:5b:d2:74:0c:a1:e5:ef:ca:84:
41:34:8a:22:c3:0b:cb:e9:a2:c3:59:11:d4:52:a2:5a:de:c0:
63:a1:95:e5:74:88:f3:02:82:a5:a5:a7:58:11:97:7d:1f:6f:
67:76:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:28:33 2025 by rpki-client