Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/f_cRzhAwjQsRWIpABQIN6zrQUL4.roa
File: f_cRzhAwjQsRWIpABQIN6zrQUL4.roa (raw, json)
Hash identifier: zcaLl6mU3qlNMRBKmml1zlcCseGH1tjLvTej/h7Zeow=
Subject key identifier: 7F:F7:11:CE:10:30:8D:0B:11:58:8A:40:05:02:0D:EB:3A:D0:50:BE
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019437D8BF2BA10F23A63DF045E6D4DDAB37
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/f_cRzhAwjQsRWIpABQIN6zrQUL4.roa
Signing time: Sun 05 Jan 2025 19:02:19 +0000
ROA not before: Sun 05 Jan 2025 19:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203993
IP address blocks: 185.54.92.0/22 maxlen: 24
185.54.92.0/23 maxlen: 23
185.54.92.0/24 maxlen: 24
2a00:8640::/29 maxlen: 48
2a00:8640::/32 maxlen: 32
2a00:8642::/32 maxlen: 32
2a00:8642:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:37:d8:bf:2b:a1:0f:23:a6:3d:f0:45:e6:d4:dd:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 5 19:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ff711ce10308d0b11588a4005020deb3ad050be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:66:7d:e4:74:6a:74:64:57:66:d0:f8:6f:
8e:d5:74:0d:9c:c5:38:c7:c5:23:f3:41:2e:2b:fb:
01:37:00:83:29:ed:b3:e0:ba:b9:b9:27:62:06:e8:
4f:34:97:2c:4e:ac:33:dd:d9:8e:db:fa:ed:c3:3a:
1a:f0:f6:ad:ac:61:64:ae:24:a8:bd:78:99:82:1d:
5d:17:9c:dc:dd:7b:78:7b:99:d8:f7:aa:3f:d8:18:
5c:90:d8:92:fd:69:9d:89:f6:0b:02:8e:83:53:37:
55:5a:9f:65:62:29:f3:31:ad:ed:26:ed:43:6e:e9:
37:37:dd:22:af:27:7b:b7:81:33:03:3f:bf:97:76:
f3:ba:fd:a0:82:f7:b7:c4:3d:77:fc:fa:b0:2c:09:
5f:e6:29:b6:03:25:c8:d4:35:e7:63:52:fe:c5:95:
35:e2:34:bb:ee:56:34:84:62:44:12:b6:18:10:75:
4d:41:00:ef:a1:1f:27:aa:65:fc:c2:7c:75:6b:65:
7c:d1:65:db:bb:fb:52:f3:d9:ea:07:27:27:18:4c:
87:c9:a4:f8:95:a9:f5:76:bf:e4:c9:d3:c1:e3:6a:
e6:f5:35:ab:1f:29:16:61:7e:7a:aa:e1:6e:11:a2:
13:f1:b6:26:ae:23:61:b6:11:39:1f:ed:ec:ef:1e:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:11:CE:10:30:8D:0B:11:58:8A:40:05:02:0D:EB:3A:D0:50:BE
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/f_cRzhAwjQsRWIpABQIN6zrQUL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/22
IPv6:
2a00:8640::/29
Signature Algorithm: sha256WithRSAEncryption
7d:44:15:e2:c4:86:4d:df:ad:b8:e0:31:ab:41:b8:80:cd:55:
5b:13:d1:e2:b4:f3:18:cb:43:b4:77:77:c3:8f:17:40:f3:e6:
58:6a:e2:52:ba:cc:84:0a:1e:06:5f:e4:3d:6a:5d:66:37:42:
ef:4c:b9:81:0a:83:a6:39:fd:b4:5f:18:ab:3b:43:ed:e5:ba:
44:c4:7f:05:7c:3a:2e:20:06:10:a8:2d:e5:94:ec:70:ee:1e:
32:ae:6f:06:51:b7:f4:d8:88:af:64:75:4c:9a:16:35:5a:22:
9b:30:ea:b2:9e:c5:7b:33:7b:00:c7:37:61:e8:27:d1:5f:ac:
fa:89:a5:3e:b4:74:d2:3a:b9:4d:9f:4b:3c:17:41:1f:d0:00:
52:cc:aa:79:58:9f:e7:3e:40:c8:48:af:4a:5d:6d:51:a1:39:
c7:25:6b:74:5b:76:8c:22:31:b7:e7:5a:78:b1:84:d5:50:04:
90:e6:54:d3:33:8a:77:3b:c7:3d:f2:d6:2f:d0:27:bb:a2:fa:
b1:ed:ea:d7:7e:23:80:53:e6:d1:c8:1f:0a:ee:a6:8b:b5:c6:
1d:c5:13:ba:df:b0:ee:8d:73:64:28:93:6a:d3:0a:91:92:ae:
86:60:c9:c2:7d:6e:da:d4:40:ee:76:04:a9:2d:a5:c3:86:3e:
11:91:c1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:28 2025 by rpki-client