Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u52SRo0lh762kH_N6-uzyAKBEjE.roa
File: u52SRo0lh762kH_N6-uzyAKBEjE.roa (raw, json)
Hash identifier: Tq3c8/gUXIn66xFwXAG8n2qhXBYcWHyOqjTHznUjBtE=
Subject key identifier: BB:9D:92:46:8D:25:87:BE:B6:90:7F:CD:EB:EB:B3:C8:02:81:12:31
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194699038AA20B0C0E66FFB13D0AC228034
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u52SRo0lh762kH_N6-uzyAKBEjE.roa
Signing time: Wed 15 Jan 2025 10:44:06 +0000
ROA not before: Wed 15 Jan 2025 10:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31479
IP address blocks: 45.10.104.0/22 maxlen: 22
49.0.184.0/21 maxlen: 21
80.66.116.0/24 maxlen: 24
89.42.71.0/24 maxlen: 24
89.45.209.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
185.28.48.0/23 maxlen: 23
185.216.128.0/22 maxlen: 22
201.77.58.0/24 maxlen: 24
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:90:38:aa:20:b0:c0:e6:6f:fb:13:d0:ac:22:80:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 15 10:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb9d92468d2587beb6907fcdebebb3c802811231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1d:a8:e4:db:bf:4a:f8:6f:39:85:1a:5a:c5:
47:0c:de:d6:0f:43:d9:9c:79:5d:d8:57:bf:3a:a3:
5e:b7:11:cd:2b:f2:40:86:7f:fd:96:76:90:f8:46:
ae:cc:5e:d3:98:70:1f:7f:5f:cb:44:54:08:d7:2d:
5c:91:90:2e:b9:a5:2d:d7:33:96:2a:31:a1:06:6c:
c8:6a:be:f0:d9:d9:c9:26:74:ed:f8:6d:d2:16:12:
e8:cb:58:17:20:fe:85:b5:b8:21:db:fb:9e:76:bc:
71:4d:83:67:76:47:fe:aa:6e:f7:75:6b:0e:e2:ac:
35:28:a2:83:36:17:9a:89:ae:2b:70:5e:65:bc:38:
e3:4e:c0:49:5b:8e:0d:8f:de:a1:cf:c2:8f:17:98:
52:c6:48:6b:c4:5d:76:95:0b:74:ca:b2:c1:50:0e:
0c:a3:28:fc:20:ec:b2:d8:54:da:20:1c:b4:9e:15:
65:ec:0c:f8:cf:61:3f:28:8f:c2:35:de:04:76:da:
f1:7d:21:b5:dc:d3:55:3d:f9:7d:24:dc:92:b6:5e:
4b:61:db:c8:b7:db:5b:38:91:9c:31:68:1f:47:c2:
57:6a:cc:88:53:f4:38:0c:de:53:f5:e6:bb:24:3f:
12:00:eb:76:a4:9e:0c:64:6f:96:d0:28:00:7a:8e:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:92:46:8D:25:87:BE:B6:90:7F:CD:EB:EB:B3:C8:02:81:12:31
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/u52SRo0lh762kH_N6-uzyAKBEjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.104.0/22
49.0.184.0/21
80.66.116.0/24
89.42.71.0/24
89.45.209.0/24
94.198.46.0/24
178.19.32.0/23
185.28.48.0/23
185.216.128.0/22
201.77.58.0/24
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
10:b5:64:db:cf:65:10:b0:09:7c:5c:68:0d:3f:5a:e5:28:e7:
9e:3d:70:9d:c8:41:85:1c:71:40:9b:8d:ff:eb:67:55:ab:e3:
9f:4c:0f:92:bf:fb:cd:a8:77:ec:f2:af:b1:7a:c8:16:3d:54:
26:70:a7:15:1a:12:13:15:a9:d3:f3:a0:e1:c2:29:dc:33:9a:
2c:c1:0a:20:24:81:4b:9a:00:d6:aa:d4:7d:6f:58:71:18:76:
d9:88:bd:3f:1c:0e:1e:d2:65:af:b3:72:82:28:e3:56:7a:41:
0d:cc:16:81:fa:db:ac:5e:7c:f2:07:10:41:e6:2a:07:76:d1:
ab:65:ce:0d:89:41:d2:ea:f9:d7:fe:78:d2:c4:a7:f6:a2:bd:
18:3e:5e:8b:af:d7:23:34:56:2c:0a:2b:13:ac:7c:1d:97:b6:
d0:d2:c4:92:91:3f:29:ca:6d:56:f5:75:9d:6c:3e:72:ca:05:
fc:03:91:b1:cd:8c:5b:84:de:2c:60:b3:79:0c:9a:17:0c:9a:
1a:5c:cd:e8:70:c4:4a:f8:14:d0:fc:81:c6:91:07:9f:ee:f2:
2b:17:8f:b9:b9:9d:c4:3e:9e:12:5a:b1:35:73:22:6c:77:19:
c8:b6:b1:b8:55:ff:14:7a:ba:a4:30:dc:62:ca:9d:9b:bc:b1:
ec:64:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:42 2025 by rpki-client