Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/Uq_t_HrTAlRpJFoqPn4Yq2qw8Js.roa
File: Uq_t_HrTAlRpJFoqPn4Yq2qw8Js.roa (raw, json)
Hash identifier: qmO20uSLD7oT6YHuOERmRYn19JhLt54cbNRpSyqWJQc=
Subject key identifier: 52:AF:ED:FC:7A:D3:02:54:69:24:5A:2A:3E:7E:18:AB:6A:B0:F0:9B
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 0194206805C483F17F03B8D552ACCE248753
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/Uq_t_HrTAlRpJFoqPn4Yq2qw8Js.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33921
IP address blocks: 45.92.79.0/24 maxlen: 24
84.246.112.0/24 maxlen: 24
84.246.113.0/24 maxlen: 24
84.246.114.0/24 maxlen: 24
84.246.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:05:c4:83:f1:7f:03:b8:d5:52:ac:ce:24:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52afedfc7ad3025469245a2a3e7e18ab6ab0f09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:78:98:56:0b:44:16:5b:63:3c:bd:17:e4:
b3:68:14:85:32:89:15:35:34:f6:fb:ed:c5:0b:22:
3b:6a:52:97:95:ac:07:79:5c:9b:32:60:05:75:20:
eb:8d:17:75:f4:d8:92:44:b3:e4:90:fc:6f:94:e5:
61:2e:94:54:8b:d6:76:ec:5f:9d:8d:fb:cd:18:e0:
dc:f1:0e:47:12:71:b8:13:ac:e0:89:7a:8f:08:78:
e8:4b:ac:85:21:d5:71:06:23:a3:90:52:d8:97:ac:
de:e4:64:54:b6:0f:4c:ee:44:3c:78:02:31:2a:80:
fc:cb:7b:de:f8:3f:77:66:b2:05:5a:c7:ea:d0:f9:
21:5c:5d:06:b1:8f:ac:e0:14:fa:5c:42:05:c4:c9:
6c:28:e5:86:ee:fe:62:c5:b0:04:63:d8:9a:8b:47:
97:a4:58:5a:41:1d:ff:21:fe:27:ee:dd:48:2f:aa:
ef:73:97:65:b3:d3:13:10:54:b3:18:2d:8a:e4:50:
4b:c9:e2:a3:f6:22:db:9e:28:2a:b6:b1:7c:12:d1:
67:db:54:b9:d5:88:6e:e9:88:d3:aa:bc:ed:bd:fc:
90:b7:8e:b2:99:3d:38:81:44:9d:b7:75:37:9a:0e:
e0:a9:36:35:09:a5:8d:17:33:08:2a:d4:d4:9e:9e:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AF:ED:FC:7A:D3:02:54:69:24:5A:2A:3E:7E:18:AB:6A:B0:F0:9B
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/Uq_t_HrTAlRpJFoqPn4Yq2qw8Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.79.0/24
84.246.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:73:4a:82:be:12:76:e6:5d:ad:83:c6:a5:4f:d9:04:6f:3f:
fd:f6:1d:98:a0:79:f2:9d:67:1e:a1:ae:ee:2f:45:29:79:c2:
cf:a8:87:7a:5f:87:f0:ce:46:24:bf:05:3d:a3:86:f2:a4:46:
3c:b0:75:17:f5:6e:b0:32:49:20:b8:ee:51:ae:eb:8d:f1:4c:
46:6e:d8:b6:8e:89:cc:2f:72:5e:ea:28:56:3c:a7:be:24:19:
56:73:70:de:67:f5:cd:db:58:c5:df:85:62:e0:ce:94:07:2d:
15:1f:76:03:87:75:1a:c0:44:92:fb:4e:a6:07:b2:61:7c:d2:
39:be:80:98:ee:2a:5a:26:48:52:7e:72:ff:6a:47:2b:df:27:
6b:f9:df:17:c0:5a:1b:3f:8a:71:d9:2a:c7:bf:29:4a:a1:71:
84:b2:07:88:84:b6:b4:52:b9:ee:60:bc:a2:7d:c1:b3:0d:c7:
42:5c:10:dd:a9:71:b8:d0:b5:bf:51:5b:e2:5f:71:84:97:99:
17:5c:bf:a5:28:d9:be:9c:a7:cf:9b:bb:7c:10:21:ad:cc:43:
5e:97:2e:d5:65:ad:a4:b9:04:db:5c:e5:f8:85:46:97:e3:aa:
5e:f5:1d:60:0d:52:49:d1:84:c2:68:68:61:83:dd:96:9f:45:
52:fb:13:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:56 2025 by rpki-client