Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/B29MvHY6zeEvGzG4mIu0G_C1t3k.roa
File: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (raw, json)
Hash identifier: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=
Subject key identifier: 07:6F:4C:BC:76:3A:CD:E1:2F:1B:31:B8:98:8B:B4:1B:F0:B5:B7:79
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 01941FFA45BFD4DB954EB901E8B9A00D2002
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/B29MvHY6zeEvGzG4mIu0G_C1t3k.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24707
IP address blocks: 185.122.80.0/22 maxlen: 22
185.122.80.0/23 maxlen: 23
185.122.80.0/24 maxlen: 24
185.122.81.0/24 maxlen: 24
185.122.82.0/23 maxlen: 23
185.122.82.0/24 maxlen: 24
185.122.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:bf:d4:db:95:4e:b9:01:e8:b9:a0:0d:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=076f4cbc763acde12f1b31b8988bb41bf0b5b779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:96:5a:e8:3d:73:ea:98:82:0a:63:74:7e:
21:58:97:d4:fd:94:6f:d3:91:ef:4d:23:1d:19:31:
d2:b6:eb:9a:f9:45:06:2d:e2:67:fc:fd:a6:59:e7:
1e:1f:38:d2:9c:79:d2:24:fa:35:31:4c:4c:92:0a:
98:b8:99:63:05:64:41:02:d2:1c:b7:eb:76:5b:c3:
d2:19:a5:0e:fd:9c:b2:1a:61:14:03:b5:c4:51:99:
43:eb:f8:e7:69:f3:11:84:07:f5:40:cd:6f:92:42:
71:f9:6b:fd:43:ea:ad:26:83:8c:06:c2:5a:99:7d:
d4:94:43:26:5a:4a:e2:45:0d:97:33:62:aa:56:cc:
7b:30:bb:9a:ae:a9:d5:ea:97:07:e6:a0:cc:05:3a:
2e:46:87:00:d8:40:41:1a:c6:92:94:4c:8b:01:c5:
18:7d:f6:b6:18:1a:af:42:e4:60:28:6a:ec:ac:47:
13:0d:95:79:33:31:0c:56:0a:3e:f9:ac:93:ae:fb:
c1:ca:46:c1:2e:6b:6b:14:3e:3e:79:cf:17:b0:e2:
ee:ca:a4:86:95:b4:4b:69:b9:56:f6:7d:6c:d2:3f:
94:dc:37:fa:4e:14:4e:a4:ef:71:e1:b3:5f:39:a3:
35:a9:b6:f8:67:3e:4c:eb:b1:8b:da:1f:3f:ac:4e:
13:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6F:4C:BC:76:3A:CD:E1:2F:1B:31:B8:98:8B:B4:1B:F0:B5:B7:79
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/B29MvHY6zeEvGzG4mIu0G_C1t3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.80.0/22
Signature Algorithm: sha256WithRSAEncryption
77:84:e7:5c:ec:24:49:77:69:63:05:5e:26:50:ac:20:83:ee:
34:d1:a7:8e:87:db:01:d8:c9:2f:9a:6a:64:61:f9:3b:8a:6a:
9d:1b:dc:6e:b4:4b:cd:df:06:dd:5b:5e:c2:e4:2a:8a:24:e4:
4b:38:78:2e:47:ff:fc:09:29:3e:d0:f4:9f:a6:5f:86:ab:79:
23:8c:ab:56:ed:04:0e:90:77:94:f0:0a:a5:af:00:c6:76:a5:
4f:1c:6a:6e:c7:d1:0d:30:56:5f:ad:c0:26:34:db:43:90:f1:
36:e7:34:b5:a1:61:d0:27:a3:13:37:e4:f8:d6:28:7a:28:2f:
d7:e3:6b:db:ae:09:25:cf:41:b8:01:c4:db:a9:b0:65:81:cd:
b5:66:35:7b:dd:91:0f:e7:0a:41:0d:fe:2c:37:d8:ec:de:a9:
3d:d9:9d:73:62:df:ac:d3:7e:23:95:af:0f:54:61:13:67:88:
22:3a:cf:e0:e9:0d:78:45:7d:0a:12:fb:b1:09:52:37:22:b7:
f1:b4:bb:05:10:4d:02:66:5a:7a:c4:6b:e8:6c:e3:42:d7:69:
6c:50:8c:2e:a0:3e:6a:17:f6:ef:8f:3f:7f:aa:9b:f6:37:94:
ae:4a:4d:d5:19:5d:5f:20:7e:35:0e:16:a6:1e:01:d7:c2:75:
39:eb:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:22 2025 by rpki-client