Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cPYOKrKiYT89IO9upkxHw5ZbR8A.roa
File: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (raw, json)
Hash identifier: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=
Subject key identifier: 70:F6:0E:2A:B2:A2:61:3F:3D:20:EF:6E:A6:4C:47:C3:96:5B:47:C0
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0195003400AC7E1B7836ADE2C0C1ADB837FA
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cPYOKrKiYT89IO9upkxHw5ZbR8A.roa
Signing time: Thu 13 Feb 2025 16:46:02 +0000
ROA not before: Thu 13 Feb 2025 16:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39847
IP address blocks: 89.185.160.0/19 maxlen: 19
178.18.176.0/20 maxlen: 20
185.150.120.0/22 maxlen: 22
2a00:b280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:34:00:ac:7e:1b:78:36:ad:e2:c0:c1:ad:b8:37:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 13 16:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70f60e2ab2a2613f3d20ef6ea64c47c3965b47c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:00:a6:9c:26:a2:fe:f1:ef:ad:2d:c8:90:
f8:82:09:f9:93:37:8d:fc:f4:c4:12:a7:a0:ca:9f:
e8:1d:37:a6:ab:31:dd:91:bd:6c:45:78:23:20:0a:
ae:a6:3d:db:95:fc:48:ce:8d:6f:db:6a:11:66:73:
1c:17:af:bc:e8:ad:ac:51:83:60:04:4b:f0:9b:10:
c0:d2:52:98:03:8a:11:f8:01:07:90:81:9f:f0:ae:
27:1b:47:18:33:47:7f:3a:c5:12:c1:74:40:4b:71:
df:3a:02:b0:5e:f5:86:7b:5d:49:ba:89:c9:c0:6e:
b7:85:2b:51:2d:3a:59:b2:ae:54:5a:80:d5:1e:7a:
da:d0:18:95:4b:56:01:21:ac:41:5a:bb:7c:bf:90:
39:a3:e7:5c:5f:1f:36:ab:dc:a9:92:25:6f:e2:35:
44:8c:e6:85:38:ee:93:6f:43:8d:60:2e:81:22:45:
f1:d4:58:73:9c:2a:76:d2:f0:2e:b9:fd:dc:7e:af:
56:47:59:ea:23:0e:2a:ff:b8:d8:2c:a4:a0:13:b7:
a2:6b:eb:5f:35:81:59:5b:88:4a:e5:45:df:c0:9e:
f3:27:5d:8f:1a:17:37:8d:29:e3:14:94:e3:94:21:
b9:40:cd:b3:fd:13:31:ce:74:9a:ce:11:fd:6d:21:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:0E:2A:B2:A2:61:3F:3D:20:EF:6E:A6:4C:47:C3:96:5B:47:C0
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/cPYOKrKiYT89IO9upkxHw5ZbR8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.160.0/19
178.18.176.0/20
185.150.120.0/22
IPv6:
2a00:b280::/32
Signature Algorithm: sha256WithRSAEncryption
a2:1a:14:7d:f5:76:4f:56:ce:ef:d7:58:e4:a2:c6:a4:3f:1e:
75:ce:45:6a:28:94:69:cd:bf:c4:bc:0a:d9:b7:82:f5:74:93:
54:06:5b:e4:1b:ef:27:0a:7b:12:4f:69:f1:23:11:35:96:d5:
d5:3a:76:bf:2d:d6:19:13:35:fb:f4:6c:32:81:0d:7d:48:8f:
e3:a2:c2:14:6e:0c:23:78:4b:df:6a:9b:fb:1d:34:65:92:a1:
02:ca:db:5c:ed:03:14:90:a1:1d:c1:66:bf:72:02:ee:a3:62:
e3:6c:d1:36:1f:d8:d6:72:17:96:f4:77:d6:92:b5:91:81:d3:
88:77:10:80:54:b9:38:09:fe:e8:c6:da:04:ac:c4:22:17:ec:
93:ce:fe:eb:19:55:8e:32:1f:bc:f4:2f:59:26:34:4a:a8:bf:
45:7a:0c:d0:c0:b2:c3:08:50:bf:a0:20:a8:9f:73:36:f7:10:
80:4a:ee:99:b8:c1:a6:2e:d6:88:ee:9b:45:15:1e:b9:aa:9e:
22:d3:f4:bf:b2:05:1d:8b:47:bc:cc:10:36:d2:4f:03:2c:fb:
e2:98:9b:5f:e9:49:06:01:27:e8:ef:90:7a:ff:6e:b9:5c:b1:
10:8f:65:3a:4a:83:7a:2a:e4:44:5a:46:86:2b:f2:e3:13:bf:
11:d7:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:14 2025 by rpki-client