Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/dS05zkL9CP3GUqpj0_iCe3wFLlY.roa
File: dS05zkL9CP3GUqpj0_iCe3wFLlY.roa (raw, json)
Hash identifier: 1LEnQ3M0NnIsQstsFHtx+z0Hxt2rdc1JklK+0G91crQ=
Subject key identifier: 75:2D:39:CE:42:FD:08:FD:C6:52:AA:63:D3:F8:82:7B:7C:05:2E:56
Certificate issuer: /CN=00105478defd513b7d8822a7d9204f875ed547d8
Certificate serial: 0194228E3C5F31A9B3492170493BAC24DE9C
Authority key identifier: 00:10:54:78:DE:FD:51:3B:7D:88:22:A7:D9:20:4F:87:5E:D5:47:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/dS05zkL9CP3GUqpj0_iCe3wFLlY.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34909
IP address blocks: 91.238.106.0/24 maxlen: 24
185.190.96.0/22 maxlen: 22
185.190.96.0/23 maxlen: 23
185.190.98.0/24 maxlen: 24
185.190.99.0/24 maxlen: 24
2a0a:7c0::/29 maxlen: 29
2a0a:7c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3c:5f:31:a9:b3:49:21:70:49:3b:ac:24:de:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00105478defd513b7d8822a7d9204f875ed547d8
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=752d39ce42fd08fdc652aa63d3f8827b7c052e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:36:0b:64:02:bf:15:2a:c5:ea:32:b2:2a:
e5:c0:be:67:70:ae:a7:30:1f:da:45:cb:42:64:3f:
22:37:7b:2a:87:2b:0c:40:3f:c0:34:5b:3b:7b:93:
79:f5:b2:5c:1b:eb:71:5f:4d:57:d6:39:f1:15:66:
a5:51:e0:31:48:45:f9:86:84:d5:d9:1b:ae:31:56:
2e:38:7b:1e:d7:ce:18:7a:54:88:0d:aa:8e:31:7c:
88:0b:b8:24:3f:43:c7:db:51:e6:8f:d7:46:20:a3:
d5:72:79:90:e7:36:fc:db:d8:a8:85:5d:a1:7f:88:
0c:c7:8c:56:d8:5f:d8:be:1e:a1:26:1c:a7:f6:b2:
b0:e9:73:12:6b:ef:36:ed:e9:d4:38:bb:d4:ac:7a:
6f:a2:f1:cd:e3:fd:f3:b0:54:94:63:3f:76:66:44:
6a:52:96:b0:64:05:cc:07:56:19:22:9d:1d:84:ba:
68:f5:3c:f0:dd:ef:5a:05:c5:ac:60:1f:39:16:8c:
16:2a:be:89:b2:b4:4c:a0:47:07:b1:a8:fe:56:31:
f0:12:54:35:fe:91:51:87:01:98:e4:66:79:0f:fa:
e0:4a:44:d4:36:ce:67:ad:80:00:34:3a:15:34:8e:
e2:ff:38:d2:ff:29:a5:74:4e:d0:c2:1f:87:b2:10:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:39:CE:42:FD:08:FD:C6:52:AA:63:D3:F8:82:7B:7C:05:2E:56
X509v3 Authority Key Identifier:
keyid:00:10:54:78:DE:FD:51:3B:7D:88:22:A7:D9:20:4F:87:5E:D5:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABBUeN79UTt9iCKn2SBPh17VR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/dS05zkL9CP3GUqpj0_iCe3wFLlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/0c4ad1-439a-4e61-a8b6-3fdd61f6852f/1/ABBUeN79UTt9iCKn2SBPh17VR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.106.0/24
185.190.96.0/22
IPv6:
2a0a:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:a4:33:b3:a6:43:c6:c1:96:7b:56:b2:c6:7e:8d:5c:04:00:
3c:1d:d4:0e:a0:0e:13:03:6c:b0:83:87:65:cb:21:99:d7:34:
2b:f9:79:b2:28:6b:70:15:64:3a:ab:2a:dc:ac:e9:1d:c6:2b:
07:4c:d8:52:51:df:1b:53:35:fa:74:f4:a2:ec:57:21:07:f0:
42:b1:c3:5e:9e:13:d6:51:cf:67:ea:84:df:e8:92:85:79:35:
20:25:0f:dd:a9:c8:ff:5f:69:b8:22:d1:92:05:d3:fa:c6:6e:
5b:80:41:7a:fb:d0:f4:71:d6:d8:e6:df:86:28:cf:f8:9a:43:
f8:39:4b:3c:2c:32:63:b7:52:9e:1e:79:1e:a3:b0:d7:1e:16:
75:05:19:33:f1:58:44:98:ac:a9:55:71:34:5f:1e:6f:9f:6a:
90:21:f4:c9:f0:d4:8c:51:6f:4a:54:f8:e8:77:64:44:3a:e9:
81:b0:33:43:57:b5:6e:69:ba:d1:9d:36:03:5e:63:bd:a7:77:
d4:df:74:52:d1:24:c6:1e:f4:01:ea:c3:09:dc:c7:ba:21:dc:
47:7a:44:a8:0b:ba:05:96:f0:0d:98:e7:12:d8:85:eb:95:a1:
31:6a:92:b7:0a:57:cb:28:db:a7:28:7b:0b:5a:ca:06:c9:18:
28:a7:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:42 2025 by rpki-client