Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/4fxQzx_8ByWwMKk9dyXM0XEaMys.roa
File: 4fxQzx_8ByWwMKk9dyXM0XEaMys.roa (raw, json)
Hash identifier: /pQNDc4tCpOKVTxdQ/1sSXEuYSGaPkaAPaOzkIFfq/U=
Subject key identifier: E1:FC:50:CF:1F:FC:07:25:B0:30:A9:3D:77:25:CC:D1:71:1A:33:2B
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0195FB198A1F060369000BADF4FD35FDD0B6
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/4fxQzx_8ByWwMKk9dyXM0XEaMys.roa
Signing time: Thu 03 Apr 2025 10:01:49 +0000
ROA not before: Thu 03 Apr 2025 10:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 83.217.220.0/24 maxlen: 24
83.217.221.0/24 maxlen: 24
83.217.222.0/24 maxlen: 24
83.217.223.0/24 maxlen: 24
85.198.80.0/24 maxlen: 24
85.198.81.0/24 maxlen: 24
85.198.82.0/24 maxlen: 24
85.198.83.0/24 maxlen: 24
89.169.0.0/24 maxlen: 24
89.169.1.0/24 maxlen: 24
89.169.2.0/24 maxlen: 24
89.169.3.0/24 maxlen: 24
89.169.44.0/24 maxlen: 24
89.169.45.0/24 maxlen: 24
89.169.46.0/24 maxlen: 24
89.169.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:19:8a:1f:06:03:69:00:0b:ad:f4:fd:35:fd:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Apr 3 10:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1fc50cf1ffc0725b030a93d7725ccd1711a332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:b1:0c:73:70:d2:1e:0d:96:54:c9:97:8c:
52:fa:64:37:10:26:26:25:a6:07:97:78:ea:13:ee:
dd:0f:fd:d7:44:dd:12:93:df:f0:ca:d4:6d:5d:9a:
84:84:a3:81:08:a4:81:b3:5b:53:dc:84:03:6d:f4:
8a:55:57:2c:be:2e:2d:4a:58:3c:53:9d:1b:33:1e:
02:8a:f9:5e:91:48:9a:e1:a0:97:91:ef:ef:08:65:
ed:d7:47:a1:d0:a3:7e:9e:1a:fb:71:b9:ba:9f:af:
7d:8c:f3:09:b0:de:18:0e:59:ec:9f:88:5b:a6:29:
9d:5c:11:a0:7d:42:a4:02:c9:b1:7f:0b:75:a6:3e:
31:b2:79:0d:14:85:25:cf:77:fa:08:62:56:bb:96:
33:3f:f7:07:6b:8e:9d:52:44:a8:af:b7:8a:77:5f:
b9:24:ec:ab:ed:16:14:76:a0:10:8e:aa:a8:2c:00:
1e:4e:29:7b:62:ac:3b:0e:94:86:17:5f:1b:40:66:
05:e9:94:49:da:9a:89:11:d9:a8:ed:3d:81:46:be:
39:e2:9a:41:75:96:97:6f:c1:6a:c1:5c:81:5b:cb:
7d:5b:b7:08:d3:aa:df:a2:50:22:8a:ce:1f:fe:0e:
42:ab:30:6b:23:7a:ab:0c:19:19:4a:49:fd:ac:92:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:50:CF:1F:FC:07:25:B0:30:A9:3D:77:25:CC:D1:71:1A:33:2B
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/4fxQzx_8ByWwMKk9dyXM0XEaMys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.220.0/22
85.198.80.0/22
89.169.0.0/22
89.169.44.0/22
Signature Algorithm: sha256WithRSAEncryption
79:66:3e:b9:f8:77:a3:93:4e:5d:ab:2c:3c:8c:d1:c2:5e:95:
bc:29:d7:d0:21:8f:f0:d2:ef:2d:d5:78:74:fd:df:c6:4a:e5:
d3:1e:ba:a8:f5:11:d6:5f:8b:e1:b4:bd:6e:b1:73:41:65:4a:
8e:1d:03:79:51:55:b3:b3:1f:25:a8:33:56:2c:f4:c1:c6:2a:
ed:e4:a9:e5:91:8f:f8:69:7b:54:80:a4:5e:8d:a6:75:ba:5a:
c9:a8:0e:fc:4c:63:4c:46:66:cc:36:aa:2c:7f:8f:66:1a:0a:
8f:fa:5e:8d:88:9e:00:2d:7d:19:8d:bb:a8:72:c7:ab:2a:9b:
66:13:5e:8e:f2:b4:6e:64:c0:5b:60:6b:23:fa:e7:c8:fe:9b:
6a:28:c5:6c:b9:60:76:65:b2:bf:5d:d3:30:4f:a6:4a:a1:25:
85:68:48:12:6b:f9:d6:0c:d3:79:dc:15:39:93:3f:d3:c3:f6:
88:83:86:c8:b2:80:f2:8c:5f:f6:16:89:99:c3:55:09:08:10:
93:c0:85:0d:bf:53:06:dc:88:a3:01:50:18:fa:21:b1:8d:03:
2c:b6:eb:ed:0c:8a:bc:ff:fa:48:83:7b:d5:3b:f1:bf:0d:8f:
8f:2c:3b:3b:30:4e:b3:ba:38:31:01:c7:ab:20:52:dd:49:a1:
79:44:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:13:30 2025 by rpki-client