Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa
File: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (raw, json)
Hash identifier: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=
Subject key identifier: 8A:92:EB:02:0A:1E:DD:C9:2F:46:7C:75:A6:79:15:26:37:30:C1:D5
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 019427B55578DAB911DCD2AE09EA8CD619CF
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa
Signing time: Thu 02 Jan 2025 15:49:42 +0000
ROA not before: Thu 02 Jan 2025 15:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3352
IP address blocks: 45.148.220.0/24 maxlen: 24
81.90.104.0/24 maxlen: 24
81.90.110.0/24 maxlen: 24
81.90.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:55:78:da:b9:11:dc:d2:ae:09:ea:8c:d6:19:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a92eb020a1eddc92f467c75a67915263730c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:49:f6:d4:9f:1f:52:2c:97:45:40:1d:f9:
14:d3:8b:f4:63:5c:cf:01:55:94:03:a0:0d:c1:78:
f0:13:ae:fc:79:a1:bb:5b:e4:d7:03:29:23:87:94:
50:99:96:8f:ec:a9:e5:cc:30:64:ac:ad:f4:5b:b3:
0d:04:6a:e2:a6:ef:99:ff:d3:19:53:3b:2e:30:c7:
8f:4b:36:6e:88:e5:eb:8b:f2:b3:91:ae:b5:00:53:
19:33:6a:a1:b5:51:9a:7f:69:56:b0:2d:db:82:57:
24:fd:88:2b:04:b2:7c:f1:8a:bf:d7:00:00:c5:1e:
29:78:9d:06:99:69:e4:61:f7:3d:d1:55:fc:59:07:
c3:4a:03:f6:31:c0:e4:3c:8b:6a:b3:43:58:82:13:
17:a9:e9:6d:7b:ce:1e:9c:4e:d2:b6:f1:d5:a5:c6:
04:7c:41:9d:c5:8c:e2:41:e9:80:75:e2:4e:eb:51:
61:c3:96:33:b6:28:47:4d:af:d5:76:31:a9:5a:be:
41:87:40:0f:a4:c5:db:05:47:5c:b8:f4:78:48:9c:
09:27:5b:30:9f:cf:e2:c1:b8:6b:83:bf:07:e3:fd:
86:92:72:8d:91:28:9e:71:80:69:9c:9b:b4:fe:62:
93:6c:55:48:4b:1c:27:8c:08:0d:b7:eb:2a:af:2a:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:EB:02:0A:1E:DD:C9:2F:46:7C:75:A6:79:15:26:37:30:C1:D5
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.220.0/24
81.90.104.0/24
81.90.110.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:a1:33:56:12:11:83:da:41:72:3e:86:64:e6:7a:16:3d:5d:
e9:26:7d:ee:5e:5b:97:85:98:53:05:25:c8:0e:cc:59:40:6c:
db:27:0b:45:87:92:13:68:d0:ed:85:c9:84:4b:fe:a4:aa:d0:
c5:41:f2:ef:7c:5a:ad:4b:b0:2b:ce:36:70:e4:b5:f0:82:6c:
45:23:b4:0f:e6:65:6c:e0:2c:ef:e9:f2:72:09:9d:1d:92:3e:
86:4f:39:a8:cc:d7:18:77:56:d0:90:32:53:47:e2:c5:2a:ab:
f5:8d:93:e1:86:54:e3:49:2d:7e:8f:ab:9f:06:f0:2d:76:30:
1e:41:17:3e:a6:ae:f1:37:68:18:6b:aa:6a:86:c7:2d:ce:19:
44:8d:7c:1f:df:73:59:77:8a:bc:c8:3b:0d:e9:27:73:36:85:
46:70:1d:9c:d2:94:c6:06:60:59:77:0f:75:0d:e8:95:40:0c:
57:ec:0c:a3:8f:20:5a:4f:93:5f:f6:04:2b:20:41:3c:b3:ef:
00:f5:26:5e:67:34:3b:ca:19:22:1b:3a:74:a5:5d:d6:e5:06:
22:97:9c:cc:7c:33:8d:1b:82:96:0f:4f:0b:db:ef:a4:1b:a2:
ef:35:aa:ad:52:b4:cc:a3:7a:6e:f5:7b:d9:42:56:a1:0f:16:
f2:ed:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:58 2025 by rpki-client