Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa
File: 0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa (raw, json)
Hash identifier: R/kohk8zDnLTG4mp1rru94qAndg3iws6yZ+eZfkkPz4=
Subject key identifier: D0:51:6E:49:67:8F:FF:19:D9:2F:03:A1:69:A6:8F:A9:B1:D7:2D:CE
Certificate issuer: /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Certificate serial: 01942669FBF43D1FC2D6FDFFD529FFF27978
Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa
Signing time: Thu 02 Jan 2025 09:47:47 +0000
ROA not before: Thu 02 Jan 2025 09:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 62.113.192.0/18 maxlen: 24
62.113.233.0/24 maxlen: 24
185.13.68.0/22 maxlen: 24
185.252.32.0/22 maxlen: 22
212.83.32.0/19 maxlen: 24
2a00:f48::/32 maxlen: 32
2a0c:2040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:fb:f4:3d:1f:c2:d6:fd:ff:d5:29:ff:f2:79:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Validity
Not Before: Jan 2 09:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0516e49678fff19d92f03a169a68fa9b1d72dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:50:3e:e5:61:7f:36:16:46:ea:55:11:c6:
01:5b:21:4b:34:7a:cb:6c:1f:13:54:6a:08:c8:3b:
56:a1:22:f6:77:df:ff:22:36:88:fb:e6:b5:77:da:
13:dd:7a:72:c0:6f:49:87:a2:4e:81:b0:a2:d0:40:
74:d2:05:cc:f1:54:42:3f:30:3a:ec:c4:f4:8e:61:
7f:9c:3c:b3:b9:33:5d:02:d2:1c:80:a1:fb:ce:c5:
93:d1:3a:72:8c:e1:14:b1:e8:01:92:6d:5b:f7:b0:
d5:93:87:d2:34:86:62:d0:0f:36:4c:d2:7a:3d:da:
4b:02:73:85:8c:8f:f9:3b:fe:dd:b8:db:5d:7f:b2:
70:7b:7d:7a:72:c3:ff:fc:7d:d7:49:45:78:22:da:
90:22:a6:42:9c:ba:f8:4e:59:df:9c:c7:fe:8f:9a:
09:23:f9:09:c0:91:bb:64:40:60:ca:97:d1:9d:94:
85:be:6c:db:a3:b7:b5:5b:b9:d6:7d:f5:a1:47:41:
39:77:47:af:43:97:3a:24:e2:4c:0f:67:74:fb:8f:
1a:7e:f6:6b:1c:05:5c:9f:ca:7c:2b:70:21:6e:5d:
98:93:5c:e8:7d:65:92:37:28:0a:ce:d7:17:7b:0a:
e8:17:5b:77:ff:14:ac:54:19:00:1d:15:34:79:b3:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:51:6E:49:67:8F:FF:19:D9:2F:03:A1:69:A6:8F:A9:B1:D7:2D:CE
X509v3 Authority Key Identifier:
keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.192.0/18
185.13.68.0/22
185.252.32.0/22
212.83.32.0/19
IPv6:
2a00:f48::/32
2a0c:2040::/29
Signature Algorithm: sha256WithRSAEncryption
06:a2:c2:4c:c2:d5:1a:c8:0d:86:24:a5:5f:eb:94:23:9e:61:
3e:b6:b2:61:67:15:29:4d:0f:27:de:9f:5a:e7:79:11:b0:4b:
7d:dc:e0:39:6d:50:b7:59:9a:3f:88:e9:c2:59:67:c2:16:9a:
14:0b:28:be:ed:1d:20:f0:d9:f3:2e:8f:bc:7e:88:22:d7:ae:
c4:43:21:92:77:c2:1d:90:30:d9:20:1d:0d:1d:e3:2b:a7:68:
99:9b:f4:98:d5:89:80:85:99:15:3a:0a:1f:7d:be:a3:de:30:
5d:a2:4a:57:6b:ba:b3:fa:a2:ab:9e:65:c9:a1:46:6a:90:d1:
db:2f:9f:ae:75:f1:94:6f:fa:aa:74:b1:b1:00:4f:bf:7d:b5:
54:7e:3b:8e:07:74:8a:38:13:55:72:52:67:e6:6d:46:de:88:
73:3b:b4:ff:42:84:92:18:df:eb:ec:43:7e:6a:8b:49:d6:ff:
3f:b2:d0:02:c9:f1:a0:0d:f2:4a:dd:c6:8e:ec:04:73:a9:0d:
c1:54:1e:c0:fd:e7:72:1a:e1:c5:37:cf:be:4b:db:9c:9f:20:
5f:93:4a:be:4f:4e:ef:f3:fe:fa:78:4a:85:be:ed:59:21:14:
87:85:c6:2a:90:58:f4:e6:53:bb:01:a9:69:10:cd:27:39:2d:
fe:f3:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:03 2025 by rpki-client