Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa
File: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (raw, json)
Hash identifier: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=
Subject key identifier: 84:20:82:07:B5:BF:15:27:FA:DE:00:BC:05:F9:B5:6E:0E:64:8F:08
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 019426D95B91D1F724E4C1424035BC7E4C87
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35913
IP address blocks: 45.83.112.0/22 maxlen: 24
80.254.232.0/22 maxlen: 24
185.161.252.0/22 maxlen: 24
185.181.56.0/22 maxlen: 24
192.144.52.0/22 maxlen: 24
193.9.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5b:91:d1:f7:24:e4:c1:42:40:35:bc:7e:4c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84208207b5bf1527fade00bc05f9b56e0e648f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:ad:2b:26:3e:8e:2a:02:75:63:35:62:1d:
4e:6e:4f:de:2d:ee:20:fa:a7:79:1d:0c:6f:ea:71:
ee:21:f8:1f:82:c5:07:f3:36:a0:ee:c0:3c:a6:f7:
47:14:e1:f7:11:d1:ad:e6:71:91:a9:24:f7:69:3a:
13:49:7f:72:b2:ac:2d:f1:fc:e7:50:12:4f:2c:17:
91:6e:80:79:e7:8f:99:37:f9:9b:10:20:8b:7d:fb:
cd:0c:d4:8f:44:c8:02:b4:87:a5:bf:18:ab:11:13:
f2:5b:6b:d1:44:b9:89:9a:33:fd:0a:2e:1a:09:66:
eb:d7:09:ca:45:32:66:fe:a0:72:d9:52:97:36:89:
a4:db:18:57:a7:f5:52:f9:fd:57:4c:41:0f:53:fc:
43:7e:94:b4:eb:84:58:e6:34:1f:96:4e:e9:d1:69:
17:af:51:16:ed:ab:7c:30:2f:34:07:06:cd:21:9d:
ce:6a:52:14:b2:88:b0:f0:84:18:ea:b8:d3:49:50:
d9:f6:b0:d3:d7:56:c8:aa:51:a3:19:cc:1a:9b:53:
d0:ee:78:ca:d7:62:9c:2a:00:26:3c:25:92:4a:a6:
d3:e7:77:74:d1:22:bb:f1:72:0b:05:36:36:a1:0e:
d3:2d:42:87:71:ff:7a:05:56:e0:0c:e2:61:4b:74:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:20:82:07:B5:BF:15:27:FA:DE:00:BC:05:F9:B5:6E:0E:64:8F:08
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.112.0/22
80.254.232.0/22
185.161.252.0/22
185.181.56.0/22
192.144.52.0/22
193.9.40.0/22
Signature Algorithm: sha256WithRSAEncryption
14:38:e1:d3:ff:d6:6d:44:b0:fa:b3:2a:25:93:72:ef:21:c2:
92:ec:32:70:b7:61:b0:8b:74:dd:7f:fc:8b:6a:e5:09:f9:f3:
49:19:ea:b1:9b:68:62:25:c3:3f:50:eb:61:31:3a:d0:64:e9:
39:6d:dd:32:64:0a:25:6c:1f:8a:a2:0b:0b:48:61:0e:d2:22:
62:26:60:a9:7d:f6:96:f8:11:ed:5b:f8:a5:7e:9c:d2:5f:cd:
73:ac:4d:3e:bb:6e:0d:ed:db:be:3f:40:5c:de:57:44:5e:f5:
cc:c1:5b:07:2b:cc:53:17:19:35:fe:2c:57:17:a3:c6:e6:5b:
6a:13:ce:be:eb:d8:cd:29:f2:3a:20:89:1a:63:11:c3:84:c6:
46:b5:1b:dd:e2:f5:66:3a:07:14:60:89:69:c1:f6:f6:fc:5b:
4e:f4:12:12:28:65:e1:05:d4:93:ea:dd:b1:35:8c:14:c9:e8:
ec:f7:5e:43:18:55:40:2e:36:0d:69:97:5a:33:05:57:89:42:
91:8f:74:2a:04:e8:b2:0e:86:75:44:29:7a:fa:a5:f4:5f:be:
72:3c:cc:a0:ce:b8:c1:34:56:6d:7f:e6:81:3b:90:67:92:35:
43:77:1e:9b:a3:00:1a:c7:ad:f1:70:ce:c5:a6:7b:4d:8a:25:
d3:04:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:43:57 2025 by rpki-client