Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/s4AwXqhqtrcDqPKIpmaM34VvuVk.roa
File: s4AwXqhqtrcDqPKIpmaM34VvuVk.roa (raw, json)
Hash identifier: omUzj8bx95orfDmkVMaZXkJzmvX0N8m/6+VDQgcz/84=
Subject key identifier: B3:80:30:5E:A8:6A:B6:B7:03:A8:F2:88:A6:66:8C:DF:85:6F:B9:59
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 019427B5E52F25B7CAE4A819CC7B1F7F2000
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/s4AwXqhqtrcDqPKIpmaM34VvuVk.roa
Signing time: Thu 02 Jan 2025 15:50:19 +0000
ROA not before: Thu 02 Jan 2025 15:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203623
IP address blocks: 185.127.108.0/24 maxlen: 24
185.127.109.0/24 maxlen: 24
185.127.110.0/24 maxlen: 24
185.127.111.0/24 maxlen: 24
2a06:c8c0::/30 maxlen: 30
2a06:c8c4::/30 maxlen: 30
2a06:c8c4:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e5:2f:25:b7:ca:e4:a8:19:cc:7b:1f:7f:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b380305ea86ab6b703a8f288a6668cdf856fb959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:29:a5:8d:0a:70:5c:66:cf:a8:0c:39:08:
47:0f:f6:05:21:5a:88:c5:37:65:20:d7:88:28:f9:
8c:ba:a8:b4:5a:a7:ff:1e:0a:91:c2:11:79:5a:f6:
f1:01:6f:43:07:1b:ea:aa:7c:cc:67:d1:c7:0e:34:
d7:5b:71:7f:98:93:57:ba:ef:b5:ca:d2:66:95:a0:
98:be:0e:a4:03:ea:bf:76:d4:ab:d1:bf:73:53:c0:
f1:c9:64:8e:2b:e0:70:12:18:69:45:09:57:15:08:
aa:91:96:e5:0f:00:75:02:02:ea:7b:8f:97:ed:ba:
c8:05:a9:c4:57:5c:7b:3e:78:f2:74:71:25:fd:8e:
58:c6:14:b8:a1:1c:1b:90:6c:a5:72:dc:88:90:71:
8d:59:9a:24:d7:1a:59:6e:ac:fe:84:dd:a0:67:c4:
26:05:a5:b0:68:5c:ed:df:b7:9d:7d:ec:ca:f6:88:
03:d3:fa:62:ad:59:53:3a:30:23:4f:84:2c:cc:e3:
7a:5f:ef:ec:2f:41:34:d7:f7:1f:59:2e:e7:cc:2d:
6c:33:8b:24:b6:70:ce:38:8b:c4:d1:c6:68:34:95:
fe:eb:be:0e:55:de:30:b5:2c:d6:d9:8e:2e:23:95:
cb:b9:11:b9:e1:c0:20:ca:b3:08:45:a2:39:25:72:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:30:5E:A8:6A:B6:B7:03:A8:F2:88:A6:66:8C:DF:85:6F:B9:59
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/s4AwXqhqtrcDqPKIpmaM34VvuVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.108.0/22
IPv6:
2a06:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
65:00:74:8c:62:11:07:c6:cc:e0:af:80:3f:20:74:df:c2:f7:
0a:45:f0:71:29:2b:c8:81:12:b4:ff:42:99:cd:8d:9c:c1:bf:
09:a2:fb:d3:aa:10:43:b8:59:60:dc:b3:dd:5c:f9:ee:ae:f0:
25:0e:eb:e4:8e:84:00:3e:4a:a3:44:56:c9:3c:af:48:41:63:
d8:6c:2f:df:71:51:26:d4:28:6d:e6:d8:7f:91:1b:7b:45:94:
09:e9:02:7a:e9:6f:ab:b1:ef:7e:d2:70:c4:c3:2e:89:4c:b5:
ee:2a:94:d1:67:89:34:0b:25:bb:11:58:35:d7:17:0d:8a:85:
a3:6e:b7:70:5d:41:d5:45:15:54:eb:94:4d:eb:a1:9f:75:35:
27:8f:da:6c:64:31:1b:80:45:66:c0:94:5a:e8:b9:6f:3d:d2:
dc:d4:71:6c:fa:5b:29:ab:0f:0a:51:c8:3a:97:50:40:f3:87:
f6:04:d0:b3:c0:01:c3:dd:a2:91:49:66:63:01:f8:fe:be:4c:
3e:48:21:d3:ff:2d:f3:b6:be:8f:41:18:b9:c8:bf:ce:87:8f:
55:b9:a8:f9:53:14:d6:a8:ad:3c:c4:90:0a:14:6b:41:3b:0b:
af:16:da:cc:18:0c:85:1e:6f:8e:2f:7c:a1:73:e5:32:c3:11:
d1:bf:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:50:34 2025 by rpki-client