Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/ickIIpxDa66Zw5SNhJ159yjnJm4.roa
File: ickIIpxDa66Zw5SNhJ159yjnJm4.roa (raw, json)
Hash identifier: Ip9TbNQZyJFwTGktaixn0vXs7mVP4NezsqJqAycz9sc=
Subject key identifier: 89:C9:08:22:9C:43:6B:AE:99:C3:94:8D:84:9D:79:F7:28:E7:26:6E
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 019426D9565CB56968A449B44BDF1A9C9A21
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/ickIIpxDa66Zw5SNhJ159yjnJm4.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 45.11.96.0/24 maxlen: 24
45.11.97.0/24 maxlen: 24
45.11.98.0/24 maxlen: 24
45.11.99.0/24 maxlen: 24
62.106.94.0/24 maxlen: 24
79.110.234.0/24 maxlen: 24
134.255.199.0/24 maxlen: 24
149.3.171.0/24 maxlen: 24
178.211.130.0/24 maxlen: 24
188.93.141.0/24 maxlen: 24
2a0c:6d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:56:5c:b5:69:68:a4:49:b4:4b:df:1a:9c:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89c908229c436bae99c3948d849d79f728e7266e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e2:db:72:2d:a6:55:db:61:d8:d5:bb:01:06:
a4:4a:b5:2f:19:29:aa:87:05:08:9a:80:10:1d:be:
63:b7:56:77:f7:8f:95:6d:01:58:9a:c1:03:e7:64:
24:d9:b2:0a:1b:be:af:4e:fc:9b:5f:f7:dd:63:77:
0e:f9:96:a0:50:e2:1e:a6:87:91:fc:01:4d:14:6f:
c5:37:b4:c2:5d:b0:8f:a0:fb:c1:d7:fe:ad:0f:1c:
f2:3e:49:d8:80:12:1f:e4:20:4a:4a:5c:38:1f:66:
7d:e5:be:e7:6a:b1:28:7a:ee:92:22:b9:15:15:a2:
b8:24:9c:ca:b9:85:87:59:bb:26:1a:3f:06:a5:5a:
16:68:a5:18:77:30:a1:dd:33:0a:29:7d:a2:7b:e4:
e3:e7:77:9a:fa:97:ca:a6:2e:e4:06:74:99:59:5b:
7e:a6:88:03:7b:9e:ba:28:a4:a1:72:22:b9:51:b4:
ef:f8:12:c8:44:c3:87:ef:a4:85:52:8f:67:ce:b1:
02:1b:96:09:7c:92:fd:0d:57:6d:e8:0b:74:4c:f6:
7a:d8:9e:11:42:a9:ed:55:9c:5c:44:96:b2:d3:39:
32:9b:96:45:6e:de:92:e0:5b:4b:d7:d7:ae:64:0f:
2c:c1:7d:78:d3:0a:f1:e1:8a:80:c1:48:8a:53:f5:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C9:08:22:9C:43:6B:AE:99:C3:94:8D:84:9D:79:F7:28:E7:26:6E
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/ickIIpxDa66Zw5SNhJ159yjnJm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.96.0/22
62.106.94.0/24
79.110.234.0/24
134.255.199.0/24
149.3.171.0/24
178.211.130.0/24
188.93.141.0/24
IPv6:
2a0c:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
6d:d0:49:83:5c:a0:d8:92:31:25:e8:6b:23:43:d9:81:96:b3:
e8:42:b9:ce:84:70:fe:5f:3a:41:e4:64:cd:7a:85:42:bb:80:
b3:39:ad:08:87:d3:41:3e:9d:1e:42:aa:7d:34:a8:75:75:29:
e8:34:e9:d7:c3:35:59:05:6b:a9:45:7d:55:dd:97:03:29:cc:
26:68:a8:7b:83:40:76:12:eb:b3:7c:27:d3:42:90:c3:a4:d9:
4c:7d:4e:f3:12:cb:68:45:1d:85:5b:f0:26:54:dc:e9:89:70:
0f:61:0f:2e:cb:33:c3:46:49:af:c5:0e:7f:9c:10:2e:b5:02:
ba:0d:7e:e7:d7:f9:f1:df:90:36:59:8e:32:6a:fa:36:04:e0:
01:57:54:f1:3a:de:58:94:72:bc:7a:99:39:2f:76:f7:47:df:
f3:a7:20:8f:49:d4:0a:f5:39:76:f9:ee:7c:2b:f5:b3:44:a3:
31:45:22:2b:7b:13:72:c5:88:32:8b:c1:b8:81:37:fd:91:fe:
18:47:9d:d6:42:26:a0:8f:06:e0:d7:00:0b:d1:0d:74:bb:df:
29:65:67:86:1f:ee:d2:0e:9f:9e:db:6c:b3:4d:01:4c:d3:a0:
7e:7f:87:7a:7b:43:cf:41:18:ba:83:a0:0a:85:a6:ba:42:63:
fd:59:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:58:22 2025 by rpki-client