Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/iF93w_kO_x0TrENOc4gmI6-EtJ0.roa
File: iF93w_kO_x0TrENOc4gmI6-EtJ0.roa (raw, json)
Hash identifier: 5zJM9jO9AIiHF5QxYe/wtht+xZaOBv518vzoLVEf1p4=
Subject key identifier: 88:5F:77:C3:F9:0E:FF:1D:13:AC:43:4E:73:88:26:23:AF:84:B4:9D
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 0194258F3E0CA705883F17940C428C63E154
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/iF93w_kO_x0TrENOc4gmI6-EtJ0.roa
Signing time: Thu 02 Jan 2025 05:48:51 +0000
ROA not before: Thu 02 Jan 2025 05:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61047
IP address blocks: 91.220.197.0/24 maxlen: 24
185.43.44.0/22 maxlen: 24
185.71.224.0/22 maxlen: 24
185.83.96.0/22 maxlen: 24
185.124.200.0/22 maxlen: 24
185.189.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3e:0c:a7:05:88:3f:17:94:0c:42:8c:63:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=885f77c3f90eff1d13ac434e73882623af84b49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:b8:90:99:6b:92:52:de:7a:6f:e1:58:f9:
6c:05:70:9d:6a:86:6a:4b:9c:5b:92:5c:dd:10:b7:
83:3e:0a:82:99:05:ce:7f:8a:62:71:bd:e6:55:4c:
cf:83:a4:dd:c3:73:b4:69:92:1c:d2:d1:c5:ed:8d:
a2:cd:94:aa:cb:b4:3f:8e:38:fc:38:ac:80:05:25:
7e:d1:8c:7e:6b:4d:57:69:1c:9f:34:a0:fb:99:d4:
14:51:72:21:0b:50:08:ef:4f:21:44:ec:f8:83:23:
3a:cd:9e:02:34:74:2f:1b:e4:de:ab:5b:19:45:33:
3a:f3:c8:10:71:b5:12:78:00:18:3b:ac:d9:3d:da:
3c:c0:6b:ed:b3:c3:ff:41:1b:58:7d:05:38:bc:88:
df:09:e0:bc:65:35:52:16:d4:e9:41:9b:3d:68:09:
31:6a:2a:b6:39:fa:7d:df:e3:1d:3b:e3:35:85:fb:
74:18:d4:68:cb:64:af:c5:e8:ff:52:0b:80:58:ae:
a9:e9:43:8a:3c:d7:7a:d0:08:e0:84:77:08:5d:56:
2f:d6:9a:04:5d:81:1c:c3:57:45:bf:04:78:ef:9a:
d9:57:70:f2:38:ca:05:6c:9b:84:6a:2c:69:5a:57:
e6:13:13:3e:f9:79:56:96:90:e0:60:67:c9:e6:61:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5F:77:C3:F9:0E:FF:1D:13:AC:43:4E:73:88:26:23:AF:84:B4:9D
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/iF93w_kO_x0TrENOc4gmI6-EtJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.197.0/24
185.43.44.0/22
185.71.224.0/22
185.83.96.0/22
185.124.200.0/22
185.189.188.0/22
Signature Algorithm: sha256WithRSAEncryption
26:7a:85:1f:1c:b6:a2:6a:8d:0a:83:82:86:b5:1f:c4:ad:52:
4e:99:98:41:79:8d:52:47:81:a1:71:91:d3:12:16:14:44:24:
80:bf:61:07:be:bf:65:d0:73:41:e3:fd:66:fe:ea:b7:07:3c:
e5:f4:fd:1d:08:13:20:49:3c:c6:91:0f:2e:65:fd:de:2d:f5:
06:15:77:00:86:21:8d:57:bf:f5:43:2d:60:c4:90:7e:c6:2b:
d8:e6:94:8c:93:6c:25:96:f3:05:f2:02:28:2b:60:72:5a:cb:
72:9e:c6:56:a5:95:da:ef:34:14:43:6f:e8:bf:2b:e3:1b:ac:
31:47:d9:3f:50:0c:2a:ae:42:11:a0:b5:49:df:bd:fe:6e:8b:
c9:43:7c:94:bd:66:fe:dd:1e:29:87:91:91:d0:11:c3:ce:60:
20:11:08:30:e7:66:f1:19:e9:48:31:9f:bd:3d:13:5a:d3:55:
90:f0:7c:7b:a6:6a:b5:67:37:50:c8:f0:34:3f:3e:4e:1c:26:
28:94:8a:54:e4:ef:a7:8f:4f:55:9d:87:f2:60:54:a6:a8:29:
85:a1:10:40:f1:5e:28:30:2c:e8:ca:1f:8d:a1:a3:8a:d5:0b:
b3:63:a3:dd:6c:bf:39:7c:4e:9b:2a:35:dd:66:ff:c6:52:3b:
c1:f3:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:25 2025 by rpki-client