Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa
File: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (raw, json)
Hash identifier: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=
Subject key identifier: FA:FF:22:24:C1:BB:90:BC:3E:61:CD:0D:2B:24:30:0A:24:CA:52:70
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 019421440667C0BD387C4A24F77F7A14E7FD
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207990
IP address blocks: 45.9.48.0/22 maxlen: 32
45.67.132.0/22 maxlen: 32
46.232.208.0/23 maxlen: 32
185.246.172.0/22 maxlen: 32
2a09:77c0::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:06:67:c0:bd:38:7c:4a:24:f7:7f:7a:14:e7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faff2224c1bb90bc3e61cd0d2b24300a24ca5270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:e4:b3:ff:35:b7:8f:08:a9:d6:45:9b:9a:
61:1d:04:3e:7b:82:26:2a:34:7b:75:7c:ac:f1:8a:
1f:b0:41:e6:95:07:20:d2:58:46:f4:2c:57:60:ee:
f5:85:fd:da:7a:d5:b6:e1:55:c7:94:d6:08:7c:f3:
17:c0:76:26:b6:b2:c5:81:33:18:ed:33:28:23:17:
1f:cd:74:17:33:ad:78:18:cd:53:b8:fd:9a:0f:ad:
de:c5:4b:55:71:68:65:53:20:af:4b:5b:60:6b:04:
55:83:fd:d6:4d:59:c6:c3:77:05:cc:25:1d:1c:05:
3e:a6:c7:26:0e:9e:91:df:43:96:79:ef:03:f6:5d:
42:04:e1:26:b0:18:78:d9:31:cc:8a:11:d3:2f:42:
bf:92:ba:2b:ed:48:11:c7:59:78:85:83:5a:29:e9:
73:5f:0c:ea:56:df:2d:26:f8:8a:e9:73:d5:9c:a3:
a6:2e:50:7e:95:0b:d4:e2:61:f4:29:ba:b2:0c:ff:
10:4c:1a:45:9c:df:65:a4:11:2e:48:4c:2f:76:92:
b8:5b:ed:15:6d:24:4b:12:e8:ef:80:28:bb:55:96:
09:9d:db:03:2a:f1:98:0e:15:f8:14:3b:0f:0e:11:
b3:91:12:2a:e7:2a:ed:01:67:27:71:5c:94:59:15:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:22:24:C1:BB:90:BC:3E:61:CD:0D:2B:24:30:0A:24:CA:52:70
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.48.0/22
45.67.132.0/22
46.232.208.0/23
185.246.172.0/22
IPv6:
2a09:77c0::/30
Signature Algorithm: sha256WithRSAEncryption
5b:a3:5f:5d:8c:cd:53:bc:24:34:2f:48:a5:c8:3c:07:66:4c:
8a:1d:b0:43:d4:28:e5:21:91:30:e0:84:74:81:f8:4d:2d:4c:
01:ef:93:a8:d8:01:63:91:1f:2c:91:5d:9e:24:a3:5d:2d:29:
a4:b9:bb:3f:64:1c:ae:78:b1:05:99:02:d1:44:9b:ce:fa:35:
2e:4d:57:16:07:aa:10:4b:bd:34:51:b5:33:1c:31:56:cb:9c:
5d:c8:6d:fa:cc:36:4c:c1:81:37:e0:bd:44:9f:52:5a:48:f4:
5e:54:a5:35:2f:17:41:e7:44:7b:14:e5:0d:45:d3:03:24:fa:
30:22:25:c5:20:17:93:05:fa:bd:cf:62:b9:5d:2e:fe:2a:44:
f6:86:a9:92:4a:05:97:ed:3e:6d:d0:38:07:68:cb:f3:e3:20:
5e:f7:1c:71:21:95:dd:3c:e1:14:f2:6b:3a:5a:24:41:c5:f2:
42:04:3f:8d:16:e2:ed:ce:32:50:bc:ee:04:cd:a4:58:69:b8:
40:08:39:3c:62:a9:33:cc:de:0e:de:d3:85:3d:44:f1:8a:4b:
3a:61:cd:57:55:b1:8c:4e:e7:d9:5b:87:a9:70:2f:76:f1:99:
3d:46:20:8c:75:c8:3e:dd:7f:14:3b:3b:08:c6:96:35:c2:2e:
ba:e9:7d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:58 2025 by rpki-client