Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/1HJjsYIKgn5m4aKZWr3wynalRwQ.roa
File: 1HJjsYIKgn5m4aKZWr3wynalRwQ.roa (raw, json)
Hash identifier: 4AW+T8DVNHH/qCqGZo07n9kC0wNSFK9esxUBxaOybzo=
Subject key identifier: D4:72:63:B1:82:0A:82:7E:66:E1:A2:99:5A:BD:F0:CA:76:A5:47:04
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019421B25BA6A84EA7BB0844776A0477CDDB
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/1HJjsYIKgn5m4aKZWr3wynalRwQ.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60451
IP address blocks: 185.30.180.0/22 maxlen: 22
185.30.180.0/24 maxlen: 24
185.30.181.0/24 maxlen: 24
185.30.182.0/24 maxlen: 24
185.30.183.0/24 maxlen: 24
185.135.92.0/22 maxlen: 22
185.135.92.0/24 maxlen: 24
185.135.93.0/24 maxlen: 24
185.135.94.0/24 maxlen: 24
185.135.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5b:a6:a8:4e:a7:bb:08:44:77:6a:04:77:cd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d47263b1820a827e66e1a2995abdf0ca76a54704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:9a:51:bd:59:52:7a:86:bf:11:9e:2b:f1:
c2:18:4a:94:62:6a:0b:33:aa:84:68:92:d0:da:25:
7a:82:8d:73:5e:c0:30:81:9c:d1:a0:0f:7a:6a:11:
f4:72:5b:ae:87:e9:0c:b5:80:02:49:e8:2a:aa:6c:
42:a2:12:87:03:a7:40:2b:22:1f:37:f8:f1:65:47:
23:23:f3:cf:24:54:d6:36:cd:67:ac:a8:36:d3:6c:
3c:28:70:94:2b:e2:b6:75:3b:9a:60:9c:d3:4d:2e:
4d:99:92:54:7e:10:02:e7:88:9f:96:3a:5a:e4:05:
a0:3a:50:5d:81:bb:d1:3a:97:4e:63:8b:ea:6a:80:
b6:0d:d7:74:f7:92:fa:f4:3b:9c:a9:d4:29:f0:c5:
19:c9:92:3f:99:98:2c:a3:88:94:31:64:8c:ed:78:
9b:22:d8:5a:4a:02:88:e1:6f:d0:3e:5d:e4:83:3e:
a5:ec:23:f6:ea:0d:7d:0e:7d:ef:e1:9c:3f:09:39:
90:a7:bc:60:d5:6e:2d:60:a2:69:64:b9:a1:c8:4a:
f6:f7:77:0c:93:2a:c1:f9:64:15:ef:d3:0a:b1:b7:
a8:96:d4:48:de:bf:a1:30:74:a5:aa:81:04:ff:c6:
fa:8e:29:12:18:5b:fd:e4:d2:25:b9:83:b0:1a:c6:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:72:63:B1:82:0A:82:7E:66:E1:A2:99:5A:BD:F0:CA:76:A5:47:04
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/1HJjsYIKgn5m4aKZWr3wynalRwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.180.0/22
185.135.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f3:55:07:14:b7:98:bc:47:bd:4f:b5:ee:a4:fb:90:4b:eb:
05:a7:52:23:9c:f5:f3:02:b4:43:d7:46:0d:d3:2a:32:29:72:
5d:58:77:a6:8d:c8:8d:8c:31:50:92:80:af:a1:a8:bd:2f:89:
59:e2:1b:16:82:66:dd:90:ee:69:76:f7:66:5f:de:4c:b0:7d:
1c:4b:65:7c:7f:cf:29:f4:df:f1:72:f6:b7:e8:2f:bc:e4:38:
a9:ca:dd:6b:f2:30:be:43:39:83:41:ae:76:d2:71:a1:35:a0:
b1:63:d7:d9:ee:ae:99:37:57:8d:97:de:ac:0c:fc:cb:51:1f:
2a:99:ea:fd:27:5b:17:79:14:3e:1e:f3:b7:77:41:2a:94:0c:
70:b1:28:44:2a:6d:c3:a0:0d:96:72:c0:0e:4d:45:2e:01:0e:
e3:72:cf:da:f6:a1:15:b2:b0:1f:df:b7:0e:ac:70:db:e5:b3:
83:b7:86:60:24:ff:11:1e:f6:2c:df:e0:01:1e:5f:b3:de:3d:
e3:4a:6b:ba:e1:59:c2:2e:fa:14:1d:a6:14:25:e7:de:14:34:
bd:9f:9c:c8:1f:40:ac:2e:b6:2f:8c:86:3d:00:1a:33:d2:f7:
24:61:7e:28:36:73:36:99:ed:81:ac:23:5f:e4:d7:ec:ce:49:
d3:99:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:08:17 2025 by rpki-client