Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/T-i1HnnAiZlugAgaa37LNPgeYyA.roa
File: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (raw, json)
Hash identifier: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=
Subject key identifier: 4F:E8:B5:1E:79:C0:89:99:6E:80:08:1A:6B:7E:CB:34:F8:1E:63:20
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01942368F3F58E9A09D2494BD3F95A9AEF45
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/T-i1HnnAiZlugAgaa37LNPgeYyA.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 45.143.202.0/24 maxlen: 24
92.63.200.0/24 maxlen: 24
92.63.202.0/24 maxlen: 24
185.156.75.0/24 maxlen: 24
2a0e:e5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f3:f5:8e:9a:09:d2:49:4b:d3:f9:5a:9a:ef:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fe8b51e79c089996e80081a6b7ecb34f81e6320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:83:69:84:2e:91:9e:84:ea:41:11:b8:d0:
3e:70:f3:d0:5f:b8:e4:cf:b6:7a:51:76:bc:c9:8c:
6b:65:d5:5c:99:72:a6:ec:89:6b:28:f6:79:50:6c:
a3:f3:bc:f2:96:b5:16:90:1d:c2:ef:bd:9c:c8:1a:
88:e5:d4:e1:69:8e:50:68:0d:4d:9c:64:02:d2:83:
2c:05:fc:36:a6:7b:e1:eb:44:66:52:ae:1f:2d:eb:
3a:6b:24:95:13:59:3c:5a:a4:14:aa:d6:35:3d:65:
61:b3:60:d8:f5:71:00:d1:04:63:02:5b:f7:78:42:
d5:c4:a8:05:c1:a9:77:38:1d:7e:06:cb:b5:7f:34:
a2:e2:49:d1:e6:6f:6b:8b:b3:30:43:7f:8a:96:ae:
57:e9:b9:c5:c4:c3:84:09:ab:0c:39:c4:00:04:e4:
64:17:30:98:08:8c:c6:ec:f8:d2:5d:d8:72:c2:0a:
08:bd:65:bf:15:da:4c:3f:88:1d:12:cb:0d:c0:45:
8e:72:9e:59:ca:52:33:4b:6f:ed:b6:0b:c0:50:4a:
1d:70:47:6b:8b:83:b1:f4:c1:e8:fd:e0:65:73:1f:
d5:67:fa:67:d5:97:a8:48:e9:1d:dd:21:61:1e:b6:
ec:d9:0e:a9:41:06:65:fd:6d:fe:8f:77:4c:f7:a9:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:B5:1E:79:C0:89:99:6E:80:08:1A:6B:7E:CB:34:F8:1E:63:20
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/T-i1HnnAiZlugAgaa37LNPgeYyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.202.0/24
92.63.200.0/24
92.63.202.0/24
185.156.75.0/24
IPv6:
2a0e:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
35:e9:a0:5c:dc:83:7a:6d:0e:57:b9:a5:f5:bd:7b:9b:06:f5:
08:15:f0:04:9d:25:19:0c:82:3d:50:64:14:c9:ba:32:d7:e7:
0c:01:81:12:ff:42:07:34:af:2c:20:e2:60:fe:e6:a7:eb:fd:
ed:fd:9f:04:80:af:3a:77:f2:55:d0:a8:30:5e:40:59:5b:95:
b8:50:0d:ab:4d:4e:5c:30:f2:fc:69:a6:78:ea:95:f2:dd:9e:
dd:67:75:62:a8:95:4f:38:59:2a:44:b1:6e:87:b5:d4:03:53:
5d:b3:37:ee:e4:05:ac:07:62:8d:91:17:c6:e7:f3:f7:97:2a:
10:ad:ef:b1:79:1d:38:e9:9c:8d:f0:0a:f7:9a:02:a1:e3:76:
76:fd:31:19:ee:39:ec:58:ec:d5:7a:17:3b:1a:ec:8f:34:d1:
0d:85:54:f4:03:ac:aa:98:69:1a:e2:07:c0:12:cb:ad:fa:34:
0b:82:90:47:8e:ca:1a:a1:53:29:57:4a:a2:5d:bd:f4:7c:88:
2a:65:55:bc:a8:1f:8e:0c:95:7f:68:c1:2a:6b:a0:46:bc:df:
f6:f6:33:19:87:1f:22:c7:86:a6:39:2e:4b:bb:9a:d0:d1:79:
e3:72:b3:8a:52:b4:8e:b9:51:ac:6c:2e:8e:07:c4:5d:5f:8d:
58:fe:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:37 2025 by rpki-client