Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/V49WD2xV1M3_D9Ry1ndnt7L93dM.roa
File: V49WD2xV1M3_D9Ry1ndnt7L93dM.roa (raw, json)
Hash identifier: kRaiGlJMU4JY2fdD2JpVGGSlxtT/bY5IvrGEyaCChYs=
Subject key identifier: 57:8F:56:0F:6C:55:D4:CD:FF:0F:D4:72:D6:77:67:B7:B2:FD:DD:D3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71FC34879F8BD51C1A6F9B72B6551
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/V49WD2xV1M3_D9Ry1ndnt7L93dM.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203549
IP address blocks: 185.103.111.0/24 maxlen: 24
185.109.22.0/24 maxlen: 24
185.109.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1f:c3:48:79:f8:bd:51:c1:a6:f9:b7:2b:65:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=578f560f6c55d4cdff0fd472d67767b7b2fdddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fc:2b:08:7e:e6:31:a0:d7:41:c5:3a:53:16:
d4:ca:cf:2f:c7:66:28:38:14:19:38:08:1e:13:b6:
80:d4:85:09:49:ec:1e:79:31:2d:33:a3:d4:d9:b9:
1d:a7:ff:2b:d5:55:68:2d:fc:ea:aa:91:37:15:e9:
79:b1:2b:9e:a4:e9:56:e1:f6:79:d6:19:46:b1:c1:
98:f7:9f:91:9f:36:42:a9:55:8a:e3:0f:46:2d:37:
ad:cc:bf:94:be:1a:c6:0b:f4:6a:ee:98:b2:82:7c:
98:de:d5:71:77:9c:5b:12:2d:24:ff:89:9a:5e:05:
0f:fb:ea:9b:53:fa:12:65:fd:fc:5f:13:dd:b9:22:
c1:e4:fe:5c:78:00:5a:2c:d6:91:68:77:23:d4:c5:
c5:fb:77:ed:bb:d5:be:a2:62:ec:f0:75:5b:42:b6:
05:ba:c5:8b:be:94:17:06:4d:ab:87:6f:8a:2c:dd:
04:cc:48:e5:a2:3f:e4:ed:57:bf:d9:b7:79:b7:3c:
04:54:3a:61:80:7f:00:52:a3:05:08:b8:c4:b2:76:
e9:39:8b:23:d3:b6:88:41:0d:46:fa:19:88:0c:e9:
41:e6:3a:4e:f0:b4:c8:7c:06:94:1c:70:d1:e2:61:
f4:a5:69:c6:52:8e:4c:e2:13:c6:a7:ee:1d:66:66:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8F:56:0F:6C:55:D4:CD:FF:0F:D4:72:D6:77:67:B7:B2:FD:DD:D3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/V49WD2xV1M3_D9Ry1ndnt7L93dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.111.0/24
185.109.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:c7:ce:79:9d:68:df:1c:a9:93:d2:45:56:67:ec:39:a4:14:
a4:60:69:23:6f:3d:ca:b0:4d:bb:55:f2:b3:02:c6:16:ad:40:
1f:40:17:f4:7d:da:51:43:f5:8e:d7:90:04:82:20:4a:4d:ab:
28:d6:9f:32:65:a0:83:a6:0d:ae:6f:91:51:35:76:a5:91:32:
17:95:fa:6b:e7:b3:ce:c9:fa:b3:11:e1:b6:1e:d6:76:55:f3:
fc:f5:ae:ac:84:80:d8:f2:67:5d:9c:77:15:c8:17:39:93:dc:
9f:ff:c5:75:52:76:57:cb:25:a6:61:4a:76:a1:1a:83:5f:1e:
83:55:04:83:23:e2:35:da:46:93:3f:eb:10:a3:f2:6d:87:3f:
9e:fa:2f:2f:0f:8e:25:00:a3:60:e6:73:a4:b6:99:a1:5b:01:
7c:14:d1:02:f6:9c:8b:d3:4a:a6:c0:9b:cb:4c:76:de:51:44:
3a:7d:a8:44:87:80:c1:a4:3d:40:0c:05:21:82:42:07:49:14:
35:1d:36:e3:7a:0c:2b:07:f7:87:72:6e:b0:eb:f1:ac:c4:be:
33:97:60:04:2d:ad:e4:9a:6b:9d:4b:0b:9a:09:ba:6e:f8:00:
e9:a1:5b:f1:f1:c5:22:d7:ae:d5:24:65:c2:14:47:16:45:5d:
ad:e2:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:07 2025 by rpki-client