Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa
File: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (raw, json)
Hash identifier: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=
Subject key identifier: F3:97:5C:07:8B:C7:52:EF:D5:CB:87:AA:94:A3:B3:AE:65:B8:3A:58
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019423D7FA01EB00D277A5E74942D04F4A7A
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33843
IP address blocks: 45.150.68.0/24 maxlen: 24
46.231.136.0/21 maxlen: 21
85.236.192.0/19 maxlen: 19
2a01:1e8::/32 maxlen: 32
2a01:1ee::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fa:01:eb:00:d2:77:a5:e7:49:42:d0:4f:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3975c078bc752efd5cb87aa94a3b3ae65b83a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:d7:75:a2:a2:58:c2:29:ab:35:03:e4:ca:
12:b9:eb:fc:ba:a0:bc:1b:28:93:e3:18:2b:ea:c9:
9a:31:e8:1f:5f:9d:ae:7f:00:e9:22:78:df:fd:48:
84:e2:f5:43:00:a7:c3:50:e5:83:64:c6:c8:f3:1c:
5c:b2:8a:f5:16:57:0f:9d:33:56:4c:3c:5a:7d:38:
e3:7d:1d:ec:34:c7:7d:b3:f3:24:7d:79:33:1b:45:
8f:c7:03:00:6c:e8:fd:42:03:de:f7:68:29:b7:df:
c2:d4:4c:24:21:5d:4c:c7:6e:01:a7:04:03:6a:34:
cc:a5:1a:46:c3:ee:01:a6:07:a1:00:a4:23:a2:62:
24:f5:88:b3:3e:35:7a:a7:e2:39:f8:de:82:c8:8b:
d2:41:95:21:d6:69:2d:6d:84:c5:3d:8f:56:b1:a9:
ae:c3:13:78:b6:fd:39:23:b4:c1:55:09:56:09:d6:
74:d9:19:c8:d4:6e:9c:43:4c:8e:3a:6e:4a:0b:5a:
2e:ff:d4:a4:22:34:c0:65:7e:8c:15:d2:9c:7c:b2:
40:03:6c:3a:09:a0:b4:39:e2:c4:20:d4:c7:fe:77:
4d:e4:71:49:a8:29:53:89:2a:47:37:02:ea:1a:b4:
a9:b2:f8:25:c3:81:61:a9:fe:a6:6e:b8:ee:6f:99:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:97:5C:07:8B:C7:52:EF:D5:CB:87:AA:94:A3:B3:AE:65:B8:3A:58
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.68.0/24
46.231.136.0/21
85.236.192.0/19
IPv6:
2a01:1e8::/32
2a01:1ee::/32
Signature Algorithm: sha256WithRSAEncryption
11:25:39:54:57:24:a8:08:dc:c1:4d:61:75:c1:3d:d3:05:28:
68:0c:1d:79:da:ce:10:38:1a:db:fb:c3:b5:31:63:84:cc:fe:
76:27:78:da:66:e6:3f:46:4f:99:18:84:d7:88:6d:73:a1:b7:
bb:18:55:fd:63:16:72:2b:87:15:73:bc:c0:60:39:00:15:3f:
fc:20:b4:74:34:d3:b9:02:a5:02:ca:8f:29:d0:a6:89:81:db:
f2:d0:7e:20:ca:8c:14:f6:26:b0:e8:5a:f3:29:33:12:85:12:
4f:1d:29:7e:07:ed:83:3c:43:ac:44:1a:6b:f5:c9:96:55:40:
42:2d:cb:ef:45:7c:a0:82:da:20:8f:95:b6:94:f7:e4:a6:e0:
b9:12:98:89:f0:e2:3f:9e:43:4c:3b:f7:59:eb:ab:66:19:1c:
e7:01:11:a5:f7:8f:b8:1b:62:3d:4b:07:b6:4f:3f:25:fd:dd:
10:d4:72:4b:7f:8f:c4:4c:cc:57:2e:ba:b2:69:57:bb:22:41:
2b:f1:fd:54:a9:63:24:bf:0e:04:a4:6e:ca:43:84:19:5a:e0:
d6:15:3d:a5:8c:e4:69:e9:f7:8c:64:8b:72:6c:b9:cf:cc:8a:
ff:09:6e:9c:53:a7:81:ba:bc:5f:ae:59:c5:ee:27:6b:84:97:
0c:dc:23:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:44 2025 by rpki-client