Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/tDrC79jy05qLiSeGGtYyAuesdgQ.roa
File: tDrC79jy05qLiSeGGtYyAuesdgQ.roa (raw, json)
Hash identifier: OgFpdWFNHAqF4vtBhOYeh6KIut6FfWhkz6KH3iPBxNM=
Subject key identifier: B4:3A:C2:EF:D8:F2:D3:9A:8B:89:27:86:1A:D6:32:02:E7:AC:76:04
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFC392F5C0CB4B30DEE3E14C7F523
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/tDrC79jy05qLiSeGGtYyAuesdgQ.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45007
IP address blocks: 85.187.45.0/24 maxlen: 24
185.242.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fc:39:2f:5c:0c:b4:b3:0d:ee:3e:14:c7:f5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b43ac2efd8f2d39a8b8927861ad63202e7ac7604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:10:6f:5d:cc:da:48:de:e9:05:9d:b0:8e:
89:0d:84:52:e2:6c:45:35:6f:5a:a0:01:24:b0:db:
35:4a:8c:0f:f5:4c:ac:44:6d:0a:ee:4b:11:51:31:
a4:00:8a:d5:72:de:75:e0:f0:1f:f3:07:c1:08:ee:
77:61:12:04:46:39:ed:33:2a:e9:ff:fb:f3:3b:dc:
b7:90:ef:4d:84:14:00:94:d4:07:5d:b1:58:7c:f8:
a3:be:bb:28:a6:cf:58:92:99:25:59:58:c4:2c:f8:
39:b1:b2:fd:20:57:ca:fd:71:a0:50:63:70:00:76:
e4:ee:87:9a:52:fa:71:31:2e:eb:95:04:82:5e:28:
4f:f7:fb:5d:42:ac:19:d2:72:a9:46:9a:25:38:4e:
c2:ef:42:c6:d0:44:86:a9:2c:9c:a6:10:7e:5b:a6:
d0:d4:38:f1:bf:f6:db:e1:f0:cb:e8:1e:2c:57:89:
e1:58:ab:41:93:12:69:91:cd:9c:78:82:28:c2:27:
01:fe:f0:fd:5e:15:b2:34:70:1a:8c:ee:a1:ed:0c:
8c:39:b3:49:2f:d2:be:2f:d9:b4:ec:ff:07:ab:15:
72:5f:d2:7f:1e:4a:8b:60:99:36:b8:e6:6a:1f:13:
70:be:8f:7d:2c:7f:f7:ef:3f:fd:76:11:97:1e:af:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3A:C2:EF:D8:F2:D3:9A:8B:89:27:86:1A:D6:32:02:E7:AC:76:04
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/tDrC79jy05qLiSeGGtYyAuesdgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.45.0/24
185.242.171.0/24
Signature Algorithm: sha256WithRSAEncryption
06:80:2b:10:3b:b5:fe:4b:e0:b2:3d:fd:bd:f7:3e:ad:e1:3a:
ee:de:c6:11:20:8d:45:5d:b6:f5:c8:90:61:4b:de:fa:d2:3f:
55:80:01:12:f1:3e:eb:d0:87:59:35:c6:10:d8:d7:4d:6f:6a:
44:c1:56:84:97:f5:b2:0b:f7:05:e7:46:28:80:0a:8e:d3:4a:
bb:9d:13:50:8b:6b:0b:0a:d5:b7:c2:d3:d8:4a:55:0e:a5:43:
f1:f0:46:80:e3:35:ff:ea:e1:20:fd:60:a5:87:1b:b1:80:c0:
eb:95:63:b3:9f:9f:77:0d:b7:56:c6:f6:f7:c2:e2:14:26:1f:
a1:23:bb:4e:c5:bb:fa:07:fb:e1:38:2a:9f:36:bb:e0:85:04:
98:3e:4f:42:2f:35:42:13:af:6d:f8:fc:d5:1a:cd:26:ce:c7:
d3:ea:8a:43:3f:f2:a5:e0:18:52:9f:ae:6a:c1:5c:bc:48:cf:
79:70:83:df:83:48:b9:f7:d3:53:f5:2b:57:ff:ab:03:56:e3:
ac:b8:9b:bd:92:47:9d:17:13:7b:84:3e:ca:a7:f2:1e:e0:13:
6e:3f:fb:fd:f6:7f:94:4c:d7:6e:16:f7:7f:7f:1d:4e:50:4d:
7d:f9:5b:fe:74:bf:35:81:fb:6b:12:c2:d5:3f:a6:db:ae:82:
0c:91:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:50 2025 by rpki-client