Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/xJnPr2RyvvePQVXn-sWgNe1aA9M.roa
File: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (raw, json)
Hash identifier: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=
Subject key identifier: C4:99:CF:AF:64:72:BE:F7:8F:41:55:E7:FA:C5:A0:35:ED:5A:03:D3
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 0194228D5EEB317DEA4E666C6DA70BBD9813
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/xJnPr2RyvvePQVXn-sWgNe1aA9M.roa
Signing time: Wed 01 Jan 2025 15:47:57 +0000
ROA not before: Wed 01 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203328
IP address blocks: 185.138.44.0/22 maxlen: 22
2a07:9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5e:eb:31:7d:ea:4e:66:6c:6d:a7:0b:bd:98:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Jan 1 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c499cfaf6472bef78f4155e7fac5a035ed5a03d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:1a:a7:86:07:df:4d:65:26:b0:bd:2e:60:
41:91:e3:16:10:cd:51:8b:28:e7:43:af:93:52:63:
86:65:2a:c5:74:a4:3d:95:bd:f2:a2:22:2d:94:04:
be:e3:3b:1e:af:9f:d1:c7:d3:8b:68:b7:2c:5f:51:
03:a0:7f:fb:bb:40:e7:8b:3c:7f:6d:48:3d:cb:79:
52:7c:e0:e5:30:cf:5c:54:d6:fc:e7:1b:0a:cd:0c:
a8:9b:d6:aa:3d:9a:3a:85:d4:23:9e:19:a6:64:b7:
e5:5a:86:bc:da:57:de:6f:19:0e:2f:a1:c6:ea:a3:
f0:ea:71:64:b0:81:7e:0f:01:5b:25:7b:00:12:c9:
07:ab:e1:e9:46:cd:63:b7:28:e2:63:85:69:94:b3:
ed:c2:a8:d8:d3:a9:9b:b7:b3:25:49:8b:f6:d1:6b:
58:66:33:c5:ad:2c:2d:82:2e:0d:3d:e6:fa:61:d5:
1e:95:b6:78:d8:f8:7e:bc:9d:4b:7d:7a:b9:f0:06:
d1:8a:a3:48:d2:bb:37:7f:e0:90:c8:0a:9b:5b:14:
42:c4:35:69:67:49:ad:17:a8:25:ff:16:c6:0e:4a:
8e:29:df:4c:e1:97:4e:49:cd:c7:1d:7f:07:bf:6c:
f2:1c:4e:f7:18:4c:c9:31:fd:52:25:5a:9d:c3:c6:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:99:CF:AF:64:72:BE:F7:8F:41:55:E7:FA:C5:A0:35:ED:5A:03:D3
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/xJnPr2RyvvePQVXn-sWgNe1aA9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.44.0/22
IPv6:
2a07:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:66:7b:3a:a1:68:25:26:5b:5a:27:0d:8b:8b:23:50:52:02:
d4:6b:f6:6d:ba:58:ef:2a:32:7f:1a:a1:db:94:3f:0a:02:43:
a6:5c:9e:fe:ee:69:0d:10:ee:55:30:6a:06:76:80:88:26:2f:
62:41:7e:f5:14:20:6d:64:51:48:2c:35:cf:4b:91:e5:08:70:
ba:22:5e:62:5d:9d:2b:46:bc:a6:ac:ca:eb:a2:9d:cb:2b:a6:
af:1c:9f:78:31:65:40:7b:54:7f:b8:d6:57:d9:bb:03:49:30:
21:3c:b2:7d:28:1e:68:11:d1:91:c2:3e:88:a2:03:87:40:75:
86:80:7c:30:ac:d0:5f:d1:9c:5c:f2:9c:b6:c6:17:e7:ca:6c:
90:38:3f:64:e4:ea:b4:81:4a:77:cb:6c:35:a8:39:0a:59:7b:
2c:ed:ac:36:24:43:51:15:10:17:3b:5d:93:83:bb:1c:73:6b:
9f:ea:74:7d:4e:5a:82:6f:52:d3:78:3a:6f:ca:7e:8a:f3:eb:
33:8f:65:44:3b:80:4f:8e:12:0d:6d:36:ef:4a:8e:16:8f:e5:
bc:30:9a:e3:c9:df:8b:88:33:2b:a2:f8:bc:cb:62:0e:43:0c:
fc:d4:34:ca:ce:c4:ae:dc:41:0c:9f:49:f7:f6:90:96:19:13:
f0:7a:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:13 2025 by rpki-client