Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa
File: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (raw, json)
Hash identifier: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=
Subject key identifier: A3:95:82:05:DE:C1:FD:B7:41:A9:7D:EA:2B:1F:18:D1:F9:B6:5F:D5
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 0194AC333C5D3C81116C5E758653EFEAE3CD
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa
Signing time: Tue 28 Jan 2025 09:17:06 +0000
ROA not before: Tue 28 Jan 2025 09:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5411
IP address blocks: 82.196.160.0/19 maxlen: 19
82.196.160.0/20 maxlen: 20
82.196.176.0/20 maxlen: 20
185.222.176.0/22 maxlen: 22
185.222.176.0/23 maxlen: 23
185.222.178.0/23 maxlen: 23
193.8.32.0/22 maxlen: 22
193.8.32.0/23 maxlen: 23
193.8.34.0/23 maxlen: 23
193.41.168.0/23 maxlen: 23
193.41.168.0/24 maxlen: 24
193.41.169.0/24 maxlen: 24
193.192.54.0/23 maxlen: 23
193.192.54.0/24 maxlen: 24
193.192.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:33:3c:5d:3c:81:11:6c:5e:75:86:53:ef:ea:e3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 28 09:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3958205dec1fdb741a97dea2b1f18d1f9b65fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:2a:d0:96:8a:fc:76:1e:9d:f7:43:1d:d7:
9e:67:7f:ed:b0:24:1a:fd:11:e9:6f:ef:83:22:cb:
32:60:be:ce:37:d2:ca:c5:f7:eb:22:6a:75:67:6c:
76:d3:59:f9:32:22:90:4e:ad:79:d0:f2:a9:8a:01:
41:16:3c:95:c0:c0:67:20:d2:e5:54:06:67:75:4e:
db:bc:e1:04:c9:6f:39:4f:33:aa:ce:87:a9:b7:c9:
01:5a:30:86:f4:ef:8b:0e:ac:4f:63:4c:b6:d4:81:
f5:60:76:b8:d1:9f:6c:21:06:6c:89:1a:65:af:3c:
1e:23:37:05:71:70:4f:da:ec:5e:f5:7a:97:5a:8e:
0b:fa:09:10:c9:d5:c1:48:19:30:ae:68:35:0a:ed:
bf:43:c6:4d:1e:b2:5e:fb:a9:89:ce:26:b6:27:18:
11:b5:d3:f8:e5:6f:9d:c0:28:2a:62:0c:96:bc:36:
8f:2b:b8:ce:a0:47:9a:b6:af:d8:b6:36:c5:fe:c4:
85:30:d3:ca:41:54:e7:51:f9:9a:10:2c:fb:c0:09:
8b:66:5a:71:e0:5d:b5:18:17:d9:cb:43:01:f2:a2:
3b:56:e1:34:a3:69:60:bc:d3:89:e6:83:b1:4f:07:
b0:a6:67:8c:db:ee:b7:da:73:a7:4d:97:d3:23:38:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:95:82:05:DE:C1:FD:B7:41:A9:7D:EA:2B:1F:18:D1:F9:B6:5F:D5
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.160.0/19
185.222.176.0/22
193.8.32.0/22
193.41.168.0/23
193.192.54.0/23
Signature Algorithm: sha256WithRSAEncryption
86:52:ce:9e:7b:07:8c:f8:b8:ec:3f:7f:2d:42:58:29:12:cf:
b0:09:10:4e:9e:0d:4b:df:42:52:16:ec:ad:96:8e:f8:2e:08:
41:94:cc:8f:c9:2b:ae:6a:a7:54:3e:77:df:45:63:1b:32:f1:
75:bc:34:63:10:ef:8e:c9:41:b2:bd:d6:bf:3f:db:45:ad:65:
7c:0e:45:94:82:0a:ed:30:e6:0f:2a:c1:d3:0c:02:3f:35:42:
60:c3:b0:5a:dd:14:7e:04:95:24:5b:6b:29:c2:c3:ec:09:18:
cb:8f:14:d6:56:32:79:a7:ee:dd:27:7e:57:6b:97:11:bb:92:
6b:bd:9c:de:ce:ea:d2:1c:95:86:38:9c:6c:77:c1:b0:a2:78:
22:c1:81:fd:4d:39:1a:8d:2c:dc:8b:25:a0:17:bc:00:b8:26:
c4:4b:f3:89:5e:01:53:85:a2:2b:31:7a:6e:0c:8f:42:79:3f:
92:76:60:29:60:a7:2f:db:ff:19:2e:f2:64:d8:b1:d5:76:f5:
b7:55:67:1c:ea:86:f3:cb:66:c3:e8:c4:14:6e:9f:2c:95:ce:
0c:be:77:35:f6:db:b4:22:45:f1:3b:f5:da:b1:0a:2e:be:52:
77:ce:36:94:7e:73:cb:9d:03:23:6f:93:b0:32:ae:73:bf:23:
7f:5b:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:01 2025 by rpki-client