Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HIs8gXkWglqK6h5HttT5g6ZscjQ.roa
File: HIs8gXkWglqK6h5HttT5g6ZscjQ.roa (raw, json)
Hash identifier: 62MV/05+NTayLaIGgqj1zPgwSKJk/DQXvlIx2C2uMXk=
Subject key identifier: 1C:8B:3C:81:79:16:82:5A:8A:EA:1E:47:B6:D4:F9:83:A6:6C:72:34
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB9DF2DF9D0DABBFC41C1C22E55D19
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HIs8gXkWglqK6h5HttT5g6ZscjQ.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202243
IP address blocks: 80.85.48.0/21 maxlen: 24
92.52.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9d:f2:df:9d:0d:ab:bf:c4:1c:1c:22:e5:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c8b3c817916825a8aea1e47b6d4f983a66c7234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:ce:25:6e:e0:05:18:64:13:99:21:16:8f:
5f:38:97:41:d2:94:c7:15:39:98:66:9f:59:74:ec:
83:19:52:94:75:66:56:17:15:15:ab:7b:45:2d:d4:
11:d5:e3:c3:57:38:3a:65:af:4d:b7:d9:45:57:4e:
42:c4:f2:e3:f5:b3:ba:6e:c7:ad:6a:9a:c1:ad:a2:
45:02:62:39:bf:c0:63:3e:35:a1:4f:9b:98:79:2f:
2a:c9:b7:19:f4:33:c6:73:01:75:66:ea:24:49:cb:
91:64:93:19:d5:da:09:7c:5b:b1:3e:14:de:7f:95:
08:6b:53:5b:8c:63:52:f8:6a:96:e8:95:81:05:2d:
fe:bd:6b:60:6c:6f:66:c4:c3:40:d2:d2:c0:ac:c8:
55:81:90:5f:49:7c:e3:5b:e0:be:a5:0e:c3:5d:eb:
fb:7c:48:ec:3f:92:fd:6f:cb:4d:ba:53:b6:22:be:
47:fc:e0:c0:81:be:c4:d4:23:2f:4c:77:a6:21:c4:
be:38:2f:0d:75:5d:a2:1f:e4:43:e1:a9:c0:2b:4c:
f8:9e:c6:a0:75:f7:f0:51:60:af:8e:0a:4b:f2:90:
51:94:9b:ad:fe:dd:69:48:11:12:a4:43:86:57:44:
3a:e1:e5:54:e7:30:5c:23:c1:a4:65:17:e6:bc:a7:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8B:3C:81:79:16:82:5A:8A:EA:1E:47:B6:D4:F9:83:A6:6C:72:34
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/HIs8gXkWglqK6h5HttT5g6ZscjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.48.0/21
92.52.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:da:36:8c:ef:81:71:21:b3:12:97:d6:29:52:e8:99:d9:7e:
fc:1e:b8:d2:0b:fb:60:2d:8b:dc:27:33:fa:49:63:93:77:21:
80:19:17:dd:56:f7:77:b8:f1:0b:a0:82:ca:f2:1e:2c:ad:d4:
87:3d:27:00:34:a1:e9:9c:b0:71:06:c1:93:27:7a:39:89:92:
fd:3b:0a:96:36:ff:45:12:dc:4d:5c:69:d4:c9:56:44:8d:e6:
58:2b:d6:34:8f:d6:1c:bc:87:7b:cb:68:81:b4:ad:36:28:59:
57:32:46:47:63:50:9a:cb:4f:dd:83:58:73:fd:11:50:f7:51:
54:db:69:07:c6:29:6a:dc:4e:8e:fe:8d:b9:1c:67:27:bc:f5:
ee:a2:75:75:5b:0d:1d:eb:c1:85:d0:6c:a1:f2:aa:52:d1:cd:
74:b2:a7:78:93:ee:7b:3e:4b:ca:94:5c:a6:76:4d:4c:57:cb:
55:20:4f:2e:80:d0:41:bc:14:a0:2c:95:c2:fb:86:f2:7a:b3:
c2:d7:a9:6c:6b:7b:48:2b:9f:fe:48:0a:c5:30:66:c6:11:97:
ef:59:ae:c1:40:c3:4e:cb:c5:16:f6:4e:98:fa:72:84:a1:10:
f4:fa:51:7d:cb:2d:94:13:0d:cd:15:c1:00:bc:75:2f:e3:ea:
2c:5b:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:03 2025 by rpki-client