Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8KKWRiBU3hYQSkjRIg5cOt1EdMw.roa
File: 8KKWRiBU3hYQSkjRIg5cOt1EdMw.roa (raw, json)
Hash identifier: i6lAZyFQOpurDbx4kTRYDJ5Wi5P83cNqnhOqBxXnWOE=
Subject key identifier: F0:A2:96:46:20:54:DE:16:10:4A:48:D1:22:0E:5C:3A:DD:44:74:CC
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA4C2D7D8E580E63906486111F52A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8KKWRiBU3hYQSkjRIg5cOt1EdMw.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212667
IP address blocks: 45.91.160.0/24 maxlen: 24
87.247.140.0/24 maxlen: 24
213.134.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a4:c2:d7:d8:e5:80:e6:39:06:48:61:11:f5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0a296462054de16104a48d1220e5c3add4474cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:2b:5a:82:cc:cb:79:b5:44:da:4f:0f:65:
49:92:99:36:03:34:20:cf:7d:db:66:7b:97:5b:1f:
c1:1d:58:92:75:c0:1e:c1:fd:dc:8e:57:19:10:2d:
f7:ce:ee:cc:aa:10:ab:31:30:71:5d:ae:93:7b:aa:
7d:11:23:b7:90:e2:5e:9e:c4:1b:3c:ee:c7:35:1c:
c2:96:b9:e5:5b:dd:5e:13:7c:41:08:62:0e:ba:39:
27:7f:7c:64:93:5d:b6:8d:27:0f:14:97:86:d6:70:
06:59:da:2e:8a:97:29:d9:8c:3a:16:dc:a3:5b:57:
73:06:60:e3:0d:6b:d0:4f:e3:4f:82:64:de:a1:4d:
18:a7:37:53:75:8c:8a:90:f4:07:bf:a2:7f:dd:f4:
43:21:16:bb:15:8a:4f:80:f4:64:6e:41:c6:36:65:
f3:af:f5:29:ca:14:81:1a:b7:02:4e:00:b2:14:72:
f4:83:82:8f:ee:b2:6f:fe:f8:c9:8b:b3:98:06:b6:
19:ca:6c:13:be:f4:b8:e2:a1:e0:9d:f2:23:85:ff:
37:69:e5:d1:59:5e:af:73:98:ab:2b:97:6b:14:a1:
7c:89:c4:98:e4:c3:1c:80:ad:c6:43:55:58:6a:fd:
1c:1f:e3:1d:61:2d:e3:8e:dd:f6:1e:56:9b:78:b2:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A2:96:46:20:54:DE:16:10:4A:48:D1:22:0E:5C:3A:DD:44:74:CC
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8KKWRiBU3hYQSkjRIg5cOt1EdMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.160.0/24
87.247.140.0/24
213.134.20.0/24
Signature Algorithm: sha256WithRSAEncryption
52:12:65:e0:a7:01:91:ee:72:f6:8e:e1:d9:a9:74:b1:35:6d:
6c:9e:76:a3:9a:7c:2c:a9:21:5c:d0:4f:57:a2:1a:af:9f:70:
fc:17:93:2e:ed:d0:78:58:d0:f8:e6:7b:4b:8f:cb:df:62:71:
0a:04:01:e6:50:90:0f:03:30:4e:0d:6b:70:52:de:c0:71:c4:
3f:8e:52:8f:3c:2f:eb:1f:4d:76:ba:59:09:ea:b4:6f:ad:b7:
e2:7a:6e:f1:16:3d:d8:f3:83:3b:6d:e0:3a:e7:43:21:2a:ff:
c2:40:a5:1f:48:5d:a0:d1:12:6b:cc:36:61:6d:4f:ab:43:dc:
ef:31:f1:95:66:ba:ba:19:64:03:32:91:ca:de:20:48:f8:cb:
2d:45:4a:45:66:a7:51:ff:0c:e0:88:da:04:7b:51:9a:8e:38:
f3:dc:40:47:8c:02:69:12:47:e5:39:04:b0:b7:74:d6:68:dd:
3e:89:b1:d6:c1:6c:d9:0a:3c:1a:ec:5d:43:1c:cb:7d:a3:c1:
8c:e5:14:ba:ea:08:93:d6:e5:b2:32:0a:06:29:2e:b9:60:bb:
1d:c3:69:17:fa:d3:cd:e2:d3:38:a7:8f:e6:64:3b:da:4e:b2:
e9:ff:94:75:9f:1e:d7:ac:38:f5:b8:0f:7a:75:c1:b1:d7:9e:
13:1c:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:49 2025 by rpki-client