Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/iIZa86cRoXzfTgl30QJoI1SOvPY.roa
File: iIZa86cRoXzfTgl30QJoI1SOvPY.roa (raw, json)
Hash identifier: 8zjLfzmaOcWmBNRerK1/Wq9anwq2ilShQCg9MYrO3HM=
Subject key identifier: 88:86:5A:F3:A7:11:A1:7C:DF:4E:09:77:D1:02:68:23:54:8E:BC:F6
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 019422FBFC19C8F3A95516EF9807739B7330
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/iIZa86cRoXzfTgl30QJoI1SOvPY.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8896
IP address blocks: 45.138.236.0/22 maxlen: 22
45.138.238.0/24 maxlen: 24
45.138.239.0/24 maxlen: 24
77.241.96.0/20 maxlen: 20
89.221.96.0/20 maxlen: 20
185.15.216.0/22 maxlen: 22
185.15.216.0/24 maxlen: 24
185.92.52.0/22 maxlen: 22
185.126.184.0/22 maxlen: 22
212.33.128.0/19 maxlen: 19
2a00:1e18::/29 maxlen: 29
2a00:1e18::/32 maxlen: 32
2a00:1e19::/32 maxlen: 32
2a00:1e1c:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Apr 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fc:19:c8:f3:a9:55:16:ef:98:07:73:9b:73:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88865af3a711a17cdf4e0977d1026823548ebcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:d6:b0:09:40:95:8e:78:9a:79:77:d8:73:
16:fe:3d:e7:a3:46:e4:2c:23:17:47:ba:cc:c9:00:
d0:a2:9a:8b:6c:e4:20:6e:54:24:cf:64:2a:00:cc:
4c:89:ad:51:7b:a4:2a:26:f7:90:26:53:cc:f1:eb:
c3:56:e3:99:a5:36:03:7c:cc:f0:68:88:62:0d:a2:
3c:f1:df:52:71:d0:26:ed:e9:1b:3a:0a:39:a4:52:
04:f3:77:99:ce:8a:b6:4e:7a:23:9f:6c:86:2d:12:
6e:77:0b:1d:b4:94:64:c2:cf:72:bc:67:4f:29:24:
e5:6e:71:40:8e:3e:a6:b2:81:99:8d:76:56:05:82:
c1:5a:c6:9f:bd:09:45:ca:95:48:93:82:d4:66:e7:
77:8a:f3:bc:d8:a0:10:04:e5:c9:93:0d:57:59:62:
28:7b:95:7a:f9:6a:64:81:50:7b:77:36:bf:da:1c:
12:b6:cf:d6:07:d2:ad:9e:62:53:aa:f0:7f:a1:02:
8d:61:c6:60:12:fc:29:59:fb:5b:a1:b8:d8:33:0b:
c8:c5:d5:51:b7:86:b2:2f:07:5e:ad:23:77:e7:be:
40:db:d5:ad:67:a4:4c:1b:2b:11:00:2c:0f:28:cb:
30:d7:41:71:1c:7a:13:a8:5b:d9:20:f3:71:1b:6a:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:5A:F3:A7:11:A1:7C:DF:4E:09:77:D1:02:68:23:54:8E:BC:F6
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/iIZa86cRoXzfTgl30QJoI1SOvPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.236.0/22
77.241.96.0/20
89.221.96.0/20
185.15.216.0/22
185.92.52.0/22
185.126.184.0/22
212.33.128.0/19
IPv6:
2a00:1e18::/29
Signature Algorithm: sha256WithRSAEncryption
1c:f0:83:ae:13:18:44:4a:7c:dc:e5:5d:05:34:bf:2d:d5:4f:
4a:b4:e5:22:3e:e4:fb:6e:79:77:b7:4b:94:da:06:2b:02:4c:
4a:58:da:08:da:7c:b7:ec:a7:3a:b0:6b:17:df:58:72:5f:69:
ab:1a:8a:45:d5:f3:72:6a:27:85:16:4b:0e:a8:20:10:f5:f1:
42:3b:7e:df:89:f3:92:b0:e6:d8:09:01:c2:32:27:fe:ca:97:
db:9f:7e:20:79:37:e9:7d:4f:11:ff:2c:0d:3e:25:92:d6:1c:
cd:8a:a0:19:45:f8:d0:63:f1:a1:67:a6:8c:17:6c:b5:14:23:
af:f2:36:0b:73:da:63:66:cd:4c:e3:52:21:6f:39:06:b7:0a:
cf:15:18:d3:4b:c0:e9:52:48:0b:9c:c2:79:e5:12:bf:f5:20:
cf:85:7d:b3:fc:4c:18:c9:c1:84:4b:f8:b3:8e:50:54:dd:0f:
ce:c1:62:ed:b6:77:f7:f2:46:e9:2f:c6:f5:a7:ea:e1:30:14:
33:4a:4d:a3:94:12:cf:13:fe:6f:bb:84:48:70:18:69:80:68:
e7:a1:28:1d:42:f9:93:20:1d:29:60:3d:98:1c:56:7f:ef:bf:
ba:58:9a:04:af:c8:f1:39:df:53:0d:c2:6c:66:14:dd:70:3e:
cc:29:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:48:08 2025 by rpki-client