Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/8h-VrH2OLGuzooixz2EHGOzGj7c.roa
File: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (raw, json)
Hash identifier: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=
Subject key identifier: F2:1F:95:AC:7D:8E:2C:6B:B3:A2:88:B1:CF:61:07:18:EC:C6:8F:B7
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019426D9CE80E73CB638DADC6D8A37300635
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/8h-VrH2OLGuzooixz2EHGOzGj7c.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203101
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.232.0/24 maxlen: 24
45.56.233.0/24 maxlen: 24
45.56.234.0/23 maxlen: 23
45.56.236.0/22 maxlen: 23
45.56.238.0/23 maxlen: 23
45.56.240.0/20 maxlen: 20
72.46.154.0/23 maxlen: 23
172.93.4.0/23 maxlen: 23
185.98.100.0/22 maxlen: 22
199.5.180.0/23 maxlen: 23
199.195.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ce:80:e7:3c:b6:38:da:dc:6d:8a:37:30:06:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f21f95ac7d8e2c6bb3a288b1cf610718ecc68fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:d8:b7:f6:3c:da:c9:b5:6b:fe:3f:26:86:
f7:a4:40:32:5a:2e:16:25:bb:57:a7:8a:93:12:96:
9f:4e:42:f0:b9:d2:1e:ed:6f:a6:3e:bf:38:b7:33:
48:b4:4a:ca:19:d4:d2:c3:5d:64:4c:41:57:49:f1:
c2:2a:aa:d7:64:dd:77:e1:9b:1f:59:15:25:68:6e:
64:a3:44:d3:66:79:cb:9b:70:c1:29:9a:a8:2a:57:
8b:7a:ba:53:26:35:ca:c5:f9:70:9c:c2:44:85:61:
60:3d:29:7c:ce:35:7f:bb:bc:eb:b4:b0:93:55:20:
b5:01:5b:35:65:9e:5f:56:5b:2c:95:5f:e3:85:11:
f5:75:62:96:e2:71:49:f1:54:08:a2:e2:ce:60:36:
dc:17:0c:36:58:0a:c5:d3:92:14:03:f8:6f:7e:2a:
0b:a6:94:60:a2:90:f8:be:b8:d4:0d:ab:48:6d:e7:
51:7e:2b:32:d8:c0:da:51:c5:7e:36:c6:c1:2f:f6:
df:66:a9:83:3c:d6:69:1a:24:47:77:0f:36:c4:85:
55:fe:7a:89:5c:65:53:27:a5:54:1c:d3:51:3a:03:
57:38:eb:cb:c5:3b:48:60:62:f4:43:e3:a7:c7:96:
0d:aa:ea:99:91:9c:8f:37:7c:f8:3f:d9:1c:c6:4b:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:95:AC:7D:8E:2C:6B:B3:A2:88:B1:CF:61:07:18:EC:C6:8F:B7
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/8h-VrH2OLGuzooixz2EHGOzGj7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/19
72.46.154.0/23
172.93.4.0/23
185.98.100.0/22
199.5.180.0/23
199.195.130.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:62:99:88:07:12:34:9e:cb:1e:42:9c:54:71:3d:4e:a1:8a:
1b:17:3c:c8:90:bc:30:1d:88:6a:25:86:7a:53:ba:8a:dc:71:
48:65:63:b4:91:f8:80:2e:78:48:af:c9:79:8d:a9:fd:8e:a6:
e4:b6:0b:23:b6:e0:bd:7f:b1:f1:69:7a:ff:fd:7e:eb:32:88:
9c:76:c4:99:92:d2:72:d9:e1:e4:ed:30:eb:da:bd:90:2e:a6:
8b:42:1a:52:10:e1:39:45:6e:13:45:15:36:10:37:b9:b0:b6:
9e:d4:85:77:b8:58:a0:d8:3f:1c:e3:15:a4:b9:85:7e:0b:7b:
cb:51:4e:5f:9e:4e:d9:ac:b5:c5:33:5b:82:4b:51:21:35:4e:
70:e1:2e:89:22:13:2d:7d:84:b1:44:e9:b9:d9:92:d2:2a:be:
22:e5:38:27:7c:cd:b0:56:7b:80:78:e4:96:80:0a:f0:ba:b3:
1a:13:a2:7b:de:4e:a7:fd:73:a2:81:e9:86:20:dd:23:f4:c5:
2e:95:46:93:51:19:18:92:51:30:bb:99:c3:d8:73:62:d8:5c:
dc:24:f5:52:a4:40:98:85:68:5d:6e:87:61:47:31:04:e2:ea:
22:d2:e4:d4:b8:44:48:29:a1:d6:31:16:dd:4d:8e:18:90:b8:
bc:c0:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:42 2025 by rpki-client