Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/49OmEENKn2pggkZrla5_tvJAS5g.roa
File: 49OmEENKn2pggkZrla5_tvJAS5g.roa (raw, json)
Hash identifier: y2VOplSKaFK6l6b//Hy/89Z9on3Nk836w0LqiWTCSxQ=
Subject key identifier: E3:D3:A6:10:43:4A:9F:6A:60:82:46:6B:95:AE:7F:B6:F2:40:4B:98
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 019423D6F9F6948A260A4246D14A521F8002
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/49OmEENKn2pggkZrla5_tvJAS5g.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 271791
IP address blocks: 82.86.104.0/21 maxlen: 21
82.86.104.0/24 maxlen: 24
82.86.105.0/24 maxlen: 24
82.86.106.0/24 maxlen: 24
82.86.107.0/24 maxlen: 24
82.86.108.0/24 maxlen: 24
82.86.109.0/24 maxlen: 24
82.86.110.0/24 maxlen: 24
82.86.111.0/24 maxlen: 24
82.86.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f9:f6:94:8a:26:0a:42:46:d1:4a:52:1f:80:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3d3a610434a9f6a6082466b95ae7fb6f2404b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:15:a9:dd:42:56:4c:e4:46:53:02:aa:6d:
46:1b:c0:33:12:6c:85:8c:12:e4:a0:8d:db:04:26:
ec:bd:27:b0:2b:05:f3:72:e6:5a:c3:5d:d8:a9:3d:
0d:64:68:6e:eb:e3:d2:37:21:79:06:c0:c4:69:c2:
b8:93:f3:2e:bc:90:e8:9d:bb:a3:3e:a7:dc:aa:e4:
e1:c4:23:7a:ff:47:05:f5:5e:7c:b2:7e:7f:a6:6b:
c1:bb:5e:4b:65:e7:7a:2b:e6:39:df:33:ba:fe:67:
0e:d3:9f:60:b3:14:b2:ec:ac:65:b8:21:9a:74:46:
99:8d:3c:5f:a0:a1:98:35:ee:7c:96:bb:df:ab:07:
96:83:46:44:db:b6:24:91:81:c9:cf:a4:3e:bd:48:
51:46:6c:af:d6:d1:2e:75:c3:39:29:a3:92:fd:29:
90:f9:78:93:dd:e2:30:b4:d4:f0:cd:e6:13:d3:31:
31:95:74:e0:56:c3:56:77:06:1c:8f:74:22:55:ce:
83:d8:61:29:7b:cc:d9:6c:47:c9:19:a5:bc:af:0b:
ab:a0:22:1b:5c:54:b6:fa:7e:c1:8c:c7:0c:70:6d:
19:1d:ad:38:66:e7:b6:e6:8d:3a:92:87:c1:84:ce:
24:a5:8c:57:3d:a0:10:13:68:93:8c:0e:a5:2c:2b:
5a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D3:A6:10:43:4A:9F:6A:60:82:46:6B:95:AE:7F:B6:F2:40:4B:98
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/49OmEENKn2pggkZrla5_tvJAS5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.104.0/21
82.86.168.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:f4:44:91:ef:ed:d3:5b:a9:71:dc:47:f4:f1:53:9a:39:86:
bf:04:59:18:c0:2b:80:ad:a6:4a:68:ed:36:45:e2:5e:68:34:
83:77:f7:bc:56:7b:d7:87:a9:9b:e3:e3:3e:c5:ae:4b:9a:8f:
24:26:ec:93:f3:b9:69:c1:06:52:bd:08:ed:37:55:84:5b:3b:
e3:ec:eb:31:58:c5:3b:c2:c4:2f:49:ce:9b:ae:c8:31:50:01:
17:a4:e2:23:8b:09:05:01:94:79:45:67:9b:b3:72:24:17:79:
3a:26:03:d1:b4:85:8a:de:10:c2:52:97:35:26:b5:76:e2:a7:
51:5d:ed:63:8e:c3:d9:4c:13:3d:d7:de:e4:12:51:13:ae:cf:
95:ae:a5:5f:f7:ce:77:99:02:6e:34:29:b3:4a:bd:fa:61:6d:
cf:50:04:04:bb:af:9a:52:5e:b4:0a:61:76:12:ed:64:e5:c8:
89:b0:41:d1:8b:99:6b:b5:74:61:ac:eb:c7:fe:48:17:d7:ef:
21:55:46:07:10:d1:74:78:ba:2c:35:6f:a4:2d:2a:98:98:20:
cf:46:9f:bb:51:b1:e4:6a:bb:2f:ff:40:25:95:60:f2:26:8e:
29:e3:f1:ae:8b:c8:cb:7f:a8:5c:36:1d:09:bd:43:bf:4d:2d:
bd:42:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:58 2025 by rpki-client