Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/l3wz3kxvyE3dLi_otf1H964v_ag.roa
File: l3wz3kxvyE3dLi_otf1H964v_ag.roa (raw, json)
Hash identifier: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=
Subject key identifier: 97:7C:33:DE:4C:6F:C8:4D:DD:2E:2F:E8:B5:FD:47:F7:AE:2F:FD:A8
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 0194258F4976B05289E62FF39AF8BDE6CEC9
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/l3wz3kxvyE3dLi_otf1H964v_ag.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207176
IP address blocks: 45.93.48.0/22 maxlen: 22
88.202.160.0/21 maxlen: 24
171.22.64.0/22 maxlen: 22
185.40.96.0/22 maxlen: 24
185.177.136.0/22 maxlen: 24
2a04:8400::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:49:76:b0:52:89:e6:2f:f3:9a:f8:bd:e6:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=977c33de4c6fc84ddd2e2fe8b5fd47f7ae2ffda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:4a:64:af:27:5f:4f:07:18:89:e3:fc:ef:
f4:5c:69:70:21:2a:96:f8:c0:db:b6:96:aa:c1:7d:
b5:5b:97:e2:70:a2:ad:a6:5d:37:e8:79:a3:94:12:
00:c7:8a:0d:e9:24:b4:65:df:29:0a:39:04:9e:e7:
e9:7a:11:a6:35:b9:dd:f8:a1:4c:43:c9:9a:2e:97:
de:a7:32:f9:aa:e7:69:7d:f7:cf:bd:8b:4e:08:b5:
b7:a5:ea:e3:a3:bf:89:1b:98:a5:31:30:19:2d:e6:
d0:89:4a:40:d5:cd:59:c0:e8:19:fb:1c:b1:18:fb:
bc:3a:70:f7:8f:0e:fa:8b:c4:bd:b1:38:b3:82:07:
f3:36:d7:e4:a0:ef:77:4a:8d:43:99:e8:27:14:64:
4a:fe:54:4e:0d:32:45:1b:92:c1:bd:ac:d7:e5:0a:
79:ce:74:04:81:0d:a0:87:38:7a:f2:b1:88:1e:6a:
3d:d0:27:e8:09:bd:ba:05:67:cc:1a:10:03:b5:24:
4a:45:c8:d1:9e:cd:61:fc:ab:ed:f3:9b:0f:b7:d7:
94:26:4e:c0:c6:88:5e:f4:18:0d:d3:2d:e7:f0:ee:
ad:14:4f:ad:f5:0b:38:85:c7:3d:a0:c0:b3:61:eb:
3f:5a:f2:d2:a4:72:fd:1a:d1:b6:fd:df:5a:d6:0a:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7C:33:DE:4C:6F:C8:4D:DD:2E:2F:E8:B5:FD:47:F7:AE:2F:FD:A8
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/l3wz3kxvyE3dLi_otf1H964v_ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.48.0/22
88.202.160.0/21
171.22.64.0/22
185.40.96.0/22
185.177.136.0/22
IPv6:
2a04:8400::/29
Signature Algorithm: sha256WithRSAEncryption
ab:e8:e9:e9:71:f6:18:34:fe:81:bd:e9:10:d6:a8:aa:cb:66:
c8:44:6c:9b:f7:04:f2:b3:71:94:9f:51:35:34:a6:dc:dc:d9:
b9:20:bc:50:33:94:06:a6:3a:77:c8:ca:da:e1:c6:86:5c:15:
d3:13:cc:d8:33:3c:b6:6b:c7:64:d8:48:4d:29:13:02:42:7e:
c9:91:d1:9d:4d:2e:0d:bd:fc:74:5b:30:eb:1c:23:fc:57:e0:
00:3a:21:dd:87:17:73:a9:c1:99:55:09:71:1f:c7:8b:4d:fb:
b1:b2:c0:bd:2f:46:12:ea:86:d2:b6:7f:85:29:a3:c2:8a:e9:
5d:66:e5:14:f8:ab:bc:47:64:55:0a:c4:7b:c2:c0:96:97:3e:
db:3b:15:fb:2a:5b:06:ae:d5:13:fe:f5:4f:01:46:cb:df:83:
5c:f1:a8:c2:5a:9d:a5:b1:1f:0b:07:12:67:67:80:af:c9:3d:
20:31:b2:df:6a:85:bf:b1:6c:88:01:dd:92:1f:15:ee:b0:92:
49:f3:28:52:85:8e:30:67:cd:d3:4f:45:e6:40:9e:cb:33:f5:
01:20:3d:6b:f4:ee:aa:52:60:27:8a:ce:41:da:6d:42:bd:8f:
e8:34:52:f4:15:6a:89:a9:5d:d4:64:3f:50:f8:d8:74:ad:51:
ee:6c:91:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:35:50 2025 by rpki-client