Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/iCi2fS7ETh308D0HxV49gSj_2Oc.roa
File: iCi2fS7ETh308D0HxV49gSj_2Oc.roa (raw, json)
Hash identifier: 8Z0U9uTAtysIVIgEvm+zkP+R4k0ov21EhkUk/LCqI28=
Subject key identifier: 88:28:B6:7D:2E:C4:4E:1D:F4:F0:3D:07:C5:5E:3D:81:28:FF:D8:E7
Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Certificate serial: 01941F8C048462233B8FE34B663D89FBC42A
Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/iCi2fS7ETh308D0HxV49gSj_2Oc.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5404
IP address blocks: 185.69.160.0/22 maxlen: 22
185.69.160.0/24 maxlen: 24
185.69.161.0/24 maxlen: 24
185.69.162.0/24 maxlen: 24
185.69.163.0/24 maxlen: 24
185.174.204.0/22 maxlen: 22
185.174.204.0/24 maxlen: 24
185.174.205.0/24 maxlen: 24
185.174.206.0/24 maxlen: 24
185.174.207.0/24 maxlen: 24
195.192.208.0/21 maxlen: 21
195.192.208.0/24 maxlen: 24
195.192.209.0/24 maxlen: 24
195.192.210.0/24 maxlen: 24
195.192.211.0/24 maxlen: 24
195.192.212.0/24 maxlen: 24
195.192.213.0/24 maxlen: 24
195.192.214.0/24 maxlen: 24
195.192.215.0/24 maxlen: 24
217.196.144.0/20 maxlen: 20
217.196.144.0/24 maxlen: 24
217.196.145.0/24 maxlen: 24
217.196.146.0/24 maxlen: 24
217.196.147.0/24 maxlen: 24
217.196.148.0/24 maxlen: 24
217.196.149.0/24 maxlen: 24
217.196.150.0/24 maxlen: 24
217.196.151.0/24 maxlen: 24
217.196.152.0/24 maxlen: 24
217.196.153.0/24 maxlen: 24
217.196.154.0/24 maxlen: 24
217.196.155.0/24 maxlen: 24
217.196.156.0/24 maxlen: 24
217.196.157.0/24 maxlen: 24
217.196.158.0/24 maxlen: 24
217.196.159.0/24 maxlen: 24
2a02:16a8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:04:84:62:23:3b:8f:e3:4b:66:3d:89:fb:c4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8828b67d2ec44e1df4f03d07c55e3d8128ffd8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:5b:ce:8f:c8:d0:10:e6:9a:e5:eb:7c:87:
1a:cf:16:e9:98:35:88:2a:2c:d5:52:41:3c:f2:59:
b6:74:f5:db:e9:e9:3e:f7:51:ed:5a:25:21:c5:98:
de:48:ae:99:43:7b:0b:21:1c:49:8a:01:91:49:3c:
fb:e1:67:24:db:98:da:ba:4a:07:0b:55:3d:59:d8:
e2:e0:a8:9d:a1:63:7a:7f:7c:0f:f7:15:3e:df:80:
26:ee:3b:8c:03:03:67:a9:2c:77:d8:83:f7:0d:28:
16:b8:79:1c:e3:bf:ba:74:43:b0:98:ac:12:b5:ad:
99:b7:14:a3:51:2c:50:c6:f7:b8:3f:dc:91:ec:4d:
4b:5a:6f:5b:e9:89:64:c9:95:d1:f3:9c:c9:b5:42:
fd:60:23:0f:b9:43:3d:95:76:45:df:2b:36:3d:61:
d7:51:e7:5b:2b:52:d7:10:0f:68:a6:98:00:1e:85:
11:aa:f4:b5:e2:cd:7e:ee:26:d7:8f:ce:42:0a:7c:
bf:66:63:a7:5b:96:42:f2:e7:83:f8:5a:ce:c4:47:
3e:63:53:9a:d3:28:f1:d9:32:ce:06:0e:c6:13:e0:
73:90:fe:f8:3a:8a:6a:ae:aa:34:7c:01:c9:8c:ca:
44:15:a2:5a:16:53:5c:63:2b:fc:1b:ac:b6:e8:bc:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:B6:7D:2E:C4:4E:1D:F4:F0:3D:07:C5:5E:3D:81:28:FF:D8:E7
X509v3 Authority Key Identifier:
keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/iCi2fS7ETh308D0HxV49gSj_2Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.160.0/22
185.174.204.0/22
195.192.208.0/21
217.196.144.0/20
IPv6:
2a02:16a8::/32
Signature Algorithm: sha256WithRSAEncryption
28:90:92:e6:b0:ac:51:a6:74:bc:0a:6d:ed:5b:0c:da:3d:6a:
6b:a6:b4:cb:12:b7:a8:8f:81:08:93:e9:fe:af:5b:a0:3f:31:
e8:c4:6f:f1:78:7d:5b:38:00:02:cb:e6:b4:d3:97:fb:61:9f:
88:ad:45:67:3d:f6:68:3b:bb:f3:cd:7a:cd:4d:d2:b4:7b:6d:
b8:ba:de:c3:5c:d1:a9:2d:cf:70:64:08:5e:f1:c8:70:24:96:
1a:5d:54:f1:dc:cf:a8:e8:6f:c0:a6:41:91:6c:ed:3f:a7:da:
3d:fd:3c:84:c2:ed:9a:7e:82:62:9a:66:37:fa:86:25:ce:80:
9d:a6:ca:4c:c2:0c:30:c7:a5:51:32:bf:d6:9d:f7:ef:6b:0f:
a7:93:ea:95:e4:67:29:b5:68:4f:36:63:47:19:7c:60:06:4a:
e6:eb:1d:c4:d5:e7:e9:6b:ae:dc:5e:22:e6:76:3c:5d:4b:03:
46:d7:14:e4:1e:3c:54:23:3f:48:b8:7c:9d:d8:7a:a3:dd:2d:
a6:23:3b:b6:a6:bb:ac:14:f1:bc:7b:b9:0d:f1:9e:50:24:94:
1a:db:e6:d8:07:04:28:72:ad:51:16:4d:e9:4b:5f:24:14:eb:
7e:15:d8:51:ad:e1:2f:3a:4a:65:ed:95:69:fa:bf:92:e1:a5:
b0:05:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:10 2025 by rpki-client