Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/I7Pb1f3AWemUwUxhgqFercTAneM.roa
File: I7Pb1f3AWemUwUxhgqFercTAneM.roa (raw, json)
Hash identifier: wZtAwfj7FarDSMo5/VXU8+6kxhN5lA9J6Doagf4Re8w=
Subject key identifier: 23:B3:DB:D5:FD:C0:59:E9:94:C1:4C:61:82:A1:5E:AD:C4:C0:9D:E3
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C64B7383E67A5895696F89AFB4159
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/I7Pb1f3AWemUwUxhgqFercTAneM.roa
Signing time: Thu 02 Jan 2025 09:50:25 +0000
ROA not before: Thu 02 Jan 2025 09:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21487
IP address blocks: 46.48.128.0/20 maxlen: 20
78.31.216.0/21 maxlen: 21
80.73.64.0/19 maxlen: 19
80.73.64.0/20 maxlen: 20
80.73.80.0/20 maxlen: 20
91.185.224.0/19 maxlen: 19
91.185.240.0/20 maxlen: 20
94.245.128.0/18 maxlen: 18
94.245.128.0/19 maxlen: 19
94.245.136.0/22 maxlen: 22
94.245.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:64:b7:38:3e:67:a5:89:56:96:f8:9a:fb:41:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23b3dbd5fdc059e994c14c6182a15eadc4c09de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:92:53:8c:d6:81:85:df:5e:0d:b8:98:13:
3c:55:5c:4e:d0:e3:cc:e1:fc:0a:33:8f:4d:bb:42:
19:82:f0:d1:86:56:51:c4:26:09:91:98:50:d5:1c:
c0:99:c7:ab:39:73:62:e2:0b:fa:fe:18:04:e5:d2:
4f:d3:f8:f6:69:74:3d:4c:9c:7d:91:99:48:cc:a1:
af:cf:a4:8d:61:2d:e8:55:c1:fb:c8:5b:a3:82:ad:
35:be:cf:34:a7:3e:29:89:ef:3b:54:fc:e6:53:fc:
db:b5:64:0e:07:57:0f:2f:7b:49:70:05:91:cd:0e:
e8:61:76:2a:6c:ce:e8:f3:91:b2:e5:b2:5c:3e:84:
ab:09:8f:e2:b1:8d:43:3a:10:21:8c:90:df:09:a4:
cc:62:5d:d8:cf:65:25:58:18:fb:a2:9d:6a:c2:74:
8c:07:52:b1:8c:33:8b:1e:11:a8:e1:0c:2c:d3:7b:
57:4e:aa:7d:01:a9:f4:56:b4:22:65:e2:18:41:dd:
85:cc:b5:2a:a7:18:bc:c4:97:93:19:d4:47:82:2b:
21:00:7d:3a:56:7b:f8:90:16:cd:f5:9a:5c:50:36:
66:35:bd:c3:61:7b:91:7c:32:7b:4d:be:0b:a6:3e:
a1:a5:55:98:18:04:1c:a0:04:78:3c:f0:33:f0:ea:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:DB:D5:FD:C0:59:E9:94:C1:4C:61:82:A1:5E:AD:C4:C0:9D:E3
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/I7Pb1f3AWemUwUxhgqFercTAneM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.48.128.0/20
78.31.216.0/21
80.73.64.0/19
91.185.224.0/19
94.245.128.0/18
Signature Algorithm: sha256WithRSAEncryption
59:76:9f:97:78:49:7c:4b:4b:42:d3:34:b1:f0:19:dc:b3:be:
52:b9:ec:75:c3:7d:16:6f:b2:a8:7c:40:0a:f6:0f:22:82:cd:
5d:b1:dc:1d:7b:c6:e9:5a:e5:2c:62:6c:73:74:31:fa:f3:2d:
7b:bd:0a:2a:41:8c:3c:3e:1c:04:76:55:22:9c:54:5c:52:b4:
89:f5:7b:f9:55:1b:b2:ae:08:8a:8c:cc:f8:75:b1:27:ee:01:
db:6a:7e:08:24:df:87:25:97:ff:af:f5:5d:90:e8:fa:c8:4e:
bb:72:f0:b3:02:94:aa:90:10:2f:a2:3a:24:3a:bd:b1:3f:9b:
49:77:22:af:3d:c3:0a:72:01:54:d7:db:ea:79:33:14:4c:09:
07:19:f6:9d:7f:8d:43:42:8f:1c:3c:64:c5:0f:d2:0e:61:4e:
09:dd:0e:f5:b6:23:09:c8:c4:15:f6:70:77:51:29:5a:48:9b:
87:b6:7c:32:ec:fa:1f:31:5f:eb:6b:ff:09:12:e6:c5:6b:0e:
59:c9:c9:dc:4b:aa:34:cc:64:a1:cd:2c:aa:1a:b2:c0:d0:33:
16:01:8f:5d:cd:3d:a1:2d:23:74:87:b2:5c:3d:b6:3f:da:d2:
e7:b4:76:43:7a:76:c7:5c:81:d0:1b:96:bd:43:c3:84:6c:b6:
ac:90:77:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:34:24 2025 by rpki-client