Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8cvPoDzFXKohyQmXC9UTXSGhJxY.roa
File: 8cvPoDzFXKohyQmXC9UTXSGhJxY.roa (raw, json)
Hash identifier: 5HH/nRaiEZVROuVsetHlEU2SgYrc7waV2hbakoAIFbA=
Subject key identifier: F1:CB:CF:A0:3C:C5:5C:AA:21:C9:09:97:0B:D5:13:5D:21:A1:27:16
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01965FF4A51095655B4487D96B21FE2C17B2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8cvPoDzFXKohyQmXC9UTXSGhJxY.roa
Signing time: Wed 23 Apr 2025 00:03:10 +0000
ROA not before: Wed 23 Apr 2025 00:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.149.240.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f4:a5:10:95:65:5b:44:87:d9:6b:21:fe:2c:17:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 23 00:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1cbcfa03cc55caa21c909970bd5135d21a12716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:f8:7b:30:ac:7d:ed:d9:83:18:95:03:53:
9d:25:68:b0:4f:ee:ea:56:3a:00:fd:f6:96:c8:47:
d0:ff:94:ad:49:38:ef:f8:6f:f6:75:b3:f0:0d:4c:
50:63:05:26:f9:aa:c9:26:07:d1:c0:88:34:d6:b9:
12:2b:62:61:1b:70:ec:79:c7:ae:bf:8a:18:01:04:
30:2b:ca:d5:f4:63:3a:60:ff:1b:c4:6e:10:fe:3b:
d8:55:a6:73:85:80:1b:78:25:a4:b0:2e:f1:54:dc:
26:82:83:ca:d8:4a:84:66:9f:32:63:cc:bf:23:83:
c1:45:ec:c8:1e:9d:c2:bd:77:07:a9:ad:03:3c:e6:
59:14:e4:d0:6f:d3:2d:6f:de:e4:16:4e:9a:00:3e:
30:7d:f2:70:cd:4e:68:df:5a:1c:21:5b:e1:59:6f:
c7:df:ed:b0:ba:ea:6c:2a:62:42:89:34:70:8c:ee:
c5:65:a7:fa:ea:17:1a:a1:bb:24:b2:2d:97:ba:df:
3f:b7:4a:00:a4:27:a2:b1:5d:1e:67:df:c1:e1:f3:
d3:1d:04:a6:a7:36:b1:8b:7b:5f:98:be:83:c6:9c:
a2:66:7f:49:7b:43:5c:9b:34:8d:92:1b:95:48:95:
e0:5a:fa:a4:66:0c:e5:14:1b:4e:c7:d7:19:28:71:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:CF:A0:3C:C5:5C:AA:21:C9:09:97:0B:D5:13:5D:21:A1:27:16
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8cvPoDzFXKohyQmXC9UTXSGhJxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.121.46.0/24
93.123.116.0/24
94.156.14.0/24
95.214.25.0-95.214.26.255
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ab:72:9b:2a:f0:a7:13:f2:e8:45:95:af:40:d4:09:33:64:
d5:1d:46:0f:0f:3b:d1:21:28:33:dc:12:04:0f:75:e7:6c:7a:
23:87:80:da:a7:08:a6:15:cd:fe:08:fc:dc:09:23:e2:95:ed:
af:b3:ad:8b:81:75:ca:e5:01:82:af:fb:8e:b9:d7:09:22:bf:
26:be:39:22:51:96:c2:aa:c6:e2:d5:5d:04:a1:14:dc:ac:4c:
19:35:b9:45:02:90:7f:3a:8d:1c:a1:8a:e5:c2:62:bc:4e:56:
ff:74:fd:86:68:8d:38:ef:cc:96:04:62:4d:30:d1:93:32:7c:
68:2b:17:10:29:23:aa:45:91:c5:f6:28:49:87:25:a7:29:e3:
05:93:d9:9d:2e:f2:25:f2:19:a1:17:ef:42:29:fa:9c:9e:05:
06:0e:46:15:b3:22:e2:b5:a5:af:85:e2:1d:6f:93:ec:c8:2f:
56:3e:63:e7:8c:7f:66:2f:be:bb:d4:92:00:88:a8:9b:a7:61:
f5:49:be:f5:e0:be:67:ae:22:c9:ce:aa:18:4d:9e:61:c9:68:
c2:c6:eb:79:30:81:6e:72:a5:31:8d:10:c0:c1:8c:f1:a8:48:
77:fe:b8:9c:32:ff:a1:02:08:4c:e1:b0:20:58:1f:f1:d5:94:
9e:05:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:57:42 2025 by rpki-client