Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/dfdU0SSX7h5aeT4V6yh3besByGY.roa
File: dfdU0SSX7h5aeT4V6yh3besByGY.roa (raw, json)
Hash identifier: bqm/qnBL9+Tfu7cFwtiTcjOHYz4XyBbBgnruIPUTM5E=
Subject key identifier: 75:F7:54:D1:24:97:EE:1E:5A:79:3E:15:EB:28:77:6D:EB:01:C8:66
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 0196A9F77B164535969E47C347CA61C3B8A1
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/dfdU0SSX7h5aeT4V6yh3besByGY.roa
Signing time: Wed 07 May 2025 08:58:10 +0000
ROA not before: Wed 07 May 2025 08:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45014
IP address blocks: 80.93.160.0/20 maxlen: 24
84.246.152.0/21 maxlen: 24
92.60.96.0/20 maxlen: 24
159.253.56.0/21 maxlen: 24
185.18.32.0/24 maxlen: 24
185.184.236.0/22 maxlen: 22
194.150.252.0/23 maxlen: 24
217.172.128.0/20 maxlen: 24
2a00:1a90::/32 maxlen: 48
2a03:f2c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f7:7b:16:45:35:96:9e:47:c3:47:ca:61:c3:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: May 7 08:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75f754d12497ee1e5a793e15eb28776deb01c866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:1c:5f:0a:bd:24:96:5d:1d:19:b8:97:80:
ba:2a:3a:39:33:63:3e:f4:36:f7:de:79:da:ae:10:
a6:fc:dd:5d:ce:1e:74:ce:83:d8:34:dd:ff:97:89:
6d:05:34:c1:24:37:72:30:12:6d:c7:f4:0e:41:97:
c2:49:cd:2c:32:a3:e9:1b:99:36:c0:f3:75:9b:e4:
ba:91:d6:08:b1:26:0a:e3:11:ce:d0:ac:d5:5e:21:
f4:9b:fa:40:5d:15:f5:70:33:05:e2:32:df:7a:f9:
10:7a:b5:e0:71:dd:ff:32:b0:9b:90:31:43:84:fb:
7a:d9:2c:b1:2b:98:7c:96:6f:51:53:23:5c:c2:31:
ca:4d:9f:a1:ff:f0:a6:08:77:12:9d:42:18:d1:6d:
96:fd:90:c5:94:33:e0:95:98:6c:0c:14:04:31:61:
9a:82:d5:05:01:3a:1a:86:44:e8:20:17:ce:52:33:
29:6c:32:ba:23:19:3d:cc:24:a7:a2:de:15:c3:3e:
12:7d:83:b6:22:8c:35:8f:5e:03:c6:23:0d:db:cc:
bc:d5:54:dd:56:e0:d7:7f:23:e7:c6:54:59:ec:98:
fc:46:74:54:45:3e:93:2b:79:56:73:60:c0:9d:17:
16:86:02:7b:0e:ee:c1:75:9e:5f:47:84:10:54:5c:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F7:54:D1:24:97:EE:1E:5A:79:3E:15:EB:28:77:6D:EB:01:C8:66
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/dfdU0SSX7h5aeT4V6yh3besByGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.160.0/20
84.246.152.0/21
92.60.96.0/20
159.253.56.0/21
185.18.32.0/24
185.184.236.0/22
194.150.252.0/23
217.172.128.0/20
IPv6:
2a00:1a90::/32
2a03:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:86:a3:79:a5:37:06:95:4d:08:62:a3:d8:2f:d2:3a:98:f5:
90:59:4d:1f:91:49:41:14:71:92:71:ae:9e:f6:2a:b8:78:59:
72:e2:15:40:9b:6e:af:d1:20:dc:bb:ff:ad:ee:01:0c:ef:cd:
d6:b3:5c:6a:52:78:b6:1d:26:31:26:c7:c2:04:69:a0:9e:3b:
bc:5c:f4:36:63:09:3a:aa:f5:d3:dc:9b:80:9f:9c:ec:0e:0f:
d1:91:23:b1:13:cb:cd:61:85:e3:fa:d1:5d:05:a0:39:11:28:
9f:a0:27:16:89:a5:2a:5c:4f:9b:46:bc:71:82:90:e7:b4:2d:
fa:5a:6c:74:1d:a7:6e:17:61:b7:62:66:44:f8:43:09:d1:c6:
85:42:c3:1e:db:74:9c:db:db:cc:e2:12:8c:f6:94:a8:54:54:
3b:4e:ea:a6:75:4f:26:f0:c8:70:41:86:a7:3f:0e:0c:c6:5a:
34:32:c4:fe:44:dc:59:89:51:ab:29:74:26:62:90:01:63:39:
b3:0b:08:5b:2d:22:d6:e7:6e:64:c7:ad:c5:38:f5:8c:ca:4f:
72:c0:40:1e:4c:43:0a:1b:94:d3:0d:18:61:d3:eb:69:d8:c3:
d8:20:6e:12:56:89:2a:96:a1:b7:10:3b:9d:b5:92:f2:d9:5a:
28:7e:fa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:48:25 2025 by rpki-client