Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/c3zA2IV4VwS8jnesB0LpZBsDyEU.roa
File: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (raw, json)
Hash identifier: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=
Subject key identifier: 73:7C:C0:D8:85:78:57:04:BC:8E:77:AC:07:42:E9:64:1B:03:C8:45
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 019420682195100A9310DF88A75888830045
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/c3zA2IV4VwS8jnesB0LpZBsDyEU.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11158
IP address blocks: 46.235.109.0/24 maxlen: 24
46.235.111.0/24 maxlen: 24
77.247.1.0/24 maxlen: 24
77.247.15.0/24 maxlen: 24
185.71.48.0/24 maxlen: 24
185.71.50.0/24 maxlen: 24
212.11.82.0/24 maxlen: 24
212.11.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:21:95:10:0a:93:10:df:88:a7:58:88:83:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=737cc0d885785704bc8e77ac0742e9641b03c845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:bd:69:a5:61:b2:8f:17:4c:d2:98:7e:af:
1e:a8:64:7a:c3:d6:8e:4f:55:9f:11:1b:34:79:24:
3f:2e:c0:7d:63:54:7a:f8:26:50:35:43:3d:30:8b:
01:2c:53:80:99:38:83:22:ae:d8:65:5f:72:09:55:
ca:27:fc:3a:77:e8:6f:f5:80:8b:54:4e:b2:c2:76:
bd:66:ba:25:24:d0:2a:29:24:59:0a:d1:66:18:2c:
2b:02:1f:c3:81:9f:e8:ac:78:70:cf:7f:1d:ce:49:
fd:7b:37:65:d9:b4:12:9c:36:5b:4f:0d:95:f4:aa:
c0:75:fb:23:32:a4:c5:bc:de:f3:a4:e9:97:01:7c:
a5:ec:3b:09:a4:da:4b:4b:fa:93:53:42:91:a4:ac:
fc:7a:f9:7f:39:f4:75:9f:72:b6:03:97:a7:6a:b8:
5d:03:57:44:b1:13:a5:c7:db:c1:88:c6:4f:fe:1d:
b8:dd:95:49:2f:37:30:25:ae:19:aa:08:c8:31:8d:
89:24:df:a8:40:a1:20:b2:07:9f:7f:dc:2a:a7:51:
c0:11:95:7e:e1:ac:bd:b8:ef:13:e4:65:d3:e2:78:
64:ee:d9:03:e4:82:18:6b:83:fc:46:5f:5d:5c:ca:
3d:1f:c7:bb:bf:ad:6a:7f:af:43:cf:a3:ef:34:f5:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:C0:D8:85:78:57:04:BC:8E:77:AC:07:42:E9:64:1B:03:C8:45
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/c3zA2IV4VwS8jnesB0LpZBsDyEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.109.0/24
46.235.111.0/24
77.247.1.0/24
77.247.15.0/24
185.71.48.0/24
185.71.50.0/24
212.11.82.0/24
212.11.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:10:19:e0:a3:1b:f2:11:79:3a:8a:99:c2:7e:da:4f:c2:f0:
cc:aa:ef:fd:83:ac:0f:09:38:79:56:b5:df:fa:0b:7c:ec:7f:
8e:ee:b9:25:20:7e:9b:e9:25:10:32:77:fc:eb:5a:6f:c7:7c:
57:a1:19:29:87:1c:41:65:dd:ad:1e:00:5b:be:42:9a:2b:17:
5d:55:d2:0a:ee:f3:31:37:59:ac:db:20:cd:2a:5b:bb:02:d4:
4d:2e:0d:1a:ff:61:e7:61:87:2e:86:71:f0:ec:04:75:48:f7:
05:8e:68:df:74:07:c1:d3:c3:6c:3a:ae:8f:9d:6c:bb:82:91:
ea:df:61:8e:0b:ad:05:04:6e:5d:88:de:e5:65:a0:82:75:ed:
31:8a:a7:2a:20:85:86:53:4f:9e:58:72:ff:d1:a3:ff:58:cd:
37:1f:50:37:4d:b1:05:8b:38:f3:72:d5:c1:1f:df:e9:ae:45:
ca:2a:18:05:6f:71:c3:22:91:c0:ff:ac:bf:63:6d:3a:09:49:
29:0a:4c:45:db:19:07:19:e8:8a:fe:a4:35:d0:fd:5c:8c:6a:
20:65:ad:86:75:91:d1:8c:d7:cb:19:9f:ec:71:aa:de:bb:e4:
a6:19:2d:43:16:dd:62:78:e1:38:9f:e7:c0:32:3a:22:00:e1:
7f:48:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:12:52 2025 by rpki-client