Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/uY__ejrV3u-AYFNveYDrJ-C2JUI.roa
File: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (raw, json)
Hash identifier: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=
Subject key identifier: B9:8F:FF:7A:3A:D5:DE:EF:80:60:53:6F:79:80:EB:27:E0:B6:25:42
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 0194221F5057AECCA2FAFBF3A43C833E0A7F
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/uY__ejrV3u-AYFNveYDrJ-C2JUI.roa
Signing time: Wed 01 Jan 2025 13:47:45 +0000
ROA not before: Wed 01 Jan 2025 13:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204206
IP address blocks: 185.78.244.0/24 maxlen: 24
185.78.245.0/24 maxlen: 24
185.78.246.0/24 maxlen: 24
185.78.247.0/24 maxlen: 24
213.42.48.0/24 maxlen: 24
213.42.49.0/24 maxlen: 24
213.42.50.0/24 maxlen: 24
213.42.51.0/24 maxlen: 24
213.42.52.0/24 maxlen: 24
213.42.53.0/24 maxlen: 24
213.42.54.0/24 maxlen: 24
213.42.55.0/24 maxlen: 24
213.42.56.0/24 maxlen: 24
213.42.84.0/24 maxlen: 24
213.42.85.0/24 maxlen: 24
213.42.86.0/24 maxlen: 24
213.42.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:50:57:ae:cc:a2:fa:fb:f3:a4:3c:83:3e:0a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jan 1 13:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b98fff7a3ad5deef8060536f7980eb27e0b62542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:9c:2c:f7:3f:23:6e:79:71:1a:b2:83:4d:
b0:0d:c5:94:cf:f4:54:6e:81:b5:13:c7:55:4b:84:
1a:b2:fd:8d:9b:2e:37:4b:5c:81:bf:bc:23:3b:02:
c7:b1:d4:1c:aa:cd:75:95:0e:0a:f9:0f:f5:3a:18:
e5:c9:8c:68:81:45:d1:0e:e3:60:39:22:b3:b3:e2:
10:73:10:3d:5f:ee:d4:2a:b9:b3:10:9b:7f:62:fb:
93:a9:ad:f1:3e:1e:02:b1:06:e0:86:83:3e:ff:9d:
b1:c9:be:e9:30:47:5e:c0:22:31:03:eb:44:53:d2:
e6:6e:ac:a4:18:ed:ac:9a:dd:be:ca:7a:56:41:ff:
52:2f:b5:ba:4a:7c:05:10:76:02:6e:98:b2:74:57:
f1:cb:ba:e6:c2:2b:b7:71:8e:6e:bd:85:2a:d6:cb:
19:58:75:fa:0b:6a:bf:29:70:8d:cf:b6:c1:6f:01:
dd:f7:2d:f9:25:85:60:f2:cf:93:ab:ed:b3:5c:5d:
dd:9a:b4:fb:45:50:75:fe:8f:ae:9d:bc:a1:0c:29:
59:fc:64:cd:29:25:05:44:a4:d6:92:08:de:8d:fc:
d9:22:36:a1:1d:b2:9b:12:b9:51:3f:4c:f5:c5:05:
54:73:b0:eb:a9:6a:80:a5:64:bc:17:cc:9e:83:16:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:FF:7A:3A:D5:DE:EF:80:60:53:6F:79:80:EB:27:E0:B6:25:42
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/uY__ejrV3u-AYFNveYDrJ-C2JUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.244.0/22
213.42.48.0-213.42.56.255
213.42.84.0/22
Signature Algorithm: sha256WithRSAEncryption
55:bf:99:e6:59:59:a8:f5:e7:5e:db:d1:07:1a:7d:d4:a5:61:
43:64:15:bc:21:92:41:f9:53:32:cf:a2:a4:9f:38:1a:38:75:
31:32:fa:35:42:28:d5:1e:1d:3a:12:3c:1a:c5:9f:6f:d8:5f:
16:75:c6:64:f1:4e:57:8b:55:ad:86:c2:51:45:90:36:97:62:
75:4f:82:72:ed:a4:8a:c4:bd:43:20:6d:8a:fc:fa:ee:a8:40:
2f:33:2d:d9:ec:ec:89:df:4e:24:7a:26:fb:26:c3:68:4f:f3:
80:9f:00:f0:5c:8d:a3:04:66:4c:56:d0:db:5f:01:a6:4a:03:
7c:ae:a8:b1:9f:b4:4a:4b:13:92:b3:ec:4b:c2:97:59:5d:f7:
a4:62:56:34:d0:76:36:28:2a:94:fe:5b:2c:34:f0:5f:71:68:
93:52:c0:0d:c3:3d:69:ea:37:eb:5e:bd:3f:a8:37:99:90:8d:
3c:2f:52:de:57:0a:a3:1e:e2:a7:b5:3d:37:dd:a0:fe:81:98:
cc:b3:1a:c6:69:9f:a9:47:31:9d:21:16:f5:ec:b8:8b:7e:1c:
91:e3:d1:ea:0f:fd:d1:97:f1:d9:78:d1:d9:f1:41:8a:a2:ec:
75:e9:26:74:8a:2e:be:3d:ea:23:5e:45:df:75:68:1c:31:51:
88:73:cb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:06:01 2025 by rpki-client