Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7fJvelaeWRPaeeOqQiVdqp5Exxc.roa
File: 7fJvelaeWRPaeeOqQiVdqp5Exxc.roa (raw, json)
Hash identifier: u3Jlx57PaTOE1SJ38utPoD5WJWb3hvAAlv0+GWsZJkE=
Subject key identifier: ED:F2:6F:7A:56:9E:59:13:DA:79:E3:AA:42:25:5D:AA:9E:44:C7:17
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01945FB343EB9E7556A6D133BD470E41B4A6
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7fJvelaeWRPaeeOqQiVdqp5Exxc.roa
Signing time: Mon 13 Jan 2025 12:46:11 +0000
ROA not before: Mon 13 Jan 2025 12:46:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.64.89.0/24 maxlen: 24
194.163.68.0/24 maxlen: 24
194.163.92.0/24 maxlen: 24
194.233.31.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
195.180.128.0/22 maxlen: 24
195.180.149.0/24 maxlen: 24
195.252.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:b3:43:eb:9e:75:56:a6:d1:33:bd:47:0e:41:b4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 13 12:46:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf26f7a569e5913da79e3aa42255daa9e44c717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:08:0d:30:a2:7d:3f:29:f9:24:cf:ba:b2:
d9:3f:9e:bf:4a:dc:e3:06:aa:ea:60:b1:3a:98:ff:
bb:51:be:dd:1d:28:c2:c4:71:d3:66:81:25:a2:41:
e1:6d:d7:4f:b3:aa:b7:60:bb:b0:8a:dd:b5:00:c0:
8a:97:76:a3:96:97:57:86:28:42:c4:9e:f2:4c:6c:
06:b3:fa:ca:7f:5a:26:0a:fe:d6:e9:a8:0a:58:97:
ca:de:d9:db:8f:08:40:cb:e1:62:95:d1:a4:ca:24:
f3:f8:b7:9b:66:d3:56:c1:97:ba:68:6c:a8:26:5a:
f8:93:d0:0b:b8:62:82:c2:83:d6:c0:00:38:0c:84:
f5:e5:1b:89:93:fa:fa:7d:0e:47:d9:02:2b:cc:84:
77:e8:6a:bd:fd:0b:19:d0:39:dd:9b:c6:ac:4f:a7:
2b:d0:cb:26:6b:50:06:dd:6a:4b:ba:bc:f0:3c:1a:
39:7d:25:d2:61:a6:94:8f:29:6f:e3:6a:08:c5:a0:
aa:71:02:17:ec:e6:60:b5:f2:c6:50:96:57:09:a0:
fe:b0:aa:d3:13:8e:81:1e:52:60:5b:a2:a2:f5:4a:
76:b3:c7:47:8c:48:8e:c4:e6:62:3e:79:31:02:26:
2f:7d:dd:9e:d5:73:36:9a:24:62:e1:73:41:f0:19:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F2:6F:7A:56:9E:59:13:DA:79:E3:AA:42:25:5D:AA:9E:44:C7:17
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7fJvelaeWRPaeeOqQiVdqp5Exxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.92.0/24
194.233.31.0/24
194.233.148.0/23
194.233.151.0/24
195.180.128.0/22
195.180.149.0/24
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d5:15:bd:11:0d:d0:30:14:d0:d0:a6:8d:87:16:b4:0d:5d:
e6:66:2e:86:a4:3b:8c:64:c5:cc:00:e1:f6:39:2f:94:c7:d8:
51:10:5d:1a:c4:bc:a2:da:c9:8f:2a:7a:35:21:c8:68:e4:23:
ee:e9:ca:7e:96:a0:c2:17:9f:ea:f5:6f:ee:4d:f5:60:2c:ce:
2f:de:32:8e:84:bc:18:16:34:d5:17:4f:d8:00:68:a1:4a:6f:
43:8d:63:15:4a:09:0a:94:00:fb:93:51:5d:81:ac:85:d4:dd:
ff:4c:b5:a6:c0:ac:28:d0:78:b9:0f:a4:3b:6a:4e:6a:9c:8f:
c9:79:34:73:43:88:2e:e0:a1:de:bf:99:5a:aa:e8:95:1b:dc:
f3:a7:fd:d0:cb:c7:29:ab:94:f9:d3:dd:25:39:80:5c:48:f2:
62:2c:b1:78:16:00:cf:7d:7f:2e:77:3a:fe:57:e6:56:c5:6a:
b3:98:90:c4:f6:48:f7:22:50:ff:dc:11:0c:d3:e2:f6:6f:49:
86:de:63:70:74:4e:6d:1c:0b:fe:8d:c9:d5:03:84:09:43:33:
c5:4d:5c:04:50:31:e3:fc:eb:14:6b:52:01:2b:f9:a6:32:d6:
2f:97:4e:79:d3:e9:62:d2:35:36:4d:76:17:fc:bd:5f:30:92:
29:a8:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:18 2025 by rpki-client