Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/58EBygRjdS7517jE8ijFSPfVOH4.roa
File: 58EBygRjdS7517jE8ijFSPfVOH4.roa (raw, json)
Hash identifier: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=
Subject key identifier: E7:C1:01:CA:04:63:75:2E:F9:D7:B8:C4:F2:28:C5:48:F7:D5:38:7E
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 0194221FBF510DFFE8A79189E068E658A088
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/58EBygRjdS7517jE8ijFSPfVOH4.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39409
IP address blocks: 37.153.156.0/24 maxlen: 24
185.216.8.0/24 maxlen: 24
2001:678:20c::/48 maxlen: 48
2001:678:d58::/48 maxlen: 48
2a10:9906::/48 maxlen: 48
2a10:9906:1001::/48 maxlen: 48
2a10:9906:1002::/48 maxlen: 48
2a10:9906:3010::/48 maxlen: 48
2a10:9906:3020::/48 maxlen: 48
2a10:9906:3050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bf:51:0d:ff:e8:a7:91:89:e0:68:e6:58:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7c101ca0463752ef9d7b8c4f228c548f7d5387e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:00:39:22:ed:72:e3:2d:90:71:73:39:e8:
be:81:b2:6b:d4:a4:03:3b:2d:e8:56:db:bf:ec:b9:
37:33:f8:fd:99:ec:67:80:c4:e2:d7:b7:1d:f1:ce:
f0:13:48:aa:c9:cf:ea:4f:51:95:9e:e5:98:ce:ee:
43:d0:1b:41:5d:ab:20:27:21:46:fb:d7:1a:43:b4:
a3:e5:c8:82:c9:21:cb:15:94:73:58:6c:03:fa:ad:
c2:c9:0e:75:c4:48:81:b9:7b:d3:3e:30:d7:1a:0e:
72:04:73:af:24:bb:96:d5:cb:1e:87:56:59:98:5c:
98:17:44:e2:ea:3c:00:20:55:3d:24:ae:cc:e8:9a:
4b:f6:42:cc:21:c7:1d:83:df:a1:7d:7a:34:2a:5e:
61:17:82:60:90:b2:fb:c1:b5:af:a0:4f:3c:3f:71:
2a:37:06:16:fe:d6:83:bd:56:f8:b3:10:73:e8:93:
06:d4:1e:dd:c8:14:ee:74:13:1b:ed:9c:a8:7f:28:
c7:9f:1a:41:5d:30:67:59:72:21:0d:e7:d5:c6:f0:
ee:b2:61:dc:c5:1f:89:57:00:55:26:df:68:b4:38:
a0:6c:53:24:ed:20:c9:df:e8:59:0b:22:cf:ee:95:
e7:23:76:cf:8b:8f:42:2d:68:62:3b:e2:22:e9:a2:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C1:01:CA:04:63:75:2E:F9:D7:B8:C4:F2:28:C5:48:F7:D5:38:7E
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/58EBygRjdS7517jE8ijFSPfVOH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.156.0/24
185.216.8.0/24
IPv6:
2001:678:20c::/48
2001:678:d58::/48
2a10:9906::/48
2a10:9906:1001::-2a10:9906:1002:ffff:ffff:ffff:ffff:ffff
2a10:9906:3010::/48
2a10:9906:3020::/48
2a10:9906:3050::/48
Signature Algorithm: sha256WithRSAEncryption
2c:2a:e5:ac:8e:2e:c0:e9:36:49:58:26:30:a2:80:f8:d7:dd:
63:e5:74:9e:dd:87:12:ca:50:c4:e0:bb:18:7f:b2:e3:c9:37:
9b:64:27:ad:8e:c2:84:5d:4c:4e:3d:c4:69:63:cf:cc:4f:27:
65:a4:48:36:e2:0f:6f:1c:51:1b:06:67:2e:4a:e4:30:c9:d7:
00:56:3b:65:e8:63:85:ec:64:e3:73:64:d7:38:91:cd:52:f1:
83:8d:cd:54:12:3a:bb:0f:c0:dc:13:fc:7a:cb:2f:b3:b1:93:
0d:46:7a:7d:df:ac:c6:38:2d:08:1c:e4:ae:24:a1:ad:6f:92:
c9:ee:54:0a:4f:5a:bc:a2:6c:72:eb:f7:d1:bd:5f:d1:12:17:
37:52:97:86:5b:ee:74:02:11:ea:e6:ed:66:7b:2b:bf:6f:e9:
40:2c:a2:54:0d:be:81:27:47:19:a5:5a:e8:91:4a:55:63:41:
3a:51:fc:73:4d:b9:cb:a7:38:ba:b8:cf:d5:d4:71:e7:e1:73:
04:12:9d:b2:32:20:0d:73:37:fa:5a:78:27:f1:fe:05:17:2e:
43:10:02:cd:29:12:d0:84:ae:02:c2:01:9a:d1:27:12:d1:b1:
72:a5:f0:98:43:9f:07:08:d9:b6:c4:43:d0:65:f9:f6:03:63:
69:67:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:21:06 2025 by rpki-client