Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/67Ea7VEB6NTMqU0_w9hkPf8M9e8.roa
File: 67Ea7VEB6NTMqU0_w9hkPf8M9e8.roa (raw, json)
Hash identifier: yzJDWryjSvtx+7x08ZuzwC8yKQ7xrpLS6pCbYy/XJm4=
Subject key identifier: EB:B1:1A:ED:51:01:E8:D4:CC:A9:4D:3F:C3:D8:64:3D:FF:0C:F5:EF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC70D5C41031F990F14FE44BBA700B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/67Ea7VEB6NTMqU0_w9hkPf8M9e8.roa
Signing time: Thu 02 Jan 2025 07:48:08 +0000
ROA not before: Thu 02 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38136
IP address blocks: 5.34.216.0/21 maxlen: 24
5.226.48.0/22 maxlen: 24
45.137.180.0/22 maxlen: 24
178.236.36.0/22 maxlen: 24
185.36.192.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
185.248.184.0/22 maxlen: 24
188.253.4.0/22 maxlen: 24
188.253.12.0/22 maxlen: 24
188.253.112.0/21 maxlen: 24
188.253.120.0/21 maxlen: 24
212.87.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:70:d5:c4:10:31:f9:90:f1:4f:e4:4b:ba:70:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb11aed5101e8d4cca94d3fc3d8643dff0cf5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:0b:43:34:c1:1b:bb:fd:e9:2f:e6:eb:d3:
a3:73:64:8c:2c:1c:11:5b:bc:5d:b2:0a:d6:99:a3:
aa:8f:53:92:cf:4d:33:12:97:b4:31:65:b9:07:b4:
36:52:72:12:2b:e4:b1:9f:47:ff:a6:b7:74:b1:be:
5e:e4:ec:cb:d2:f5:51:d2:ca:d4:32:1f:f1:be:73:
da:7b:fc:5c:b6:64:56:ae:ba:22:90:4d:49:38:ad:
5a:9f:a6:98:48:de:29:36:c0:3b:39:2e:a5:c7:1d:
df:0f:5f:58:ff:fc:74:a4:c7:57:c8:45:b4:2a:dd:
90:a3:e1:ff:03:8a:40:e8:f8:35:db:55:ba:10:63:
41:e8:2d:42:17:dc:88:1d:4c:02:b1:05:82:71:79:
62:14:f3:46:4f:f2:6e:d6:72:a2:65:3c:a9:11:94:
b6:24:a4:3f:2e:e9:4c:e4:4f:38:8c:d4:d2:42:16:
bd:0c:e2:be:c8:4f:81:57:20:11:66:db:fd:68:c6:
ea:bf:c5:98:05:a8:58:3b:04:5f:f3:b3:89:40:c5:
d2:d8:99:68:6e:5b:54:9f:9c:07:90:75:62:ef:10:
e7:19:39:f4:c8:86:65:6d:88:97:c9:cf:2a:d6:a2:
b4:67:c0:ca:88:66:2f:71:ab:9c:af:da:46:47:f1:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:1A:ED:51:01:E8:D4:CC:A9:4D:3F:C3:D8:64:3D:FF:0C:F5:EF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/67Ea7VEB6NTMqU0_w9hkPf8M9e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.216.0/21
5.226.48.0/22
45.137.180.0/22
178.236.36.0/22
185.36.192.0/22
185.220.236.0/22
185.248.184.0/22
188.253.4.0/22
188.253.12.0/22
188.253.112.0/20
212.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:c6:dd:c8:dc:ea:24:24:96:b4:d0:f1:79:a1:30:83:23:2f:
31:8e:9e:1a:7f:15:82:58:b5:c9:d1:8f:6f:58:80:ca:18:a1:
dd:16:41:e2:db:44:a9:a1:3f:53:60:a8:50:5b:c3:39:17:7f:
b8:65:81:65:0f:30:17:bd:be:10:53:8a:72:5a:f7:d9:93:4f:
46:a7:b8:35:e9:23:d8:32:e7:ff:e6:e9:0c:82:9b:37:1a:78:
00:49:a7:59:83:77:17:86:0c:f5:b7:36:1f:27:12:40:43:bc:
5b:39:7d:ea:67:c3:bb:14:61:b9:28:33:2a:0f:b4:b1:9e:d2:
35:77:5c:77:ee:83:94:43:0a:65:27:11:90:8a:d6:b8:35:80:
d5:82:1d:e6:1c:d9:2e:21:66:69:6b:8d:5a:3b:0c:8f:5c:52:
52:32:24:05:5f:87:a7:22:3a:42:fd:7d:e0:52:46:5e:af:8a:
c4:0b:d4:7c:90:d2:38:e4:6b:32:06:eb:ec:06:e9:d4:4e:df:
37:ef:9f:2f:ca:27:a8:cc:25:e4:c2:1e:b7:31:11:45:ce:c9:
6e:69:09:56:96:f6:ff:df:b0:e4:b0:95:e0:fa:2d:ac:5b:da:
7a:19:c6:f3:ee:2e:d9:24:36:82:6c:97:af:80:34:c4:d3:fb:
fa:17:1a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:00:09 2025 by rpki-client