Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/cVEETtb-Qaf8enOxj2iuBiJYoyc.roa
File: cVEETtb-Qaf8enOxj2iuBiJYoyc.roa (raw, json)
Hash identifier: NiDWZYcDBQSBeWMAHGyuRGbWL4JNjdNZk1Soa3ZIR1M=
Subject key identifier: 71:51:04:4E:D6:FE:41:A7:FC:7A:73:B1:8F:68:AE:06:22:58:A3:27
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 0195394C64EF99EDF417419919CFCB4C2438
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/cVEETtb-Qaf8enOxj2iuBiJYoyc.roa
Signing time: Mon 24 Feb 2025 18:51:02 +0000
ROA not before: Mon 24 Feb 2025 18:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212655
IP address blocks: 45.92.44.0/22 maxlen: 24
83.217.160.0/20 maxlen: 20
185.8.92.0/24 maxlen: 24
185.8.94.0/23 maxlen: 24
185.26.240.0/22 maxlen: 22
185.154.144.0/22 maxlen: 22
193.28.90.0/24 maxlen: 24
2a0e:1d40::/29 maxlen: 41
2a10:6940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:4c:64:ef:99:ed:f4:17:41:99:19:cf:cb:4c:24:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Feb 24 18:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7151044ed6fe41a7fc7a73b18f68ae062258a327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:83:57:c0:35:a7:6c:78:64:56:96:af:49:
9b:7c:e5:63:ea:76:ff:a7:c4:f4:d8:43:e9:29:94:
37:7f:68:16:7a:af:21:f2:e5:fd:fa:7a:5b:11:0c:
4f:0b:bc:99:be:04:68:e9:48:97:aa:98:05:07:bd:
ed:93:4e:50:ec:5e:7c:ef:a4:38:5b:e4:98:74:e0:
8a:71:13:14:fc:cd:2c:84:2b:6a:14:87:89:e4:33:
61:f5:a5:de:be:59:7d:21:ba:36:29:0c:5f:f7:fe:
e8:43:60:0c:e6:ed:2a:f8:04:02:a2:60:0f:2a:ab:
4d:9f:f8:02:51:3a:65:8d:51:3c:e5:7d:d3:dc:c2:
a6:64:8d:a2:a9:2b:1c:12:27:16:c8:33:ab:5c:c7:
7f:ab:f6:02:d9:23:65:0a:0f:76:38:77:3c:39:40:
d7:e4:04:10:cc:04:2f:75:5a:d6:62:ce:8d:69:8d:
9b:0d:29:04:79:94:96:83:3e:ae:51:8c:ce:bb:c5:
0f:fe:10:2c:3c:8a:96:9a:c6:3d:6d:af:f6:4d:41:
0e:4e:20:c2:08:4f:5c:38:98:ec:d2:2a:32:69:02:
19:e5:5c:e9:05:23:ae:fc:c0:e9:be:8a:f4:ba:59:
1a:7a:05:97:d8:ec:28:26:51:74:f9:14:6c:d7:eb:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:51:04:4E:D6:FE:41:A7:FC:7A:73:B1:8F:68:AE:06:22:58:A3:27
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/cVEETtb-Qaf8enOxj2iuBiJYoyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.44.0/22
83.217.160.0/20
185.8.92.0/24
185.8.94.0/23
185.26.240.0/22
185.154.144.0/22
193.28.90.0/24
IPv6:
2a0e:1d40::/29
2a10:6940::/29
Signature Algorithm: sha256WithRSAEncryption
73:83:2d:26:f0:f1:ea:38:89:f5:8a:f8:0d:d9:d0:70:dc:f7:
2c:47:b2:f0:7b:5b:b3:68:42:3e:8d:56:0d:da:72:b3:7e:a3:
6a:46:0d:87:62:36:e3:4c:59:9f:1f:81:d5:b0:e1:a3:39:7b:
1c:db:c1:fb:78:16:24:94:06:d5:43:88:f3:64:07:23:61:62:
4d:9c:58:6c:18:f9:00:9c:f1:3b:45:d3:6d:a3:09:55:70:70:
a5:76:ca:fe:59:bc:bb:bb:2e:8a:c7:74:5c:f3:f7:c1:8c:4c:
cc:52:c0:08:36:39:c8:bd:18:65:79:45:04:22:af:75:a4:f8:
a6:ff:fd:2f:ff:1a:d2:f6:7c:20:bb:1d:07:b6:12:29:c8:c7:
74:9f:60:96:e3:0f:9f:6a:41:59:55:07:d9:58:aa:ff:c7:c3:
29:cc:ae:81:02:52:35:54:37:42:39:5d:4d:23:60:9a:8a:1b:
00:e5:fb:92:c9:64:6e:d3:8c:81:67:e8:c2:4d:77:c9:4f:b2:
29:c6:3a:77:ab:a3:4d:26:79:ca:db:a7:a8:53:9b:08:77:06:
7c:6e:d4:d0:02:0c:03:ef:70:29:85:94:c9:f2:11:34:2a:88:
20:63:e9:36:b7:2c:48:93:4c:55:cc:32:3b:46:99:3b:5d:3c:
fc:04:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:12 2025 by rpki-client