Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/dansMIWsXXpDaSAy_aJZzzQS8h0.roa
File: dansMIWsXXpDaSAy_aJZzzQS8h0.roa (raw, json)
Hash identifier: iHe7NlIYDFrPBEBVHgOcNEN5f7UZr+p1lUL5elNQd68=
Subject key identifier: 75:A9:EC:30:85:AC:5D:7A:43:69:20:32:FD:A2:59:CF:34:12:F2:1D
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01941FFA9E4D2484751C6738B2341462221A
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/dansMIWsXXpDaSAy_aJZzzQS8h0.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51032
IP address blocks: 31.128.128.0/19 maxlen: 24
31.130.0.0/19 maxlen: 24
31.130.12.0/22 maxlen: 22
31.130.16.0/20 maxlen: 20
31.130.31.192/29 maxlen: 29
62.122.88.0/21 maxlen: 24
85.159.224.0/24 maxlen: 24
85.159.227.0/24 maxlen: 24
89.23.128.0/19 maxlen: 19
89.23.128.0/21 maxlen: 24
89.23.144.0/20 maxlen: 24
89.23.146.0/24 maxlen: 24
89.23.147.0/24 maxlen: 24
89.23.160.0/19 maxlen: 19
89.23.168.0/21 maxlen: 21
89.23.176.0/21 maxlen: 21
91.123.80.0/20 maxlen: 20
91.202.204.0/22 maxlen: 24
93.157.160.0/21 maxlen: 21
93.157.162.0/24 maxlen: 24
93.157.163.0/24 maxlen: 24
178.212.80.0/21 maxlen: 24
178.216.176.0/21 maxlen: 21
2a13:2c80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:4d:24:84:75:1c:67:38:b2:34:14:62:22:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75a9ec3085ac5d7a43692032fda259cf3412f21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:68:26:90:0e:b3:0b:d7:d7:33:5a:6f:31:
02:5c:be:e3:46:f1:8d:ff:6f:3f:34:06:3d:96:1f:
cb:e8:d2:89:de:78:dc:d4:9a:11:1b:7c:97:c8:64:
cb:da:e7:bd:6d:cf:4a:c5:52:f7:70:8d:53:8f:c8:
4a:3f:f9:7b:0e:9f:67:cf:ca:6c:2c:dd:c1:0c:79:
0d:a4:2d:95:a2:e8:fc:fa:e0:45:a7:7c:ee:9b:9a:
11:50:cc:45:23:04:05:bc:c1:1c:16:b9:52:53:5a:
8d:22:90:4e:ea:d8:5d:70:41:3f:2c:dc:73:25:c5:
2a:05:ed:8a:1e:4a:60:30:70:4d:89:93:6e:75:a5:
6b:a3:76:f0:a2:66:fc:d9:01:92:80:7f:e0:2c:c7:
e5:09:6a:86:31:75:56:f6:cd:3a:e0:0d:48:fc:5e:
1a:89:2f:40:9d:25:c6:67:9f:a2:be:d3:b1:b9:38:
6d:44:99:d9:c5:b4:0c:f2:8a:da:ee:55:14:f8:e7:
6f:5d:6c:cd:28:e1:02:82:23:23:0d:9f:4f:c9:35:
9a:e6:ed:d4:2e:34:16:04:43:f3:3e:98:83:e6:8e:
de:96:72:64:e2:b0:b0:d6:f0:f1:68:f6:1c:3b:e0:
7f:cf:04:5e:3f:41:8c:88:5c:49:e4:cd:4f:93:dd:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A9:EC:30:85:AC:5D:7A:43:69:20:32:FD:A2:59:CF:34:12:F2:1D
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/dansMIWsXXpDaSAy_aJZzzQS8h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.128.0/19
31.130.0.0/19
62.122.88.0/21
85.159.224.0/24
85.159.227.0/24
89.23.128.0/18
91.123.80.0/20
91.202.204.0/22
93.157.160.0/21
178.212.80.0/21
178.216.176.0/21
IPv6:
2a13:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:2b:32:d2:6b:4a:7a:54:77:6b:83:4b:c7:5b:22:df:24:c5:
0e:d5:b7:21:18:27:73:a0:79:7a:35:8a:ba:3d:99:0b:bc:7c:
1b:67:dd:c0:11:a1:d6:26:86:85:b2:bc:1a:f7:75:16:f7:7a:
4c:a9:11:1c:0d:e8:3d:ca:86:73:da:cf:5e:21:f8:ef:52:81:
26:bf:89:74:05:b0:30:2b:3a:79:05:7f:fc:78:d6:2e:d1:aa:
31:cd:e4:14:61:2d:11:3a:16:27:b2:c3:86:c7:3c:f0:c3:e4:
76:f3:16:91:73:e5:65:bb:1f:de:c0:4e:95:13:1e:6e:84:c9:
85:4e:ec:ab:c8:f6:34:e0:5d:11:51:c4:a4:d4:d0:ac:5a:ab:
ba:e2:24:ff:da:fc:06:71:a7:ed:62:15:aa:65:eb:8d:0c:e0:
84:26:91:2e:e1:9d:b1:73:e1:11:e5:4e:6f:12:7a:12:7e:10:
53:2c:5c:0a:ae:ac:a9:7b:72:d0:9c:37:b4:09:af:99:5a:ee:
79:49:f0:bf:f5:51:e6:ff:9c:06:37:dd:72:1e:38:ce:db:c7:
f5:ae:6f:91:d8:50:e9:a7:8b:ab:9f:c9:d9:c4:9d:69:1e:0b:
f0:3a:0e:c3:a9:67:40:7a:54:91:57:7f:8b:64:da:61:f2:02:
c8:08:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:20 2025 by rpki-client