Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/FsywoxiqGbiXN3gXMv28UkxtGzE.roa
File: FsywoxiqGbiXN3gXMv28UkxtGzE.roa (raw, json)
Hash identifier: 27vs8gux+UHGS5Np9ysCtz/GYc8vnHVfHjLJxXKtJgE=
Subject key identifier: 16:CC:B0:A3:18:AA:19:B8:97:37:78:17:32:FD:BC:52:4C:6D:1B:31
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 019424448491D940A365969B16151FCB1E46
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/FsywoxiqGbiXN3gXMv28UkxtGzE.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13178
IP address blocks: 91.204.20.0/24 maxlen: 24
91.204.21.0/24 maxlen: 24
91.205.44.0/22 maxlen: 22
93.88.128.0/20 maxlen: 20
93.187.120.0/21 maxlen: 21
185.55.40.0/22 maxlen: 22
185.58.124.0/22 maxlen: 22
185.58.152.0/22 maxlen: 22
185.59.192.0/22 maxlen: 22
185.61.192.0/24 maxlen: 24
185.61.195.0/24 maxlen: 24
185.175.72.0/22 maxlen: 22
2a00:8040::/32 maxlen: 32
2a02:6160::/32 maxlen: 32
2a03:6c0::/32 maxlen: 32
2a03:ed80::/32 maxlen: 32
2a04:e080::/29 maxlen: 29
2a04:ed40::/29 maxlen: 29
2a0b:d700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:84:91:d9:40:a3:65:96:9b:16:15:1f:cb:1e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ccb0a318aa19b89737781732fdbc524c6d1b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:56:8b:34:00:b5:10:b4:5d:91:43:59:9a:
83:cb:9f:d9:b5:a2:56:47:37:e7:f4:52:23:0d:f9:
e5:c3:b6:9d:f0:a4:f3:31:55:9a:53:d6:a2:f1:cc:
56:65:f5:be:71:04:32:25:b8:15:d6:6e:0f:1d:4a:
16:80:b0:6a:f8:4a:63:f4:5a:59:1e:38:b3:52:27:
a8:a5:32:0c:e4:4d:e7:1c:51:80:0c:fa:9b:a3:df:
da:3c:49:2c:dc:c9:5a:e8:38:a1:ec:b3:43:da:30:
d4:54:23:e5:2e:31:30:7c:ed:05:75:67:01:ab:27:
fc:cb:2c:9c:7b:c6:78:3f:95:ae:12:5a:d3:da:0b:
7a:df:83:0d:25:d4:f4:3c:07:5e:c9:eb:2e:a2:2a:
ad:ef:24:fd:50:c9:4b:51:1c:36:3e:c4:40:c6:d2:
04:07:83:1f:a0:e3:c9:79:71:fb:0b:28:38:95:08:
b7:7b:56:17:60:7b:93:79:e2:c9:3d:3f:cb:74:ab:
bf:03:f1:d4:ee:2c:58:d9:13:6e:1f:d0:fb:7e:26:
51:0d:4e:91:dc:fc:b7:93:89:22:cb:52:07:bc:87:
59:f4:83:ff:e5:72:21:d7:d5:8c:54:88:12:7f:4d:
03:53:01:e1:e4:c4:2f:78:ea:b7:ff:23:73:11:65:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:B0:A3:18:AA:19:B8:97:37:78:17:32:FD:BC:52:4C:6D:1B:31
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/FsywoxiqGbiXN3gXMv28UkxtGzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.20.0/23
91.205.44.0/22
93.88.128.0/20
93.187.120.0/21
185.55.40.0/22
185.58.124.0/22
185.58.152.0/22
185.59.192.0/22
185.61.192.0/24
185.61.195.0/24
185.175.72.0/22
IPv6:
2a00:8040::/32
2a02:6160::/32
2a03:6c0::/32
2a03:ed80::/32
2a04:e080::/29
2a04:ed40::/29
2a0b:d700::/29
Signature Algorithm: sha256WithRSAEncryption
11:62:49:4d:62:bd:59:9b:8d:37:09:0b:cd:91:c4:ea:8e:cf:
47:c7:a5:77:85:23:50:75:38:a2:5a:f9:7f:d7:c4:cb:a7:ba:
08:05:68:fa:83:23:de:84:18:92:44:05:38:f7:ce:3a:ed:9e:
ea:5c:8a:28:db:05:4f:aa:be:43:25:6f:7c:64:64:ff:68:0d:
3d:62:e7:bc:d0:f7:f6:89:c6:01:65:54:36:2a:16:e3:1f:a6:
73:bb:96:cd:5c:58:15:3b:22:c0:00:c1:2d:aa:b1:90:d3:ef:
03:dd:80:5a:01:47:60:60:f6:9d:27:ff:23:4d:ad:9c:07:48:
12:d2:6d:fb:5d:0e:7b:15:62:ab:d2:cd:17:79:c3:27:07:44:
39:26:07:75:54:4a:22:8d:64:2d:82:df:75:28:36:b1:ea:02:
a9:dd:a1:07:c9:d0:c9:e4:a3:b6:e5:e0:47:9e:81:01:32:f2:
73:28:96:d4:84:8b:29:72:09:a9:1b:74:f7:0b:d6:aa:f7:42:
75:0e:17:ab:5f:db:c6:85:67:01:49:a9:9b:9e:5a:26:88:45:
1f:ba:0b:18:d2:41:75:52:ce:09:43:2c:43:4f:ab:0b:24:21:
31:fe:36:d3:00:72:81:ac:5e:a6:83:21:4b:4a:5f:f7:1e:28:
cf:e5:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:54 2025 by rpki-client