Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa
File: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (raw, json)
Hash identifier: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=
Subject key identifier: 78:E2:61:F6:33:C5:DA:B8:3A:D9:04:E7:86:38:65:2B:52:EB:83:5C
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 01958085628430FDB3CB2D179BE3B694FCB0
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa
Signing time: Mon 10 Mar 2025 14:46:19 +0000
ROA not before: Mon 10 Mar 2025 14:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35258
IP address blocks: 46.254.120.0/21 maxlen: 21
83.143.208.0/21 maxlen: 21
83.143.210.0/24 maxlen: 24
87.253.184.0/22 maxlen: 22
91.208.244.0/24 maxlen: 24
185.6.252.0/22 maxlen: 22
195.85.38.0/24 maxlen: 24
195.85.72.0/23 maxlen: 23
213.238.48.0/23 maxlen: 23
2a00:e400::/29 maxlen: 29
2a06:23c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:85:62:84:30:fd:b3:cb:2d:17:9b:e3:b6:94:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Mar 10 14:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78e261f633c5dab83ad904e78638652b52eb835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:c9:8e:d4:7a:38:0f:3b:0c:46:ce:1f:88:
a8:78:90:fc:2e:7e:6b:48:0f:99:30:dc:bc:30:cb:
16:09:b4:58:a0:d8:ae:11:7c:a7:7c:1d:ae:68:53:
5e:12:4c:04:60:09:3a:dd:af:98:16:c0:2e:63:00:
5e:c9:5d:a1:47:42:d3:62:dd:7c:db:b3:4e:e9:46:
d9:ab:57:20:85:9f:de:2c:4e:85:09:e6:1b:32:2e:
15:01:7d:0d:73:38:4d:c5:e5:38:7a:2b:52:c3:af:
92:38:48:58:da:e1:7f:51:09:a1:ca:d3:0e:30:55:
b5:f0:fd:b3:68:bd:e6:9d:2f:2b:fe:40:10:f1:9b:
c4:88:6a:38:00:5b:61:58:fc:bf:1f:8e:bf:26:d2:
e8:2a:b3:d5:5c:0b:5f:50:95:79:2c:98:cc:0a:65:
8e:22:28:56:0f:52:33:03:3f:f3:3c:76:bf:b1:9a:
86:21:85:b6:65:34:6a:61:6e:b0:02:03:c6:00:69:
bd:fa:d4:14:dd:60:25:de:8a:fa:f6:d1:89:4b:96:
49:32:dc:42:8c:27:1b:14:a6:64:95:55:20:57:99:
90:19:7d:2d:08:66:c8:bb:d7:1e:ed:90:89:a4:13:
8f:76:86:81:bc:0c:e0:7a:b0:ba:ae:c2:19:be:46:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E2:61:F6:33:C5:DA:B8:3A:D9:04:E7:86:38:65:2B:52:EB:83:5C
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.120.0/21
83.143.208.0/21
87.253.184.0/22
91.208.244.0/24
185.6.252.0/22
195.85.38.0/24
195.85.72.0/23
213.238.48.0/23
IPv6:
2a00:e400::/29
2a06:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
42:ff:0f:f0:63:87:52:3f:8b:d8:a9:b6:25:c7:8e:1c:94:e8:
a1:d0:50:48:4c:db:91:c8:10:db:73:02:d4:0e:25:1a:e1:a4:
e9:87:41:06:ac:f8:6a:34:24:f1:bf:b0:3a:f6:f0:db:54:76:
a9:98:ac:47:c0:48:1a:92:bb:eb:14:01:c6:62:fa:42:06:fb:
d2:4d:5a:a7:02:ab:3d:c3:eb:9a:ea:7d:97:0f:ad:2c:34:23:
03:6c:10:cf:20:00:d2:77:9b:80:73:34:cf:b6:c1:cd:9a:ea:
f6:bf:2e:e3:28:dd:b5:e9:48:37:00:a2:04:f2:45:e1:9c:8b:
80:f7:d6:bc:10:9d:fb:e0:6f:15:da:24:07:12:82:77:a0:26:
9b:cd:6f:64:93:06:38:b4:7e:37:7b:8a:03:56:df:70:b9:bf:
46:8e:fb:6a:97:65:e9:f1:41:93:41:6a:2f:f5:15:e8:03:3e:
e7:72:c1:25:96:3d:6f:23:68:ca:10:ef:cc:9f:26:8d:2d:32:
5c:6e:dc:13:19:5f:17:b7:81:68:55:72:23:ae:df:c5:10:04:
13:33:fb:e4:87:53:ec:23:81:69:ef:ef:e0:58:d7:f4:bb:0a:
8b:ed:29:9a:0f:5f:5a:26:ff:0e:c9:43:9b:ba:b0:76:82:69:
96:97:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:36 2025 by rpki-client