Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa
File: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (raw, json)
Hash identifier: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=
Subject key identifier: 7C:A7:5A:B4:6F:56:70:97:39:59:55:0D:EA:97:55:28:83:A3:32:74
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019426D95A560A0FAAE68F0FC228A718A63B
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7393
IP address blocks: 5.57.213.0/24 maxlen: 24
46.31.66.0/24 maxlen: 24
46.253.136.0/24 maxlen: 24
62.3.51.0/24 maxlen: 24
62.106.80.0/24 maxlen: 24
77.72.82.0/24 maxlen: 24
84.246.83.0/24 maxlen: 24
91.246.57.0/24 maxlen: 24
146.19.229.0/24 maxlen: 24
178.22.29.0/24 maxlen: 24
193.163.95.0/24 maxlen: 24
212.18.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:56:0a:0f:aa:e6:8f:0f:c2:28:a7:18:a6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ca75ab46f5670973959550dea97552883a33274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:ec:f3:d2:8a:91:98:d9:d6:0d:e2:84:cc:
6a:18:87:93:af:72:91:98:f9:ae:ea:05:72:a8:4f:
31:42:a8:bf:2a:54:a3:ed:83:86:96:75:58:26:86:
69:65:8b:98:bc:a8:0a:c8:4c:92:ff:55:d3:f0:84:
f4:ef:ed:ca:b9:eb:6e:27:f0:6d:28:82:45:23:24:
af:ce:e7:4d:c9:10:44:34:61:20:c5:88:c6:62:ac:
a0:6d:0b:39:4d:c8:7a:04:35:94:25:da:ef:0e:7c:
52:24:4e:38:c5:2d:4b:7e:4e:7b:a4:90:90:ef:90:
d1:c4:0e:82:28:9c:17:d6:6f:99:b4:22:57:ac:a0:
6e:df:36:c8:99:69:7b:bc:da:b1:b8:a3:8c:6e:2a:
b1:6b:05:fe:d8:37:0a:c9:9e:99:c8:98:8c:a7:15:
8a:c1:c4:b8:fc:2d:2b:c9:98:18:47:8e:86:16:ba:
e1:0f:b4:74:de:cd:9d:75:d8:c1:99:c2:4d:36:fe:
2d:26:af:6a:a2:a7:fc:10:71:12:42:82:d7:65:bc:
3f:94:a0:70:59:0c:b9:6e:d3:b6:33:c3:a2:f8:6a:
1e:09:22:d1:75:e8:1d:35:1b:5a:86:49:e2:e2:14:
af:04:9a:3f:7d:0e:ae:a3:14:5a:77:ff:51:6d:c3:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A7:5A:B4:6F:56:70:97:39:59:55:0D:EA:97:55:28:83:A3:32:74
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.213.0/24
46.31.66.0/24
46.253.136.0/24
62.3.51.0/24
62.106.80.0/24
77.72.82.0/24
84.246.83.0/24
91.246.57.0/24
146.19.229.0/24
178.22.29.0/24
193.163.95.0/24
212.18.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c5:47:70:ba:36:ad:77:46:e8:47:e8:0d:a4:e5:c0:fb:9b:
0e:64:e4:06:06:55:74:82:59:7f:d7:47:ac:83:aa:e1:57:a9:
99:20:8d:39:63:90:6d:6e:db:a6:91:ff:b6:e9:3d:fd:51:53:
d6:23:4e:04:53:81:1e:9e:11:62:70:d6:85:e3:f2:e1:70:ee:
86:a5:24:a6:91:bb:7b:5e:81:89:5e:43:99:26:99:de:bc:5c:
4f:24:d7:a0:df:de:85:70:e1:73:6e:94:17:10:e0:5e:40:ee:
da:1f:3c:0a:3a:7d:8e:5c:e9:0f:04:8b:8b:d1:8d:c0:e1:7a:
dd:d8:84:30:4a:1f:9b:66:fd:81:34:54:e0:22:91:30:42:f8:
b9:b2:37:de:5d:4a:11:99:02:91:35:b0:d8:0f:35:c1:80:32:
63:3a:df:22:1b:e2:54:27:d1:dc:5f:ce:56:e4:77:aa:0f:c1:
c6:f2:7e:e5:d2:a1:87:76:14:3c:aa:95:88:6a:69:0c:6a:47:
a9:1b:d5:22:5d:6a:7c:3b:90:cd:6f:a0:95:4c:33:ed:98:cb:
3c:3e:85:df:d2:40:1b:4b:c5:e0:8e:f8:a9:e0:86:0c:b4:42:
de:1d:44:98:d4:3a:b7:02:e7:13:e5:d2:7b:7a:1f:e6:a3:c7:
60:5c:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:50:01 2025 by rpki-client