Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa
File: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (raw, json)
Hash identifier: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=
Subject key identifier: B1:9E:45:42:96:A0:45:12:C5:1C:3A:C2:A4:2F:BA:B9:4F:C6:42:DE
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 0194228E407DEE8E9EBEE1E615D6796480D4
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204151
IP address blocks: 46.32.144.0/21 maxlen: 21
78.31.252.0/22 maxlen: 22
87.104.128.0/18 maxlen: 18
87.104.240.0/20 maxlen: 20
185.107.12.0/22 maxlen: 22
185.107.13.0/24 maxlen: 24
185.107.14.0/24 maxlen: 24
185.161.77.0/24 maxlen: 24
185.233.252.0/22 maxlen: 22
194.45.76.0/22 maxlen: 22
212.237.176.0/21 maxlen: 21
2a00:8200::/32 maxlen: 32
2a06:4000::/29 maxlen: 29
2a0c:f900::/29 maxlen: 29
2a12:3d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:40:7d:ee:8e:9e:be:e1:e6:15:d6:79:64:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b19e454296a04512c51c3ac2a42fbab94fc642de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:98:75:dd:71:9d:e3:4c:b3:f4:e8:31:45:5f:
a5:5a:50:57:fd:4f:cd:7e:e7:ef:60:33:a4:4b:15:
b9:50:6c:86:c1:f6:73:2c:bf:02:b9:6f:b2:a8:8c:
6f:0b:c2:d4:3a:b7:16:03:85:c2:48:2d:69:38:a1:
0a:3d:c3:44:d8:c9:b7:3f:11:a7:a5:33:b7:3d:64:
7d:f4:30:e7:4e:89:ff:8a:82:4f:9c:10:29:74:c0:
c9:b0:84:da:d3:8e:ae:01:32:49:b1:f9:57:39:75:
ef:52:ee:cb:5e:f9:06:72:3b:63:1b:84:a8:27:d0:
a1:23:96:8d:c5:1d:2f:dd:6e:db:b2:e0:44:e4:08:
3f:6b:b8:32:44:eb:5b:eb:83:32:1b:3a:6f:4c:5a:
ae:96:e6:e4:85:c9:d4:e4:c9:1c:a7:f4:45:1a:e2:
20:8c:06:bf:93:f2:c3:9e:f7:5c:d7:2c:de:01:55:
79:c8:5b:1b:b4:a8:d5:00:43:0c:46:02:e7:ae:e2:
49:11:bf:4d:de:a8:5c:3f:e0:d4:f6:57:92:96:52:
d1:e7:8c:e6:bd:b4:01:76:c7:3a:95:06:4f:5e:ee:
22:59:c0:f9:f9:c7:26:5a:39:d2:2b:e2:ac:74:a9:
15:a6:fe:75:c5:2d:d0:2e:03:c0:73:36:bc:97:67:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9E:45:42:96:A0:45:12:C5:1C:3A:C2:A4:2F:BA:B9:4F:C6:42:DE
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.144.0/21
78.31.252.0/22
87.104.128.0/18
87.104.240.0/20
185.107.12.0/22
185.161.77.0/24
185.233.252.0/22
194.45.76.0/22
212.237.176.0/21
IPv6:
2a00:8200::/32
2a06:4000::/29
2a0c:f900::/29
2a12:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
24:7b:fa:e5:63:75:e3:ee:a8:f4:40:8e:46:e7:01:ff:ad:a8:
2f:b6:6a:d8:0d:b3:21:8a:5c:aa:c7:bc:e7:5c:1b:7a:1b:ce:
0d:aa:f3:ca:c1:4e:f2:32:7c:d3:ed:73:b0:5c:71:f7:42:d9:
e7:89:0f:e3:a3:06:1c:e3:e9:ed:c5:0f:1a:9b:c6:91:46:9f:
b4:f8:ed:25:f2:3a:75:d3:99:ec:f7:e7:b7:0e:e3:33:88:04:
aa:41:01:17:25:67:54:1b:37:f0:1b:0e:0d:b9:d9:ec:0d:d9:
2a:55:ad:33:5a:dd:57:e6:1b:ff:ec:2a:16:b7:da:d5:82:68:
62:48:78:50:a1:80:92:a4:ec:09:ec:8f:8d:2a:e8:da:9d:79:
f2:b2:bd:6c:72:7e:c1:c4:41:48:c7:1a:70:18:eb:07:b2:9d:
36:59:d7:ce:93:c3:32:3e:81:e9:e2:b7:fa:ab:6d:27:ec:49:
9b:d4:70:19:56:b8:d1:27:b6:6d:2a:01:2c:dc:6f:8c:94:c3:
19:dc:2a:98:ba:9c:d8:25:da:a6:90:95:8a:61:fe:7f:70:6c:
15:e5:47:3d:bf:4a:85:18:3e:f7:bb:ca:a5:e7:dd:cc:20:18:
8d:6b:b6:2a:ad:60:4f:e6:b4:a6:83:a1:f0:ba:5e:f7:9f:39:
4a:8a:29:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:31:31 2025 by rpki-client