Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/_C12IjEOj75oE5QypNCeEnRnlyI.roa
File: _C12IjEOj75oE5QypNCeEnRnlyI.roa (raw, json)
Hash identifier: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=
Subject key identifier: FC:2D:76:22:31:0E:8F:BE:68:13:94:32:A4:D0:9E:12:74:67:97:22
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01942067F36F055EA9776E454CCF927B9C66
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/_C12IjEOj75oE5QypNCeEnRnlyI.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48504
IP address blocks: 37.26.176.0/21 maxlen: 24
45.134.192.0/22 maxlen: 24
46.247.160.0/19 maxlen: 24
80.253.192.0/20 maxlen: 24
94.143.80.0/21 maxlen: 24
94.247.160.0/21 maxlen: 24
176.53.128.0/22 maxlen: 24
185.8.240.0/22 maxlen: 24
185.12.96.0/22 maxlen: 24
185.48.48.0/22 maxlen: 24
185.50.76.0/22 maxlen: 24
185.117.36.0/22 maxlen: 24
193.239.190.0/23 maxlen: 24
193.243.150.0/23 maxlen: 24
194.105.58.0/23 maxlen: 24
194.105.62.0/23 maxlen: 24
2a01:9720::/32 maxlen: 48
2a01:aa60::/32 maxlen: 48
2a03:bd00::/32 maxlen: 48
2a04:b440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f3:6f:05:5e:a9:77:6e:45:4c:cf:92:7b:9c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc2d7622310e8fbe68139432a4d09e1274679722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:c9:0f:aa:1f:7a:1e:0c:e6:ae:67:54:71:
39:82:60:94:07:ab:19:b6:98:77:09:3d:fa:73:98:
d8:ae:5e:fd:8c:9b:61:54:03:b8:ee:15:73:70:c8:
ee:bb:a0:7e:8a:63:e4:cf:bf:5d:4e:65:eb:49:93:
5d:fa:b7:ea:1e:6a:db:0c:a4:37:f6:37:d7:96:f5:
78:32:1d:7e:0c:52:53:69:4b:d2:45:db:53:21:2e:
a5:ca:7a:46:c7:fd:1d:46:1a:2b:c1:01:1b:fc:4a:
da:89:a4:99:16:4f:c6:70:6c:6f:c1:37:31:a1:30:
68:1b:82:00:91:01:44:9d:e2:c4:56:61:22:84:29:
c1:11:d6:0e:10:89:fb:17:94:a2:d9:c1:85:70:eb:
80:db:aa:9f:7f:19:15:c9:cf:74:02:b5:7e:4a:0a:
c6:a8:19:4d:86:53:52:a0:21:a3:09:5c:e0:da:03:
81:02:d2:0c:74:ce:78:ba:cc:cc:0f:54:ee:ef:17:
47:a0:9a:b8:ac:0d:14:c0:c6:0a:ca:3d:ef:4f:b9:
f3:a3:09:53:10:28:c5:3f:0b:9a:57:25:c4:f2:dc:
79:64:70:1c:0f:e3:e2:3d:bc:25:52:c4:c5:b6:72:
52:30:c2:7f:bd:17:93:7e:fa:4c:5f:a9:73:7a:ee:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:76:22:31:0E:8F:BE:68:13:94:32:A4:D0:9E:12:74:67:97:22
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/_C12IjEOj75oE5QypNCeEnRnlyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.176.0/21
45.134.192.0/22
46.247.160.0/19
80.253.192.0/20
94.143.80.0/21
94.247.160.0/21
176.53.128.0/22
185.8.240.0/22
185.12.96.0/22
185.48.48.0/22
185.50.76.0/22
185.117.36.0/22
193.239.190.0/23
193.243.150.0/23
194.105.58.0/23
194.105.62.0/23
IPv6:
2a01:9720::/32
2a01:aa60::/32
2a03:bd00::/32
2a04:b440::/29
Signature Algorithm: sha256WithRSAEncryption
39:d3:75:2c:be:ba:76:5c:cd:ab:92:e0:96:29:4d:0e:51:8f:
86:0b:f5:67:b6:10:c6:27:40:2e:28:38:94:8f:38:de:25:4b:
e4:66:35:63:a1:80:3d:23:85:92:7b:6b:66:83:a1:9e:fb:a1:
87:81:75:b4:dc:74:96:5a:e8:5c:16:db:b0:60:56:c3:fe:33:
53:c3:52:1d:8f:79:fe:66:0d:1c:7a:5d:7c:e9:18:10:8b:a2:
8d:6a:c6:c9:25:a2:f0:ba:36:44:69:ad:78:c3:eb:76:c3:4e:
33:54:9b:58:7d:34:6f:b0:93:84:34:d3:08:6c:cf:e8:11:b0:
29:6f:19:55:e1:2f:22:e4:3e:04:65:3f:10:a7:5a:ad:52:07:
00:c6:5c:d5:3c:27:a0:78:14:a7:e4:aa:59:e9:d4:be:e7:3a:
45:4d:91:f3:36:76:16:30:19:2b:fa:e0:54:1f:8e:7f:cd:1d:
52:fe:83:c7:df:0a:22:ca:97:2f:c7:f5:5d:50:46:4e:7d:7f:
2b:52:ea:ba:ff:ca:fe:3a:77:a5:04:ae:4e:cd:97:4c:34:b7:
de:40:08:77:2b:d9:5c:91:ff:1d:44:3e:3a:2d:6a:b6:f4:c3:
11:e9:7c:36:b9:e3:6f:3b:38:48:ff:86:5d:3c:4d:5a:27:89:
b3:6a:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:25:09 2025 by rpki-client