Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/eHNcYEF-2Q1qqw_V4ay2Rk6DzC8.roa
File: eHNcYEF-2Q1qqw_V4ay2Rk6DzC8.roa (raw, json)
Hash identifier: 7jK6GTgtOsW5ejSEUTMjmjF5N1YX94yuMyrHsebyc8U=
Subject key identifier: 78:73:5C:60:41:7E:D9:0D:6A:AB:0F:D5:E1:AC:B6:46:4E:83:CC:2F
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019585204F759ACE1D0311C9B31E51706C00
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/eHNcYEF-2Q1qqw_V4ay2Rk6DzC8.roa
Signing time: Tue 11 Mar 2025 12:14:02 +0000
ROA not before: Tue 11 Mar 2025 12:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209243
IP address blocks: 45.152.10.0/24 maxlen: 24
45.157.34.0/24 maxlen: 24
80.64.216.0/24 maxlen: 24
80.64.217.0/24 maxlen: 24
194.146.44.0/24 maxlen: 24
194.146.49.0/24 maxlen: 24
194.156.177.0/24 maxlen: 24
195.22.156.0/24 maxlen: 24
195.22.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:20:4f:75:9a:ce:1d:03:11:c9:b3:1e:51:70:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 11 12:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78735c60417ed90d6aab0fd5e1acb6464e83cc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:b9:97:a5:d5:f3:c4:6a:26:52:d4:53:2b:
38:93:74:2b:df:7a:12:54:ae:ca:e2:e6:ea:27:43:
74:dc:f7:32:33:55:39:13:9c:c1:79:d4:20:44:9b:
4a:72:10:e0:27:1c:f3:f3:ec:54:08:b1:d9:ee:05:
e6:50:1a:4f:c0:40:29:bc:b9:89:6d:f1:36:35:bd:
1b:5c:12:a7:26:7d:ab:34:ca:67:7b:73:de:6d:4d:
25:27:02:47:99:cb:e1:1b:b8:c1:0f:c1:85:4a:a9:
fa:56:11:5e:cb:92:a2:34:11:e9:57:17:93:2e:3a:
d4:86:f4:ff:ee:5f:6b:b4:3e:44:f9:00:b9:d4:8f:
14:a8:ce:b2:5d:bc:24:6e:13:af:06:3a:bf:a1:ca:
11:30:77:5a:aa:a7:e2:e2:f2:78:ce:f6:9b:d8:60:
10:fd:83:e4:05:94:7c:7c:c8:8a:2c:22:51:18:33:
91:7e:c7:1e:e4:0f:ba:2e:fb:a7:1a:78:d1:98:fd:
b9:a1:69:3a:ff:c5:39:dc:ee:73:0b:1e:85:1c:8e:
5e:37:ea:0e:36:1f:c7:87:5d:be:8d:35:a6:e3:51:
c4:86:c3:4b:6c:66:21:c0:43:ad:82:d8:68:3a:9e:
0c:ee:2f:49:c3:2e:68:97:43:fc:d7:7f:fc:58:8b:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:73:5C:60:41:7E:D9:0D:6A:AB:0F:D5:E1:AC:B6:46:4E:83:CC:2F
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/eHNcYEF-2Q1qqw_V4ay2Rk6DzC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.10.0/24
45.157.34.0/24
80.64.216.0/23
194.146.44.0/24
194.146.49.0/24
194.156.177.0/24
195.22.156.0/23
Signature Algorithm: sha256WithRSAEncryption
45:b6:b1:40:1f:37:5d:c4:87:0e:0f:a0:30:db:cf:4c:31:12:
8b:7a:90:3f:14:0f:28:73:70:a2:c0:3d:ef:9c:08:2c:a0:01:
26:e6:d0:a1:d3:28:fe:12:71:6c:2d:a0:20:2c:11:06:86:e0:
9e:4b:c5:5f:d5:4d:c3:76:ae:b9:74:79:a7:21:09:bf:65:f4:
69:ea:9a:fe:3a:fc:5a:1f:92:40:9e:c3:8b:65:5c:2f:c6:12:
c3:dd:a0:06:e8:5e:a1:ba:40:c1:da:bb:f2:c0:ac:02:02:54:
c8:1a:ae:80:49:11:94:51:d5:70:dd:5d:78:78:ca:5a:bb:8e:
45:a1:c8:75:15:dc:de:5a:6c:56:33:ae:24:74:14:57:b9:53:
83:d2:55:e3:44:94:62:c4:08:87:30:d4:ba:f1:2c:bf:eb:a2:
4d:34:0c:ec:ea:51:52:a4:71:fe:5b:58:db:7c:8f:d6:fc:c0:
1f:42:5a:8d:98:cc:b1:54:99:7a:3e:b7:56:bd:1b:22:db:a2:
89:69:29:fe:cd:06:85:bb:0e:fd:64:d1:73:bf:98:1d:96:c9:
a3:83:81:60:44:6f:c2:5c:e9:08:c1:9f:92:2d:93:b3:32:a3:
c6:36:a0:ae:b6:93:8a:c8:2c:da:9b:a6:f4:9c:45:ce:37:99:
32:4f:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:55 2025 by rpki-client