Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jN8OFQKPhqd_8NPTeVF75O8eAl4.roa
File: jN8OFQKPhqd_8NPTeVF75O8eAl4.roa (raw, json)
Hash identifier: oQR42E5pq+UBMO3bHw9N8HcICGrGerLA6ysscqlvOdU=
Subject key identifier: 8C:DF:0E:15:02:8F:86:A7:7F:F0:D3:D3:79:51:7B:E4:EF:1E:02:5E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C0C88956C0BDBCF3240A26E031A45
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jN8OFQKPhqd_8NPTeVF75O8eAl4.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6663
IP address blocks: 81.180.201.0/24 maxlen: 24
81.180.206.0/24 maxlen: 24
81.181.88.0/21 maxlen: 21
193.226.61.0/24 maxlen: 24
193.226.113.0/24 maxlen: 24
193.226.114.0/24 maxlen: 24
193.226.117.0/24 maxlen: 24
193.226.119.0/24 maxlen: 24
193.226.122.0/24 maxlen: 24
193.226.124.0/24 maxlen: 24
193.226.126.0/24 maxlen: 24
193.230.176.0/24 maxlen: 24
193.230.178.0/24 maxlen: 24
193.230.181.0/24 maxlen: 24
193.230.183.0/24 maxlen: 24
193.230.189.0/24 maxlen: 24
193.230.200.0/24 maxlen: 24
193.230.201.0/24 maxlen: 24
193.231.65.0/24 maxlen: 24
193.231.68.0/24 maxlen: 24
193.231.73.0/24 maxlen: 24
193.231.76.0/24 maxlen: 24
193.231.78.0/24 maxlen: 24
193.231.80.0/24 maxlen: 24
193.231.137.0/24 maxlen: 24
194.153.246.0/24 maxlen: 24
217.156.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0c:88:95:6c:0b:db:cf:32:40:a2:6e:03:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cdf0e15028f86a77ff0d3d379517be4ef1e025e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:dd:76:48:2f:12:c1:c8:19:8f:28:37:6e:
76:bc:12:59:b8:4a:5d:27:2e:2b:2c:01:9c:b2:e8:
7d:70:d1:dc:10:05:65:82:c5:82:a6:78:23:a1:4d:
3b:aa:73:47:fe:a5:00:ac:96:be:9b:4d:8c:2a:93:
5b:30:05:f8:48:4f:c6:cc:8f:71:58:52:79:6f:2e:
11:a1:45:a2:54:0a:11:81:aa:b3:7a:12:50:b1:3f:
e5:77:16:db:55:ff:be:29:8e:82:3f:9a:d2:44:af:
9a:47:1f:86:72:d5:47:54:d5:a9:a5:ed:2b:af:52:
05:f9:11:25:eb:17:35:67:26:57:b3:62:e8:79:82:
6b:11:f0:c4:41:7b:8b:6b:c5:53:b4:a7:8e:df:0e:
6d:61:66:0a:e3:27:63:28:d4:57:82:6b:23:a3:0b:
21:6f:63:96:55:c1:ff:fb:9a:4c:46:b8:6e:ec:6b:
2c:41:88:f5:64:8d:f8:1f:d4:1f:46:fe:19:cd:a6:
2e:ac:54:7b:ad:7a:eb:59:83:4d:bf:89:7d:3f:d9:
50:a4:04:ca:2c:8a:1c:83:2c:ba:e8:05:7f:bc:21:
e2:ed:3f:ef:1a:40:88:af:28:41:ce:40:3c:a4:dc:
a0:c0:9b:40:21:d8:ca:e4:ea:12:3c:9b:3d:9d:a9:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DF:0E:15:02:8F:86:A7:7F:F0:D3:D3:79:51:7B:E4:EF:1E:02:5E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/jN8OFQKPhqd_8NPTeVF75O8eAl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.201.0/24
81.180.206.0/24
81.181.88.0/21
193.226.61.0/24
193.226.113.0-193.226.114.255
193.226.117.0/24
193.226.119.0/24
193.226.122.0/24
193.226.124.0/24
193.226.126.0/24
193.230.176.0/24
193.230.178.0/24
193.230.181.0/24
193.230.183.0/24
193.230.189.0/24
193.230.200.0/23
193.231.65.0/24
193.231.68.0/24
193.231.73.0/24
193.231.76.0/24
193.231.78.0/24
193.231.80.0/24
193.231.137.0/24
194.153.246.0/24
217.156.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:26:cd:a7:c4:0c:45:74:1b:fd:0f:14:8e:50:90:69:96:ec:
08:cf:89:8f:e2:b5:ef:25:10:51:bd:c6:25:3a:71:78:b8:29:
89:4e:75:90:49:1a:d8:28:fd:d3:f4:12:66:76:5a:95:97:dc:
7d:b3:e6:06:77:de:52:a2:a8:ff:c9:bb:14:cc:0e:5f:c4:ee:
5c:6d:13:36:36:9e:d0:14:ca:94:49:b1:e9:57:d2:71:06:31:
6a:b9:df:17:2d:d1:69:05:12:7a:30:8f:99:5b:a1:08:f8:a1:
f9:a0:42:7d:27:61:09:c2:f3:1e:d5:90:f3:37:fe:66:a0:05:
b4:2c:dc:17:b5:89:01:51:75:96:43:34:0d:74:8e:be:79:4a:
6d:8f:10:9e:45:66:59:e2:ad:1a:cb:40:7e:85:36:9f:7c:7d:
f0:8f:b1:21:02:ec:d6:01:74:f7:4f:91:ae:b1:65:3a:0b:ee:
44:93:04:14:e5:d7:37:4d:f0:92:e1:dc:0d:53:40:45:99:6e:
57:6c:89:f9:7e:39:e4:5d:f3:7f:45:bb:b7:94:7b:82:ee:00:
96:2d:78:1a:bb:69:1b:a8:b6:df:61:28:52:d5:a3:4a:64:5b:
b5:95:9c:81:ce:3f:dd:1b:28:f0:6a:f7:dd:ec:4d:d4:46:5b:
09:e3:74:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:04 2025 by rpki-client