Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/AYs5NqXJlv7_khtLnORGZqOMXhQ.roa
File: AYs5NqXJlv7_khtLnORGZqOMXhQ.roa (raw, json)
Hash identifier: wewmI806E0BQk1NPY2yJpok3UXwkdDQ7sI8t/Vlq1t0=
Subject key identifier: 01:8B:39:36:A5:C9:96:FE:FF:92:1B:4B:9C:E4:46:66:A3:8C:5E:14
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019484A88EACCB3549727E8774AAC55CF1DD
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/AYs5NqXJlv7_khtLnORGZqOMXhQ.roa
Signing time: Mon 20 Jan 2025 17:00:26 +0000
ROA not before: Mon 20 Jan 2025 17:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152586
IP address blocks: 2.58.200.0/24 maxlen: 24
2.58.201.0/24 maxlen: 24
2.58.202.0/24 maxlen: 24
45.11.230.0/23 maxlen: 23
45.11.230.0/24 maxlen: 24
45.11.231.0/24 maxlen: 24
45.67.87.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:a8:8e:ac:cb:35:49:72:7e:87:74:aa:c5:5c:f1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 20 17:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=018b3936a5c996feff921b4b9ce44666a38c5e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:73:78:c1:2d:56:24:1a:81:39:df:8a:91:
82:80:35:14:78:c3:d0:47:34:15:f5:fb:83:22:fd:
5d:32:1e:0c:ee:8b:8b:b8:2e:2c:21:87:2b:09:0b:
a7:ff:62:f4:ed:1c:2c:2f:d5:d8:e1:5d:f7:dc:48:
52:22:b4:ad:b7:6b:4c:45:cc:c5:8d:50:3b:16:29:
41:ed:a4:71:b4:29:60:00:a5:d8:f5:bc:3e:45:0a:
20:74:90:07:f1:aa:e8:63:df:c8:17:ec:d0:fa:6f:
d1:0d:c4:4d:49:49:9e:75:aa:17:29:4b:67:6f:9f:
24:3e:c8:30:cc:42:08:af:49:93:74:03:be:c3:83:
13:35:e3:85:79:27:07:df:a2:6d:95:0e:e2:0a:75:
15:06:dc:48:b3:c5:52:45:66:aa:48:4b:b4:4f:35:
6f:f3:95:01:40:e6:35:c9:c7:7e:1a:d4:f6:fe:57:
a4:46:48:40:93:93:b2:3a:d7:bf:e9:a0:7b:75:45:
11:b4:46:e4:3b:04:b1:47:50:a2:e5:6b:56:9d:97:
a8:a1:c7:0d:dc:06:5c:2b:81:6b:9b:d6:f0:68:fa:
26:a3:c0:d8:7e:29:8e:9a:50:a8:a2:f7:5c:f0:47:
3b:6b:03:1f:36:8a:99:92:66:1a:e5:2d:d2:42:c2:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8B:39:36:A5:C9:96:FE:FF:92:1B:4B:9C:E4:46:66:A3:8C:5E:14
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/AYs5NqXJlv7_khtLnORGZqOMXhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.200.0-2.58.202.255
45.11.230.0/23
45.67.87.0/24
45.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a4:8b:04:ff:b1:3d:59:23:dd:0d:ca:9f:ad:72:c3:9e:a0:
2f:d2:d5:65:86:df:4e:60:6f:a1:df:69:e0:5d:fa:36:22:80:
a6:0d:6d:11:cf:e8:de:40:81:d4:41:d9:3c:98:79:30:98:1c:
42:41:d4:a8:1b:83:53:36:21:14:06:e6:ec:78:37:59:f1:30:
84:ef:aa:79:b2:b4:2e:f9:a0:fd:93:12:eb:53:36:8b:24:fd:
b7:0b:5c:34:37:c1:e7:13:2b:a0:fe:4e:64:1d:e8:b1:e5:27:
67:81:4e:ec:75:61:77:60:29:03:63:84:96:cb:a3:2f:78:ec:
b8:c6:62:40:ad:98:cb:92:84:3c:35:bc:5e:e8:aa:13:a2:c9:
8c:4b:c6:52:18:e1:1f:14:c4:a0:3f:64:47:45:93:b9:5c:6c:
96:b8:5e:30:98:d0:98:fa:d7:56:05:0b:f4:87:df:fa:01:2a:
0e:89:cf:78:a9:60:00:0e:78:58:c8:93:69:a6:a3:28:79:8f:
24:a5:63:ee:40:2d:e8:29:00:c3:b3:88:0d:e2:13:b2:a9:98:
d0:80:1b:80:08:77:68:05:6d:e7:b7:32:91:95:46:16:06:7a:
be:09:f2:f8:d7:89:e3:af:7a:0f:ab:43:95:b9:3a:44:fc:94:
12:10:34:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:47 2025 by rpki-client