Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7Faq0zePkBZuO_C0WOkycepFjpc.roa
File: 7Faq0zePkBZuO_C0WOkycepFjpc.roa (raw, json)
Hash identifier: a+Cb4RggiDeAr7Egu5HSD0OTK4+4eHJXr3k92kT+Pic=
Subject key identifier: EC:56:AA:D3:37:8F:90:16:6E:3B:F0:B4:58:E9:32:71:EA:45:8E:97
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 01941FFA5B18B22095529A761E85938E577A
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7Faq0zePkBZuO_C0WOkycepFjpc.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 86.117.18.0/23 maxlen: 23
86.117.18.0/24 maxlen: 24
86.117.19.0/24 maxlen: 24
86.117.47.0/24 maxlen: 24
86.117.140.0/23 maxlen: 23
86.117.140.0/24 maxlen: 24
86.117.141.0/24 maxlen: 24
160.61.168.0/23 maxlen: 23
160.61.168.0/24 maxlen: 24
160.61.169.0/24 maxlen: 24
160.61.170.0/23 maxlen: 23
160.61.170.0/24 maxlen: 24
160.61.171.0/24 maxlen: 24
160.61.208.0/24 maxlen: 24
160.62.0.0/23 maxlen: 23
160.62.0.0/24 maxlen: 24
160.62.1.0/24 maxlen: 24
160.62.2.0/24 maxlen: 24
160.62.3.0/24 maxlen: 24
160.62.4.0/24 maxlen: 24
160.62.5.0/24 maxlen: 24
160.62.6.0/24 maxlen: 24
160.62.7.0/24 maxlen: 24
160.62.9.0/24 maxlen: 24
160.62.12.0/24 maxlen: 24
160.62.13.0/24 maxlen: 24
160.62.14.0/24 maxlen: 24
160.62.15.0/24 maxlen: 24
160.62.21.0/24 maxlen: 24
160.62.22.0/24 maxlen: 24
160.62.23.0/24 maxlen: 24
160.62.140.0/23 maxlen: 23
160.62.140.0/24 maxlen: 24
160.62.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5b:18:b2:20:95:52:9a:76:1e:85:93:8e:57:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec56aad3378f90166e3bf0b458e93271ea458e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:88:4c:d5:5e:43:6c:e8:62:91:5f:10:b6:
de:1f:96:02:d6:b0:b5:c5:84:b7:20:06:89:c5:fb:
d1:2f:2f:99:e9:58:22:97:ac:1b:f1:28:d7:bb:7c:
50:92:d9:e0:1a:10:c3:9d:fc:83:33:0f:fe:d5:24:
d2:b2:e5:d8:54:61:f6:02:1e:7f:01:6f:b3:a2:fa:
92:7c:ed:14:fd:0c:88:6c:08:cd:1c:7d:b5:1f:ef:
83:91:c5:bc:e5:5e:01:a4:e9:f3:27:fd:79:88:23:
66:49:1f:8c:51:e6:f6:8e:e8:c3:28:08:dc:36:38:
4c:26:ad:aa:d8:70:85:d9:6b:c1:7c:21:0d:9f:89:
79:63:f5:af:6f:75:3c:4f:96:63:cc:82:cc:c8:32:
b4:0f:f9:a3:f0:43:06:71:44:72:6a:39:06:3b:9c:
46:1c:ce:a2:1a:00:20:0a:09:27:1d:91:ae:6f:db:
b5:3b:f5:32:b0:cf:b6:77:fa:c6:75:64:aa:38:1a:
f4:fd:ee:9f:55:dc:9b:35:6c:3f:bf:48:ba:86:b6:
dc:d4:3c:57:b7:32:be:88:36:89:93:81:3c:72:c8:
65:03:72:c4:bf:f3:23:bb:f8:39:73:26:e7:2b:83:
57:5c:87:a2:58:5c:79:20:f4:00:fd:c1:61:eb:ca:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:AA:D3:37:8F:90:16:6E:3B:F0:B4:58:E9:32:71:EA:45:8E:97
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7Faq0zePkBZuO_C0WOkycepFjpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.117.18.0/23
86.117.47.0/24
86.117.140.0/23
160.61.168.0/22
160.61.208.0/24
160.62.0.0/21
160.62.9.0/24
160.62.12.0/22
160.62.21.0-160.62.23.255
160.62.140.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:3e:ef:71:23:41:ce:76:10:38:ce:f3:69:d0:8e:37:08:0d:
6a:1d:4a:5e:8b:3e:1a:23:50:16:9d:24:9d:82:30:6d:0a:44:
63:89:39:a4:47:96:f8:75:f4:d0:f8:ee:31:81:fa:82:eb:c0:
98:92:58:e6:54:a4:9d:e7:89:03:ee:e4:9d:b1:78:f1:7d:20:
b0:34:ba:b5:c8:42:15:9f:98:47:f5:a7:db:21:f9:f4:52:b9:
c8:ea:f8:48:2d:ac:89:70:42:f0:51:b4:33:39:16:0f:be:38:
58:57:9c:b9:31:6c:de:09:76:b9:23:7b:5c:1e:50:2e:72:f7:
cd:51:1d:c8:d2:0e:aa:64:d7:f5:b4:4f:a5:a0:45:d1:6d:8f:
21:96:96:04:34:fa:f3:dc:33:18:5f:70:66:a8:1b:32:ba:4d:
cf:5c:ef:81:a6:d8:e0:1f:b6:f1:4b:cf:f5:0b:73:9f:49:a6:
ab:7e:e2:14:eb:e5:44:9c:81:7f:a4:9b:2e:e2:a9:e6:ab:d1:
76:37:04:7b:06:23:d0:37:44:3f:b1:11:3b:bd:0e:0c:c8:28:
df:d3:73:75:68:cd:cf:e2:17:f2:45:56:44:96:03:87:07:10:
50:c9:89:a8:71:94:bc:a1:01:58:d8:1c:d1:45:cb:08:1c:d5:
ee:58:6b:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:17:33 2025 by rpki-client