Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/Ej-pXn-0Jn0sG8zUigcYulAtX6A.roa
File: Ej-pXn-0Jn0sG8zUigcYulAtX6A.roa (raw, json)
Hash identifier: RwfcwRXpnx31U4+i4QeLKY1jHwhSpDJgw+RTcxZ9RmQ=
Subject key identifier: 12:3F:A9:5E:7F:B4:26:7D:2C:1B:CC:D4:8A:07:18:BA:50:2D:5F:A0
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 0194258F5BEDC83D1984ED6FADA5B9D5DF4A
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/Ej-pXn-0Jn0sG8zUigcYulAtX6A.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52023
IP address blocks: 37.143.162.0/24 maxlen: 24
37.143.163.0/24 maxlen: 24
37.143.164.0/24 maxlen: 24
37.143.165.0/24 maxlen: 24
37.143.166.0/24 maxlen: 24
37.143.167.0/24 maxlen: 24
37.143.170.0/24 maxlen: 24
37.143.171.0/24 maxlen: 24
37.143.172.0/24 maxlen: 24
37.143.173.0/24 maxlen: 24
193.32.141.0/24 maxlen: 24
193.32.142.0/23 maxlen: 23
2a03:8f84::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5b:ed:c8:3d:19:84:ed:6f:ad:a5:b9:d5:df:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=123fa95e7fb4267d2c1bccd48a0718ba502d5fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:8c:04:32:a6:e5:1f:be:5a:b5:8a:2f:97:
f5:0f:ed:49:7e:35:d7:47:79:1b:1e:04:81:29:65:
df:e4:6a:cd:3f:32:a1:da:3d:8c:f0:39:f4:f7:bd:
fc:27:28:63:d2:9d:49:b8:25:41:c9:60:13:fb:7c:
c8:65:c0:cd:fc:1b:38:8e:fc:1c:39:e0:a3:cb:f8:
28:84:1b:5b:95:3a:5a:44:b8:aa:b0:95:15:7c:d3:
cc:cf:a1:38:be:78:9b:e1:f1:5c:db:33:55:6a:ba:
da:e6:c5:e3:ad:95:91:5d:48:a1:56:3d:71:ed:61:
5d:82:07:1a:38:53:af:c0:41:7c:09:77:cc:7b:8c:
bb:f2:cf:c8:3f:8a:3f:8f:8e:0a:8b:02:e6:d7:90:
88:27:89:89:a2:7b:f4:14:c8:6c:57:74:6d:c9:04:
a2:eb:6a:db:9b:ab:6c:3e:73:3c:1b:8d:54:0b:00:
19:11:78:1a:69:31:63:79:ff:58:b3:a1:dd:7b:d3:
44:01:79:b3:6b:ce:e5:3d:8b:21:c5:5d:cc:65:2e:
ca:2f:b5:fe:16:42:bb:80:24:6b:2e:db:f5:cf:33:
5e:e8:94:84:4a:bf:c4:c3:ed:75:ce:72:b7:83:2f:
59:28:3a:2e:15:50:58:59:82:f2:3e:11:2b:3e:b7:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:A9:5E:7F:B4:26:7D:2C:1B:CC:D4:8A:07:18:BA:50:2D:5F:A0
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/Ej-pXn-0Jn0sG8zUigcYulAtX6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.162.0-37.143.167.255
37.143.170.0-37.143.173.255
193.32.141.0-193.32.143.255
IPv6:
2a03:8f84::/32
Signature Algorithm: sha256WithRSAEncryption
2a:4e:09:6f:d6:17:4b:ac:97:fc:b8:32:b4:33:5d:3a:8f:e6:
17:3c:95:90:68:28:a9:ea:1d:18:74:d2:bb:ec:cc:8f:5f:26:
ad:7b:f7:58:e0:83:77:f3:3f:64:2e:15:6d:fa:f6:06:01:3d:
59:69:82:23:9e:d3:01:76:46:a0:e8:89:5d:fc:d0:12:4a:67:
56:04:35:c8:49:e6:97:54:24:36:9b:ce:71:02:27:d2:4b:b3:
7c:30:41:4a:6b:dd:3b:8f:34:c1:df:07:5a:6b:94:3a:40:00:
14:62:8e:99:bd:55:38:e7:c4:90:05:78:92:14:b6:13:a5:5e:
ee:75:1d:70:12:c6:a3:30:03:44:54:c9:45:a0:6b:6f:6d:d4:
81:4d:07:6b:5f:a6:4f:56:b4:69:06:a3:f3:6e:1f:d6:3e:ad:
59:09:6a:8b:ce:4e:6c:3b:f8:30:a0:72:51:c7:a8:06:73:39:
30:c1:71:8a:1d:b3:82:22:70:56:d6:08:ca:da:bb:2c:18:52:
8d:73:bc:54:08:36:bd:1f:36:ba:0a:99:2e:06:7d:33:52:41:
eb:d8:60:8e:55:df:4e:1a:6d:6c:55:aa:a7:d1:f0:6d:b4:d0:
d3:7e:62:ec:11:1d:ee:e0:88:f4:ad:09:0f:5e:5a:c5:8e:53:
b7:1f:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:31:37 2025 by rpki-client