Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/DnTRig2ZHULz3p9wZNouYmsC9jo.roa
File: DnTRig2ZHULz3p9wZNouYmsC9jo.roa (raw, json)
Hash identifier: t4VZBdK9Uss3nXT5qelMDtPowMN8UI5/vISGQexu/1w=
Subject key identifier: 0E:74:D1:8A:0D:99:1D:42:F3:DE:9F:70:64:DA:2E:62:6B:02:F6:3A
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 019421444E9B0A6A23F7D54136CAD7F35590
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/DnTRig2ZHULz3p9wZNouYmsC9jo.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55002
IP address blocks: 185.170.88.0/24 maxlen: 24
185.170.90.0/24 maxlen: 24
193.8.190.0/24 maxlen: 24
193.8.191.0/24 maxlen: 24
193.73.208.0/24 maxlen: 24
193.134.94.0/24 maxlen: 24
194.11.164.0/24 maxlen: 24
194.11.166.0/24 maxlen: 24
2001:67c:4f0::/48 maxlen: 48
2a09:5f80::/48 maxlen: 48
2a09:5f80:2::/48 maxlen: 48
2a09:5f80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4e:9b:0a:6a:23:f7:d5:41:36:ca:d7:f3:55:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e74d18a0d991d42f3de9f7064da2e626b02f63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:2c:ff:81:50:08:a0:94:1f:fb:9a:a5:ad:
57:96:c7:dc:60:9f:ee:47:9b:12:a1:7a:38:88:d2:
82:a7:68:66:35:2e:dc:a7:d6:cc:3a:1d:e9:69:1d:
02:76:fc:f9:83:a2:e2:3a:ad:fd:a1:93:a7:7b:6c:
e1:51:b8:a8:cd:bf:41:b5:c9:b3:0c:18:28:c0:20:
62:0f:cc:5b:0c:03:38:1f:b3:69:af:10:88:3e:38:
24:02:21:33:4a:5c:d7:60:f4:b5:40:22:17:a9:b6:
06:5c:f2:c0:39:5d:6f:bd:61:6c:dc:50:a7:52:a2:
bf:df:19:81:e6:56:8a:2b:03:48:47:46:95:4e:28:
70:04:54:1c:89:de:5d:b0:32:d8:4f:00:57:de:cb:
04:b4:74:e6:e7:a5:ed:2f:0e:7c:ea:65:0b:e5:16:
ad:bb:49:59:d7:ee:46:e0:cc:9a:76:11:ee:74:67:
06:fb:e4:c4:e0:8e:cf:c3:b5:cc:9b:8d:f0:50:61:
5b:2e:33:82:ec:7a:e2:d5:87:e4:91:2b:db:82:c5:
f2:89:1f:b8:83:3d:12:51:46:17:20:67:4d:a7:62:
71:ac:b4:3b:a9:e7:6e:61:bf:7a:4d:15:7d:28:b4:
25:2e:05:a0:c1:6e:75:af:63:fc:8c:f1:55:6b:3b:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:74:D1:8A:0D:99:1D:42:F3:DE:9F:70:64:DA:2E:62:6B:02:F6:3A
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/DnTRig2ZHULz3p9wZNouYmsC9jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.88.0/24
185.170.90.0/24
193.8.190.0/23
193.73.208.0/24
193.134.94.0/24
194.11.164.0/24
194.11.166.0/24
IPv6:
2001:67c:4f0::/48
2a09:5f80::/48
2a09:5f80:2::/47
Signature Algorithm: sha256WithRSAEncryption
6d:40:68:6b:d8:a0:19:e9:2f:a9:b5:8b:0b:0b:94:f3:fa:1e:
8e:64:bb:fd:8d:fc:4b:87:e5:fc:00:fc:50:6b:39:d7:3a:9b:
2e:e5:21:50:b2:11:f3:bb:e2:47:6f:ac:b9:97:1f:4d:46:ed:
47:bd:20:d9:6d:5f:11:11:2d:1e:fc:f7:d6:f6:fd:99:f8:15:
cf:b5:c0:8a:08:11:0e:6a:2f:8c:12:7c:62:07:a1:36:e3:c1:
a6:31:d4:f5:79:5f:41:4e:df:f8:27:2c:66:74:c1:e4:01:2c:
4e:95:8f:09:7b:50:82:8a:dc:a0:27:e6:2d:bb:03:b4:99:65:
b9:d1:17:ca:3b:72:5d:9e:78:a2:3d:d4:ff:e7:2b:e2:d4:1a:
45:60:f4:6a:d7:6b:e0:ab:75:58:dc:0c:63:9d:b6:83:e1:55:
06:24:a7:a0:73:65:d9:b2:ab:70:92:00:a9:b6:cc:cd:3f:7f:
0f:b2:b5:2e:4b:19:fc:21:fa:95:95:a8:20:5a:8a:1b:3c:86:
4e:bb:35:b6:da:8a:a6:5d:0a:eb:80:ec:2f:79:d2:02:44:6d:
a6:d6:98:95:3d:ea:a6:23:b1:5f:58:84:44:e4:77:47:d2:5f:
e8:7f:0a:0e:fc:f9:26:e9:be:c3:d8:26:77:46:71:26:b5:3c:
20:62:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:55 2025 by rpki-client