Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/x6x3roZjsXMCSRhGZJrdZLdwqto.roa
File: x6x3roZjsXMCSRhGZJrdZLdwqto.roa (raw, json)
Hash identifier: zacGNi1adlsX0enXeUmHCz0iycpxLch6pnIkbbgRmis=
Subject key identifier: C7:AC:77:AE:86:63:B1:73:02:49:18:46:64:9A:DD:64:B7:70:AA:DA
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0194206872DCA17D762CE33F56EB21822C55
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/x6x3roZjsXMCSRhGZJrdZLdwqto.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28964
IP address blocks: 5.172.32.0/24 maxlen: 24
89.23.64.0/24 maxlen: 24
89.23.72.0/23 maxlen: 23
89.23.91.0/24 maxlen: 24
89.23.94.0/23 maxlen: 23
109.111.241.0/24 maxlen: 24
109.111.242.0/24 maxlen: 24
109.111.251.0/24 maxlen: 24
109.111.255.0/24 maxlen: 24
178.254.150.0/24 maxlen: 24
178.254.160.0/23 maxlen: 23
178.254.162.0/24 maxlen: 24
178.254.164.0/24 maxlen: 24
178.254.166.0/24 maxlen: 24
178.254.167.0/24 maxlen: 24
178.254.173.0/24 maxlen: 24
178.254.174.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
178.254.185.0/24 maxlen: 24
185.157.45.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
185.157.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:dc:a1:7d:76:2c:e3:3f:56:eb:21:82:2c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ac77ae8663b17302491846649add64b770aada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:ef:5f:9b:75:76:a4:e3:7d:14:36:51:8d:
0e:4d:57:4e:df:a4:77:13:32:b5:33:5c:af:25:f1:
75:d6:29:82:60:bb:9c:ba:18:2d:7f:90:6f:40:3b:
b8:17:39:8e:12:e2:aa:ea:4b:69:cc:99:ee:8f:be:
81:c8:68:27:9c:29:94:7c:55:d9:88:98:c5:d5:48:
29:54:ef:8b:d8:6b:08:cc:13:50:a8:9e:d3:9a:25:
69:73:c1:5e:e5:33:df:c4:f4:9b:e9:ac:16:7f:4a:
a2:4f:7e:67:b8:50:72:30:38:04:12:23:e8:b8:10:
bb:26:52:58:bc:8d:77:f9:7e:8e:cb:ca:9b:f6:c7:
d8:58:8c:49:6e:14:c3:2c:94:63:b0:b4:7a:47:e6:
4d:0b:f8:c3:43:76:5e:97:40:26:f0:47:96:bf:8a:
31:fa:38:a7:b1:0d:1d:30:93:8d:8f:46:15:47:c0:
d6:90:4e:ee:16:da:0b:a5:d7:1f:a8:bd:31:f6:79:
af:39:59:89:0c:a4:44:7e:da:e0:5a:ca:36:65:7d:
ef:21:95:09:9f:d2:52:ec:17:28:2f:aa:1d:15:6b:
57:83:5a:79:a1:dc:f0:88:51:9d:85:34:58:7c:ad:
09:a0:0b:18:4b:c6:98:f9:d5:74:28:76:00:ac:a7:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:77:AE:86:63:B1:73:02:49:18:46:64:9A:DD:64:B7:70:AA:DA
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/x6x3roZjsXMCSRhGZJrdZLdwqto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.32.0/24
89.23.64.0/24
89.23.72.0/23
89.23.91.0/24
89.23.94.0/23
109.111.241.0-109.111.242.255
109.111.251.0/24
109.111.255.0/24
178.254.150.0/24
178.254.160.0-178.254.162.255
178.254.164.0/24
178.254.166.0/23
178.254.173.0-178.254.174.255
178.254.178.0/24
178.254.185.0/24
185.157.45.0-185.157.47.255
Signature Algorithm: sha256WithRSAEncryption
18:b6:24:e3:67:89:30:66:46:f3:a3:ff:b1:47:66:18:20:88:
b0:81:49:66:52:d3:3f:3a:39:e1:97:d2:ec:f3:48:c7:5c:7b:
74:8c:93:63:df:17:41:c5:e1:03:e5:f7:e4:83:28:d9:0d:65:
7d:88:1e:ee:ee:83:43:1f:e6:ba:28:78:b2:5a:00:ca:15:85:
34:03:0e:6b:80:6e:5c:95:35:f8:3a:1a:27:46:59:ba:2b:76:
03:0b:76:6c:62:7f:de:4e:f7:20:09:ce:73:35:08:0a:ac:1f:
e7:e5:79:bb:45:4d:68:15:f6:19:b5:61:43:e2:89:3e:1f:bd:
99:0f:0f:de:ea:9d:85:e2:2f:00:42:9d:ce:c2:73:3a:bb:cf:
5f:2d:84:c2:f1:ed:81:e5:13:33:9e:6b:f7:e5:8a:63:78:50:
94:29:dc:d1:1b:8f:ff:7b:00:ba:b6:5c:3a:0a:0b:e7:3a:cb:
e4:c0:1c:8e:b6:21:fe:5e:29:24:f1:6c:67:1e:e8:c3:15:3c:
7a:94:a0:03:84:b6:1c:54:5e:9c:08:09:89:5e:4d:cf:5a:5c:
4c:85:f7:cd:d3:f2:b8:b4:11:94:14:25:ba:d9:a3:94:5c:ea:
ed:d2:02:d2:7a:93:ec:40:bf:72:b4:64:cd:e0:c1:43:c4:db:
bc:a5:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:44:10 2025 by rpki-client