Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa
File: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (raw, json)
Hash identifier: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=
Subject key identifier: D6:90:F2:CF:95:BF:24:07:ED:E4:53:C1:65:F0:1C:D8:3B:F3:83:97
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B8804F27005DF11F7CF2177086152
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206837
IP address blocks: 46.24.82.0/24 maxlen: 24
46.24.91.0/24 maxlen: 24
46.24.98.0/24 maxlen: 24
46.24.100.0/24 maxlen: 24
46.25.127.0/24 maxlen: 24
46.25.145.0/24 maxlen: 24
46.25.159.0/24 maxlen: 24
46.25.185.0/24 maxlen: 24
77.224.174.0/24 maxlen: 24
77.224.180.0/24 maxlen: 24
77.224.201.0/24 maxlen: 24
77.224.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:88:04:f2:70:05:df:11:f7:cf:21:77:08:61:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d690f2cf95bf2407ede453c165f01cd83bf38397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:c4:50:a2:60:fd:e6:b6:87:d1:05:89:98:
24:a3:2b:5e:8e:ed:7b:35:4c:c4:52:f1:42:57:60:
30:bc:47:cd:ac:fe:68:7d:8e:1f:88:7c:b9:b9:20:
5b:ee:8a:95:49:78:d6:e9:3f:12:4b:3e:2f:2d:5f:
39:18:36:ab:bc:09:ec:7f:85:85:37:e6:9d:1f:77:
cf:cb:a2:25:c0:5a:1b:99:9c:96:f2:f7:61:06:53:
e3:87:b3:eb:e9:30:46:c9:bd:f5:b9:50:91:0e:82:
3d:33:4e:ff:fd:6b:ad:f9:9b:77:97:c2:b7:b6:f8:
ca:58:0e:16:d9:32:2c:94:f6:35:ba:c7:ac:8a:13:
55:6b:b1:9b:8a:de:03:c0:78:1e:90:d5:89:e7:98:
20:12:6f:c2:bd:92:78:a9:72:fd:86:5c:76:51:e6:
f6:d9:34:99:e3:89:13:84:c4:fd:ac:90:18:c2:5f:
8d:c3:0f:87:70:08:b8:56:d6:12:88:a2:91:96:ad:
48:45:c3:ff:3a:06:8b:0c:b3:b0:80:9b:23:81:5c:
d8:3a:46:62:d1:cc:97:2e:a5:c3:11:73:34:63:bd:
69:2f:a9:cd:9c:56:f6:62:fa:f9:da:7e:cd:d2:bb:
da:c7:e1:b4:11:be:50:c5:54:8b:43:94:3f:18:28:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:F2:CF:95:BF:24:07:ED:E4:53:C1:65:F0:1C:D8:3B:F3:83:97
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.24.82.0/24
46.24.91.0/24
46.24.98.0/24
46.24.100.0/24
46.25.127.0/24
46.25.145.0/24
46.25.159.0/24
46.25.185.0/24
77.224.174.0/24
77.224.180.0/24
77.224.201.0/24
77.224.218.0/24
Signature Algorithm: sha256WithRSAEncryption
37:28:7d:f7:03:2d:a9:7d:38:75:ca:4e:f8:e9:83:08:53:17:
99:04:27:0a:f6:23:3f:72:5b:95:e3:79:3a:cf:19:a8:ee:cc:
26:2b:e3:4a:3d:0d:0f:4f:fc:d2:04:76:d7:1e:f3:ff:06:a8:
5c:9b:cf:74:53:bb:d6:76:c6:53:a4:58:a3:88:7b:67:24:4e:
8d:50:f0:3d:2f:a1:68:27:af:be:8b:0b:42:cd:6f:bd:d7:d7:
51:1f:3c:8d:28:58:1c:17:80:ca:8c:c8:ef:f4:34:f5:84:1c:
b7:a8:05:dc:05:5e:76:2d:7c:b9:71:65:1c:e1:e3:f1:86:72:
b3:c1:ba:76:69:c1:c3:d9:24:3c:47:b2:67:c6:97:c3:26:ce:
f3:15:a7:81:2f:f2:64:1e:34:7d:aa:86:bc:6f:4c:66:0c:12:
25:b4:8f:31:3a:c9:9e:ff:73:aa:8f:ba:11:93:f8:ad:ff:b7:
2c:e2:13:47:69:37:2d:7f:65:41:11:03:3e:0c:b9:aa:0a:68:
b1:d6:62:72:38:35:97:5e:6c:36:5e:e9:35:84:0f:63:b6:38:
d3:37:29:c9:23:42:d4:d7:4a:4b:52:14:d9:46:57:09:21:1a:
f3:70:d9:95:2d:f0:21:ba:39:b6:31:1b:8b:d3:a5:0a:15:85:
b0:0f:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:43 2025 by rpki-client