Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/_R70hvmCDErcQolme5Vd42Vi6c8.roa
File: _R70hvmCDErcQolme5Vd42Vi6c8.roa (raw, json)
Hash identifier: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=
Subject key identifier: FD:1E:F4:86:F9:82:0C:4A:DC:42:89:66:7B:95:5D:E3:65:62:E9:CF
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 0194DAAA47AFC1C07F06D1ED1737EFB3C37E
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/_R70hvmCDErcQolme5Vd42Vi6c8.roa
Signing time: Thu 06 Feb 2025 09:49:40 +0000
ROA not before: Thu 06 Feb 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209984
IP address blocks: 89.40.238.0/24 maxlen: 24
89.43.72.0/24 maxlen: 24
89.43.198.0/24 maxlen: 24
89.44.145.0/24 maxlen: 24
185.249.232.0/24 maxlen: 24
185.253.145.0/24 maxlen: 24
185.253.146.0/24 maxlen: 24
193.39.95.0/24 maxlen: 24
194.15.219.0/24 maxlen: 24
194.15.232.0/24 maxlen: 24
194.15.236.0/24 maxlen: 24
194.26.1.0/24 maxlen: 24
2a06:ce00::/29 maxlen: 29
2a0c:1380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:aa:47:af:c1:c0:7f:06:d1:ed:17:37:ef:b3:c3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Feb 6 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd1ef486f9820c4adc4289667b955de36562e9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:00:cf:8c:bb:f2:52:58:fc:8e:13:0f:b0:
2a:b1:31:f7:7a:40:44:d1:5e:45:d7:35:2f:d3:4a:
4a:a5:5b:b1:49:80:e9:61:63:ab:4f:43:00:f5:69:
65:19:bb:02:da:96:1c:b6:ed:a3:d0:02:70:04:4f:
fd:bb:c6:c2:4d:84:41:2a:21:a4:2b:ed:fb:ea:2e:
b9:ef:d8:40:94:22:26:00:b2:16:e8:5f:03:b7:92:
90:eb:7c:f7:ad:6f:6c:86:57:0f:ce:0f:aa:d3:c5:
71:0c:82:d7:45:1e:e9:5d:8e:1b:cc:62:7e:45:a5:
d9:42:9a:bd:2c:da:ac:d6:d4:e2:07:bf:b1:e8:e6:
28:8d:0a:a8:8f:b9:2c:02:f5:19:2c:26:75:db:23:
df:31:70:ff:a0:fc:76:5c:7e:05:f7:31:31:09:c4:
83:59:3a:07:84:38:74:ca:a5:f8:38:1c:17:47:70:
e0:1e:ee:7f:db:16:e8:ab:12:99:c0:16:0a:c5:61:
07:a9:da:01:e5:43:69:8f:c9:7f:45:d9:53:f0:5f:
66:5d:bc:de:f1:c8:18:5b:3f:a4:a0:66:d6:9b:0a:
ca:f2:26:c3:c1:69:dc:3f:f6:4c:8b:ad:bd:aa:32:
21:15:3d:fa:4c:c9:5f:19:d1:8d:5b:15:5d:ec:76:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1E:F4:86:F9:82:0C:4A:DC:42:89:66:7B:95:5D:E3:65:62:E9:CF
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/_R70hvmCDErcQolme5Vd42Vi6c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.238.0/24
89.43.72.0/24
89.43.198.0/24
89.44.145.0/24
185.249.232.0/24
185.253.145.0-185.253.146.255
193.39.95.0/24
194.15.219.0/24
194.15.232.0/24
194.15.236.0/24
194.26.1.0/24
IPv6:
2a06:ce00::/29
2a0c:1380::/29
Signature Algorithm: sha256WithRSAEncryption
85:7e:79:3c:43:0c:e3:a0:2e:20:42:1e:8b:2d:fe:67:c1:49:
25:64:8c:65:75:84:97:f9:7c:4f:62:f6:69:93:f5:ec:32:de:
75:d5:ce:88:23:04:52:a4:d3:15:ee:32:a2:8e:5f:60:7f:33:
79:ff:98:94:10:23:9d:78:71:71:30:39:fc:d3:06:06:ec:bb:
2d:a8:e0:2f:d6:7a:f4:4e:22:eb:58:bb:69:ef:bc:c8:ac:41:
ca:1d:db:a2:bd:8f:a6:f3:64:a3:b9:27:52:0a:03:c5:27:60:
97:6c:36:54:e7:31:78:d5:b4:cd:18:51:07:03:19:ae:ea:83:
87:ea:a1:e6:9e:30:eb:05:fa:ce:43:87:8e:fa:2d:c6:3e:a9:
30:3c:c7:ca:6b:21:03:8d:10:ef:50:58:ac:f2:f6:c0:5a:80:
42:03:fe:54:ee:71:b1:72:d8:12:b0:b5:af:47:8c:54:69:23:
f4:ef:d2:d1:1c:bb:f9:d6:70:c0:55:19:af:2f:de:0e:42:50:
34:6a:8b:f2:38:4f:2c:3e:e3:99:5b:e1:10:e1:ee:81:5d:c2:
f2:25:bc:aa:bc:da:68:db:75:ec:3e:bc:33:42:e5:94:53:34:
8a:cc:c2:2b:7c:68:a4:26:f7:15:76:78:dc:7e:57:b3:ec:07:
37:df:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:59:18 2025 by rpki-client