Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/ELJxyLmNkAO4LH2akysrOoq_xxw.roa
File: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (raw, json)
Hash identifier: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=
Subject key identifier: 10:B2:71:C8:B9:8D:90:03:B8:2C:7D:9A:93:2B:2B:3A:8A:BF:C7:1C
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 01942143EAFAF3EABBEA02B9A06759EA1FB2
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/ELJxyLmNkAO4LH2akysrOoq_xxw.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44128
IP address blocks: 91.201.52.0/24 maxlen: 24
91.201.53.0/24 maxlen: 24
91.201.54.0/23 maxlen: 23
91.226.80.0/23 maxlen: 23
91.226.82.0/23 maxlen: 23
185.41.160.0/23 maxlen: 23
185.41.162.0/23 maxlen: 23
185.93.108.0/24 maxlen: 24
185.93.109.0/24 maxlen: 24
185.93.110.0/23 maxlen: 23
193.107.236.0/23 maxlen: 23
193.107.238.0/23 maxlen: 23
213.189.216.0/23 maxlen: 23
213.189.218.0/23 maxlen: 23
213.189.220.0/23 maxlen: 23
213.189.222.0/24 maxlen: 24
213.189.223.0/24 maxlen: 24
2a01:5560::/33 maxlen: 33
2a01:5560:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ea:fa:f3:ea:bb:ea:02:b9:a0:67:59:ea:1f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b271c8b98d9003b82c7d9a932b2b3a8abfc71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:d0:52:5a:ab:9f:d2:41:c5:6b:a0:7c:3a:
d1:52:62:37:9b:81:5f:26:06:4a:71:db:a9:94:12:
a7:63:16:45:d0:56:2c:dc:27:fe:3c:db:f2:4d:49:
77:98:47:5b:b8:a3:48:47:10:15:f1:19:42:a5:d8:
02:75:64:2e:ed:fe:1a:82:7d:fd:b1:2a:e9:66:f8:
80:f0:2d:96:8f:7b:7e:6b:c6:bc:c6:e9:93:46:e3:
65:c8:b7:79:35:e1:dc:74:37:2e:cb:e1:52:77:f6:
e6:40:af:bb:cd:40:33:3d:89:20:23:73:53:3b:72:
d6:d3:f6:5d:1c:01:ec:78:87:e7:1e:02:91:97:47:
13:c7:3d:a4:9a:61:2e:c7:4f:4d:6b:db:24:17:5d:
fd:aa:44:f6:a4:ba:d0:40:a8:f2:36:0b:3e:da:28:
45:61:01:e8:4c:03:12:c3:e2:9a:09:f1:10:84:33:
ff:8f:ad:19:7d:d4:7a:39:a1:8d:88:30:ee:5c:06:
3e:6e:df:af:a6:68:f7:bb:d7:8d:9e:e1:52:25:52:
4e:1d:10:bf:8b:a8:cb:fe:c1:d0:db:d3:e8:0b:d3:
6e:81:d8:1e:fd:16:7d:83:66:3d:60:20:08:35:fb:
37:64:2c:13:8e:ce:2c:cd:87:a1:c0:62:e5:68:b1:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B2:71:C8:B9:8D:90:03:B8:2C:7D:9A:93:2B:2B:3A:8A:BF:C7:1C
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/ELJxyLmNkAO4LH2akysrOoq_xxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.52.0/22
91.226.80.0/22
185.41.160.0/22
185.93.108.0/22
193.107.236.0/22
213.189.216.0/21
IPv6:
2a01:5560::/32
Signature Algorithm: sha256WithRSAEncryption
80:2b:45:af:f0:fb:f3:65:0e:43:ec:d0:aa:b4:17:42:3f:d0:
70:94:68:8d:c9:5f:5b:17:6b:17:49:86:10:6b:18:1e:a2:ad:
ee:a0:0c:c6:82:7a:36:f3:4f:fd:40:d6:82:ee:7e:f1:d7:d0:
63:74:63:94:90:19:28:01:79:68:7e:9f:16:c7:b3:1e:44:c7:
f4:c7:03:df:b3:59:b3:00:e7:4c:d4:1f:4f:be:f5:c1:57:ce:
68:2c:1f:c8:04:1a:93:ba:f1:2c:55:72:0e:e7:6f:1a:b6:51:
71:a2:2c:9f:74:c9:f1:0f:02:ef:20:8e:bd:b3:3a:e7:8d:0b:
49:5c:00:bc:98:42:2b:aa:0e:d5:c6:63:58:d4:b9:5c:6d:1b:
77:d1:7c:ac:18:d6:f4:bd:66:70:e3:54:05:c6:1a:7b:58:75:
44:ec:a0:f9:a1:55:40:39:53:b1:8d:14:41:cc:9c:73:f4:3c:
27:79:8a:4d:e0:b2:64:25:53:d9:15:e2:16:87:22:28:3c:cc:
48:45:13:78:b4:c9:a1:c0:56:60:44:1c:de:28:35:76:f3:f6:
ff:15:42:ee:5a:0a:57:b1:80:0e:01:ed:2c:7b:2d:c9:b8:e5:
e3:37:cf:71:2d:3a:43:90:17:15:5e:22:b5:4b:4a:2d:73:17:
ed:af:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:16 2025 by rpki-client