Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/rgegcxxJ3TsTdq27HR0NAjR9oC8.roa
File: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (raw, json)
Hash identifier: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=
Subject key identifier: AE:07:A0:73:1C:49:DD:3B:13:76:AD:BB:1D:1D:0D:02:34:7D:A0:2F
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 01942143AA336C3B4B3D4EA09C3B3FB9039D
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/rgegcxxJ3TsTdq27HR0NAjR9oC8.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34555
IP address blocks: 31.6.72.0/21 maxlen: 21
77.95.176.0/21 maxlen: 21
78.158.32.0/20 maxlen: 20
91.203.72.0/22 maxlen: 22
178.248.32.0/21 maxlen: 21
185.7.148.0/22 maxlen: 22
188.92.232.0/21 maxlen: 21
194.12.0.0/20 maxlen: 20
2a01:5e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:aa:33:6c:3b:4b:3d:4e:a0:9c:3b:3f:b9:03:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae07a0731c49dd3b1376adbb1d1d0d02347da02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:6b:4e:d0:41:eb:1d:06:ed:9b:6c:07:18:
d3:7f:b3:db:9a:6b:7c:be:cd:e5:26:cd:24:54:68:
ae:79:af:ef:15:51:86:db:9d:73:9a:aa:30:f5:8a:
cc:64:d6:4e:86:4f:90:72:0e:9e:4c:63:14:2c:f7:
f7:78:13:50:e0:cb:8c:09:0f:99:af:26:20:12:73:
26:4c:22:57:25:53:bd:58:81:7e:03:62:a4:36:d8:
6b:04:2b:22:b6:87:34:60:3e:35:2c:f8:88:fc:ba:
5d:1c:ee:57:d0:4c:75:9f:12:c2:38:9b:40:5e:0a:
a1:d7:4d:14:77:67:9a:0b:ec:6b:cb:d7:db:f3:19:
2f:1a:71:a9:71:9f:ec:8c:42:3c:f3:78:c8:16:46:
d2:02:72:84:d8:7a:df:10:e3:11:ea:1f:4a:7f:c1:
d2:e0:61:a3:83:59:7e:03:96:10:94:85:3b:bb:60:
02:22:7a:9e:19:dd:3d:91:0a:5b:00:52:a6:e1:16:
a7:8e:73:97:8c:63:4d:ad:e3:59:0b:20:eb:67:5d:
d8:49:9d:84:5e:a4:4e:7b:06:66:1a:ad:b3:98:16:
be:73:40:59:6d:8a:8f:d5:57:b6:77:60:f2:b7:bf:
13:62:95:26:5c:72:1b:1f:22:63:3f:cf:83:7b:07:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:A0:73:1C:49:DD:3B:13:76:AD:BB:1D:1D:0D:02:34:7D:A0:2F
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/rgegcxxJ3TsTdq27HR0NAjR9oC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.72.0/21
77.95.176.0/21
78.158.32.0/20
91.203.72.0/22
178.248.32.0/21
185.7.148.0/22
188.92.232.0/21
194.12.0.0/20
IPv6:
2a01:5e40::/32
Signature Algorithm: sha256WithRSAEncryption
74:3e:95:73:b5:5e:a5:75:dd:40:20:11:00:73:80:70:94:c7:
9d:b5:74:fc:36:9a:95:a4:46:41:ef:3c:2b:a6:01:97:0f:a1:
eb:f0:68:d1:d2:3f:a2:22:ba:10:03:61:6e:0e:59:07:90:e3:
3d:a1:d0:3c:3d:da:ae:9f:79:fe:cd:9d:56:f0:4e:cd:2b:8b:
cb:0f:0d:6d:69:d7:e0:ba:cc:8c:5f:0b:17:bf:35:70:ac:97:
e9:46:1a:f5:e5:e8:ee:81:3e:13:de:53:38:5e:83:24:a2:ea:
46:59:be:2e:17:99:46:4f:79:5b:4f:3c:7b:be:a2:0e:c9:74:
15:81:8b:91:54:e4:af:61:d0:2a:79:88:22:ff:a2:30:29:b0:
f1:b5:88:92:33:9a:7f:f8:75:f4:b9:b5:2a:5c:02:0d:28:9b:
e1:05:9d:c2:e2:f2:80:c4:0b:fa:b0:3e:07:1e:d0:33:d3:1b:
09:a1:e2:8e:50:36:e3:1e:27:5e:80:73:e1:48:49:0a:5f:09:
a1:a6:b2:ee:50:be:ef:5f:89:23:06:cb:1e:1d:f6:84:ff:af:
2b:07:34:16:b4:54:66:8c:7d:f1:15:b8:24:ac:13:4b:23:9a:
4a:8e:99:a4:09:84:1e:f3:07:2f:76:38:9c:4f:30:8d:40:87:
15:75:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:40 2025 by rpki-client