Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/1eTTbIw0aBP5pRGawtpOBnWjTiI.roa
File: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (raw, json)
Hash identifier: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=
Subject key identifier: D5:E4:D3:6C:8C:34:68:13:F9:A5:11:9A:C2:DA:4E:06:75:A3:4E:22
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 0194221FD02D146D58D5DA35BC7814D6EF86
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/1eTTbIw0aBP5pRGawtpOBnWjTiI.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197129
IP address blocks: 178.219.192.0/20 maxlen: 20
178.219.192.0/24 maxlen: 24
178.219.193.0/24 maxlen: 24
178.219.194.0/24 maxlen: 24
178.219.195.0/24 maxlen: 24
178.219.196.0/24 maxlen: 24
178.219.197.0/24 maxlen: 24
178.219.198.0/24 maxlen: 24
178.219.199.0/24 maxlen: 24
178.219.200.0/24 maxlen: 24
178.219.201.0/24 maxlen: 24
178.219.202.0/24 maxlen: 24
178.219.203.0/24 maxlen: 24
178.219.204.0/24 maxlen: 24
178.219.205.0/24 maxlen: 24
178.219.206.0/24 maxlen: 24
178.219.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d0:2d:14:6d:58:d5:da:35:bc:78:14:d6:ef:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5e4d36c8c346813f9a5119ac2da4e0675a34e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:12:7e:e5:7b:86:97:2e:1f:4f:21:99:7d:
9c:fc:c8:12:f7:cd:f5:2a:d7:e8:1b:c7:46:ea:8b:
91:87:a4:e0:96:ac:b5:c4:82:e5:9e:70:05:84:69:
ad:e7:db:87:1b:fd:0a:a2:92:64:55:74:07:26:5a:
10:37:1d:ca:08:da:da:20:61:b9:85:c7:3c:33:8b:
77:5b:77:f2:22:62:f8:6c:78:97:f1:27:30:60:a9:
d0:0b:6a:28:1b:1d:5d:8d:85:88:00:04:05:75:07:
d3:6a:b0:1e:1b:c0:51:f2:bf:8a:e2:31:0e:7d:b9:
7b:cc:14:a1:2c:97:db:43:72:f7:e6:d2:19:d6:3e:
86:9f:10:e1:94:41:80:96:b6:be:f1:a0:54:ff:06:
82:d6:b9:53:26:e6:17:93:8f:64:35:29:c2:44:9f:
41:89:4e:70:99:15:bf:4d:54:a5:92:a6:e8:94:06:
2f:65:b1:59:46:31:b2:3f:e4:80:69:e1:4f:fa:7d:
7b:82:83:af:36:9d:11:4c:4e:3c:36:ab:14:fc:f0:
89:94:f8:0f:fd:53:87:a6:bc:98:4a:68:b9:95:98:
54:57:98:fc:6a:c7:d4:ac:86:0c:47:d2:68:b8:4f:
41:38:1f:d0:eb:6c:0c:ee:db:8e:72:0f:da:24:e0:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:D3:6C:8C:34:68:13:F9:A5:11:9A:C2:DA:4E:06:75:A3:4E:22
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/1eTTbIw0aBP5pRGawtpOBnWjTiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.192.0/20
Signature Algorithm: sha256WithRSAEncryption
87:37:f8:63:08:ce:6e:b4:4c:95:4f:65:90:0c:da:92:26:38:
e5:26:a0:fc:54:0e:61:01:e7:62:64:78:df:9f:d1:80:8e:f3:
6d:0e:4d:69:b0:69:a5:73:dd:68:a7:33:e0:b6:e6:e6:85:6e:
ba:ec:50:e4:30:e4:43:88:43:90:62:70:01:02:3e:99:07:72:
00:27:73:51:1f:65:8a:e3:4a:72:4d:88:06:af:c7:c2:10:0e:
a0:59:dc:ee:76:00:f2:fe:6e:2c:d9:fe:46:6f:f4:9c:6e:a3:
ca:77:fc:e5:1e:0b:45:be:f2:0a:b9:ef:3d:19:cf:88:65:89:
5e:df:9e:35:e5:ec:0d:aa:7b:b4:0e:51:69:c6:28:d3:57:43:
59:cf:f7:89:60:c4:d9:f3:ca:91:1d:49:8c:f7:ce:93:57:71:
15:54:5d:25:6e:d7:ba:9f:70:36:7f:8d:97:2f:f6:2b:a8:15:
58:c4:bb:47:09:e0:f4:df:7c:c9:03:96:32:47:2c:e3:47:22:
d8:16:bf:14:48:bf:7e:78:20:dd:c8:c6:50:dc:09:38:d9:8a:
ea:df:71:d6:26:11:af:7e:89:a5:46:d9:66:b2:a6:a5:3a:9e:
da:4e:91:e8:6b:80:ad:22:26:e6:26:c1:a5:ef:13:e5:1d:9a:
1f:39:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:03 2025 by rpki-client