Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/da6BAAfAoBTasYkztEyeFbO3dYM.roa
File: da6BAAfAoBTasYkztEyeFbO3dYM.roa (raw, json)
Hash identifier: svpwmdWuctN25b8D5PcCmhJa0TO40FFmvswQDucJFfQ=
Subject key identifier: 75:AE:81:00:07:C0:A0:14:DA:B1:89:33:B4:4C:9E:15:B3:B7:75:83
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 0194E0588A70F9B63477604A126EBAE29C76
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/da6BAAfAoBTasYkztEyeFbO3dYM.roa
Signing time: Fri 07 Feb 2025 12:18:06 +0000
ROA not before: Fri 07 Feb 2025 12:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25238
IP address blocks: 195.234.204.0/22 maxlen: 22
195.234.204.0/23 maxlen: 23
195.234.204.0/24 maxlen: 24
195.234.205.0/24 maxlen: 24
195.234.206.0/23 maxlen: 23
195.234.206.0/24 maxlen: 24
195.234.207.0/24 maxlen: 24
2001:67c:2620::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:58:8a:70:f9:b6:34:77:60:4a:12:6e:ba:e2:9c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Feb 7 12:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75ae810007c0a014dab18933b44c9e15b3b77583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:af:cb:a8:50:94:cd:55:b6:47:f7:f0:80:
b0:82:94:24:63:84:f8:01:1d:b9:43:a7:bd:8f:e8:
df:de:6f:0e:33:61:1b:a4:49:0d:e4:37:f4:c6:97:
db:6e:ef:89:05:ca:70:78:e1:c1:e3:b8:25:20:22:
6b:21:41:a4:51:4e:c7:4d:e1:10:8c:9f:d7:5c:1c:
26:ee:4d:c0:50:7e:44:a5:76:60:58:4f:36:9c:e4:
45:3b:8d:10:ad:8f:86:2b:65:7d:c3:31:41:f0:e6:
3d:1b:98:d9:de:38:5c:6a:e4:54:90:4f:05:6c:2f:
fe:5c:3d:00:87:f7:3d:37:01:3f:43:82:15:00:26:
a9:21:83:28:fd:67:0e:15:40:fd:1c:fa:c3:d5:9d:
ef:f4:74:d5:72:3d:7e:6d:f8:68:10:35:4c:fc:7c:
d6:c5:b4:08:f8:90:a0:ca:5d:83:d8:80:aa:7f:b9:
ec:d4:76:c9:98:d4:d3:15:12:98:d8:f7:1d:9c:4f:
ab:f1:11:7f:fb:24:fd:16:b6:41:c9:70:06:11:c6:
6b:1f:c6:8c:50:fe:ae:b8:32:bc:a1:7f:e3:a3:c2:
66:2e:4e:5e:52:ae:20:c0:6b:da:9e:f4:15:99:5b:
7b:91:64:33:04:83:25:94:a1:69:d8:6c:d7:0a:d2:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:81:00:07:C0:A0:14:DA:B1:89:33:B4:4C:9E:15:B3:B7:75:83
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/da6BAAfAoBTasYkztEyeFbO3dYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.204.0/22
IPv6:
2001:67c:2620::/48
Signature Algorithm: sha256WithRSAEncryption
66:56:ab:d9:ea:a0:2f:8d:f3:d2:db:7e:11:f4:3d:a5:52:68:
a4:18:f3:45:57:90:4c:b2:91:e4:0f:90:46:d1:1e:c2:11:98:
22:e2:9a:e6:8e:bd:42:e4:1b:01:d0:9c:6a:c4:5c:23:c4:6b:
64:a2:38:d2:2e:c9:15:b9:1c:98:09:e3:93:c7:2d:07:d0:5d:
14:28:a5:fb:e6:18:f5:c9:d5:d3:9a:46:e9:4a:1b:5e:e7:f2:
9e:d1:87:10:db:20:aa:eb:d6:d0:58:f3:9a:cf:6c:27:b8:ef:
ad:de:c6:1d:25:65:a1:08:4f:e8:6f:91:4d:f7:87:02:76:7f:
49:36:30:01:73:d8:95:32:63:2d:df:f2:2d:db:cd:bb:4d:bf:
b4:79:5c:36:c8:2e:60:af:08:10:f8:d8:04:34:62:49:9d:43:
77:9d:76:ea:3e:9c:4c:86:00:49:4f:38:de:4e:98:d2:a7:1d:
75:09:5f:26:07:7f:3d:60:11:2c:44:a0:c0:d7:07:c3:2f:c3:
43:86:8d:76:1b:72:3a:ca:39:5b:a1:c0:61:b7:10:20:e5:4a:
e7:a0:2b:a3:ca:d0:18:b4:dd:59:14:f3:47:7a:ce:12:da:cb:
d2:c9:8e:51:1e:f1:1b:13:ae:68:53:69:db:5f:dc:6b:b8:a3:
ea:65:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:41 2025 by rpki-client