Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/lKnLzY94Z9zOTG6_1gzuoDIJ_5Y.roa
File: lKnLzY94Z9zOTG6_1gzuoDIJ_5Y.roa (raw, json)
Hash identifier: veP44H4IXhWwV/CHwiAUB7r/bJ77LhyJozTjkioLQx0=
Subject key identifier: 94:A9:CB:CD:8F:78:67:DC:CE:4C:6E:BF:D6:0C:EE:A0:32:09:FF:96
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 019424B3708F0052048283B786D62C6D7643
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/lKnLzY94Z9zOTG6_1gzuoDIJ_5Y.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35579
IP address blocks: 37.122.220.0/22 maxlen: 24
78.142.66.0/23 maxlen: 23
78.142.80.0/22 maxlen: 24
78.142.85.0/24 maxlen: 24
78.142.86.0/23 maxlen: 23
78.142.88.0/23 maxlen: 23
78.142.90.0/24 maxlen: 24
78.142.91.0/24 maxlen: 24
78.142.118.0/24 maxlen: 24
78.142.119.0/24 maxlen: 24
78.142.120.0/24 maxlen: 24
78.142.121.0/24 maxlen: 24
91.226.156.0/22 maxlen: 24
92.63.213.0/24 maxlen: 24
195.16.239.0/24 maxlen: 24
195.16.240.0/24 maxlen: 24
195.16.244.0/24 maxlen: 24
195.16.248.0/23 maxlen: 24
195.16.250.0/24 maxlen: 24
195.16.252.0/24 maxlen: 24
195.69.104.0/22 maxlen: 24
2a04:5080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:70:8f:00:52:04:82:83:b7:86:d6:2c:6d:76:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94a9cbcd8f7867dcce4c6ebfd60ceea03209ff96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:4c:d7:09:af:59:f2:c3:87:7a:9c:04:1c:
32:06:2c:0b:2a:6f:ed:c1:20:52:92:d8:be:31:35:
a3:e6:df:88:dd:68:7f:b5:d4:2e:49:f1:02:1d:94:
be:cc:2f:68:91:61:12:c3:0e:7b:7b:e4:bd:0c:40:
07:73:5c:0e:e9:05:0f:40:1b:61:5f:a9:36:93:9e:
ef:5c:8a:c8:2e:e0:e5:aa:ba:34:43:8c:01:62:ee:
50:67:fd:d9:e1:9e:a7:74:45:fd:20:5a:5c:fa:1a:
a2:a6:62:65:5e:12:d0:f2:3a:c5:a1:ea:76:1a:1a:
5e:f9:eb:0d:d2:6c:6f:ca:21:76:3e:e1:46:04:d1:
e0:e6:f2:75:62:1c:c5:81:2f:52:08:67:c1:a4:6d:
9b:a2:44:12:09:b7:96:ea:43:85:e4:00:ee:aa:2b:
8c:f5:53:9a:b6:13:30:90:1e:b8:83:45:02:4b:fe:
d3:8d:ef:07:e0:67:22:a7:5b:cf:fd:83:a2:d4:b6:
d4:98:09:81:99:8b:68:0a:a6:e9:40:e1:af:18:1d:
3d:65:9b:d2:f1:c9:2e:6b:e3:e1:46:7d:06:5d:cb:
e3:28:e7:df:cd:fd:3a:84:0f:00:56:56:56:21:0e:
f9:f4:5c:4a:61:28:dc:de:82:50:5b:de:0c:02:5c:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A9:CB:CD:8F:78:67:DC:CE:4C:6E:BF:D6:0C:EE:A0:32:09:FF:96
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/lKnLzY94Z9zOTG6_1gzuoDIJ_5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.220.0/22
78.142.66.0/23
78.142.80.0/22
78.142.85.0-78.142.91.255
78.142.118.0-78.142.121.255
91.226.156.0/22
92.63.213.0/24
195.16.239.0-195.16.240.255
195.16.244.0/24
195.16.248.0-195.16.250.255
195.16.252.0/24
195.69.104.0/22
IPv6:
2a04:5080::/29
Signature Algorithm: sha256WithRSAEncryption
6d:ab:c5:d8:19:97:fe:7c:01:f1:26:a1:ff:2f:6c:25:58:b1:
b3:6b:13:9a:6d:dc:34:58:c5:94:65:c0:27:d6:a2:e6:67:b0:
36:88:6f:b8:f9:2b:7f:2e:f4:93:f2:43:dd:34:c7:1b:27:89:
b5:ba:80:69:9b:f7:86:15:ac:7d:e7:41:12:45:17:1c:88:46:
7e:74:7a:49:44:d6:b3:14:f9:96:40:61:0a:2c:77:75:9a:96:
18:01:64:e3:03:f8:6e:f7:96:42:f1:a5:75:a4:88:bb:12:87:
e7:6a:76:a3:91:33:28:69:1b:66:a3:69:cd:51:35:72:2a:86:
75:64:bb:f4:6b:c2:c5:91:03:8f:71:3f:b5:da:1f:b2:f4:88:
b7:af:04:58:83:c5:7b:51:d6:35:cd:1e:9f:62:7c:77:b6:95:
68:77:ac:80:ce:00:52:1c:f0:2e:a2:46:07:6a:4a:47:b3:80:
6e:e6:fb:29:0c:0b:7c:3e:34:5f:90:89:5a:83:07:ad:78:10:
c3:5b:89:be:77:fa:e8:ab:8c:5f:3f:9e:72:b4:76:43:66:c0:
58:bb:62:06:74:35:6a:22:18:a3:7e:3f:f2:1f:e5:45:43:fb:
53:49:c4:34:37:83:cf:e8:d1:71:37:cf:9c:16:36:5f:f4:a5:
b4:6c:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:48 2025 by rpki-client