Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/EUX35BVNkJsUjFXuBk75OVm9PCc.roa
File: EUX35BVNkJsUjFXuBk75OVm9PCc.roa (raw, json)
Hash identifier: K2j+jUDEk3zskvvRatSmoYAxHWdNXJq7sEJx+OMyHQQ=
Subject key identifier: 11:45:F7:E4:15:4D:90:9B:14:8C:55:EE:06:4E:F9:39:59:BD:3C:27
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019426D9C84A362E2ED1CA01D52B1B98814D
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/EUX35BVNkJsUjFXuBk75OVm9PCc.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 95.142.113.0/24 maxlen: 24
95.142.116.0/24 maxlen: 24
95.142.119.0/24 maxlen: 24
95.142.122.0/24 maxlen: 24
95.142.123.0/24 maxlen: 24
185.54.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c8:4a:36:2e:2e:d1:ca:01:d5:2b:1b:98:81:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1145f7e4154d909b148c55ee064ef93959bd3c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:38:e8:46:34:d4:7e:ef:24:49:84:2a:b4:5d:
60:5c:bd:fc:e0:0d:1a:ba:d2:12:3f:56:d9:31:d6:
e0:32:4c:4b:66:81:72:b8:e2:36:c8:7d:89:e2:63:
b2:25:4f:fb:5c:1b:90:54:4b:a7:dd:ef:db:96:13:
4c:66:cd:7b:c0:92:0d:ff:f9:44:84:34:fc:1d:fc:
0c:4b:e8:23:80:5b:b3:1b:f6:86:9c:7c:8b:dd:23:
5e:a0:da:46:f6:3b:fc:db:ea:43:71:cb:d7:a4:b7:
40:07:b2:d4:61:48:fe:a8:ea:bc:8c:fd:85:b0:1f:
1b:c1:46:e7:5b:3d:89:8d:5b:d0:a3:b4:ce:2a:b4:
cb:99:a9:13:2f:5d:a7:ad:a7:d5:6f:c8:ee:7c:f0:
48:04:83:b0:ff:77:28:93:75:fa:9d:9c:11:57:c9:
af:b9:a7:aa:d0:fe:0d:6d:3e:0e:f0:76:a6:d0:f2:
ac:19:a3:df:bc:e7:30:b4:91:3b:13:db:cc:b1:9d:
52:61:2d:02:03:71:47:19:4e:7c:47:0c:a6:f7:7c:
1a:b8:3a:22:b1:23:e0:b6:24:93:94:aa:90:d0:8e:
0b:d0:5e:ed:4d:6a:f1:fa:80:75:13:e8:02:d8:a3:
80:f4:f3:7c:60:eb:33:9c:3f:f7:de:a8:8a:9e:73:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:F7:E4:15:4D:90:9B:14:8C:55:EE:06:4E:F9:39:59:BD:3C:27
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/EUX35BVNkJsUjFXuBk75OVm9PCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.113.0/24
95.142.116.0/24
95.142.119.0/24
95.142.122.0/23
185.54.230.0/24
Signature Algorithm: sha256WithRSAEncryption
97:46:26:62:e4:61:30:35:ca:c1:5f:74:4d:6e:fa:82:8c:0c:
c9:62:81:17:52:fe:94:93:56:5f:40:c1:60:7c:a4:20:70:b7:
55:04:f2:02:8a:47:db:d0:6b:e2:4e:5b:f6:66:1d:e4:f4:1d:
8f:c6:44:21:94:46:ff:b0:33:95:12:a2:84:58:76:ca:4f:54:
5c:77:06:ff:0c:77:06:b8:d4:b2:3b:0e:5f:d6:f1:76:a2:eb:
bb:ff:2c:2c:11:a4:fe:a3:62:8f:29:80:5e:72:d8:5a:12:92:
40:a4:07:13:82:01:76:af:72:e6:bd:7b:c9:fa:60:bf:71:87:
ad:70:1a:12:fd:7e:1b:48:e2:01:19:4b:93:94:97:bd:21:63:
82:64:64:fa:0a:d4:b0:62:7d:30:ba:da:0d:fe:cd:97:96:9b:
37:3b:2a:35:4a:6c:cc:46:7d:cf:fa:ae:5c:e6:46:ff:43:12:
ea:12:75:c3:97:8a:93:71:7e:b7:fc:ae:44:bb:1f:93:ff:65:
b7:6e:88:1c:07:f0:f9:4c:96:fe:2f:63:98:2f:d1:32:d8:55:
e0:83:c1:08:d4:20:75:c4:29:47:d6:08:cb:41:ad:76:22:80:
e3:5c:46:5a:a4:05:5b:15:f6:a0:b4:8d:55:7d:65:37:e6:19:
5f:03:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:13:12 2025 by rpki-client