Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/EpSf_xGsxic86z10zbwqzKmasW8.roa
File: EpSf_xGsxic86z10zbwqzKmasW8.roa (raw, json)
Hash identifier: eSnnnz/WKP7V/MJyjND4ey6FBA8RQok1qLjk+ng6oW4=
Subject key identifier: 12:94:9F:FF:11:AC:C6:27:3C:EB:3D:74:CD:BC:2A:CC:A9:9A:B1:6F
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019426D9C987361733DD1308DA3D8CB51A72
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/EpSf_xGsxic86z10zbwqzKmasW8.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 95.142.114.0/24 maxlen: 24
95.142.117.0/24 maxlen: 24
95.142.120.0/24 maxlen: 24
95.142.126.0/24 maxlen: 24
185.54.229.0/24 maxlen: 24
185.54.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c9:87:36:17:33:dd:13:08:da:3d:8c:b5:1a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12949fff11acc6273ceb3d74cdbc2acca99ab16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:87:e7:46:f9:3c:dd:14:d0:97:dd:43:e7:
25:c7:08:48:64:9b:5c:56:0d:58:d7:53:76:f0:82:
e2:ab:3b:a2:d6:1f:b9:c9:ba:9a:4b:30:e4:ee:57:
b3:ab:49:70:2d:58:60:9a:1d:49:4e:be:7e:ec:b8:
32:93:4e:dc:d7:07:5f:ab:53:1b:53:ea:bc:6f:c7:
98:82:d0:cf:28:bd:00:81:ec:ed:31:f0:6f:aa:c9:
eb:86:c3:c9:05:42:3a:98:28:87:cd:df:84:5d:94:
68:43:d7:27:03:83:fc:18:4c:d8:aa:19:15:74:c7:
48:cf:b9:40:6d:0f:2b:dc:82:f4:4d:50:93:fd:40:
dc:31:41:a6:a6:dd:0f:28:2d:b5:2a:9c:1a:4d:ce:
89:15:25:65:a4:3b:e7:b3:58:ce:45:29:4d:a7:be:
a2:47:63:27:6e:5b:9c:15:f3:89:aa:1b:fc:9f:4e:
f7:38:21:2b:ff:ff:52:79:af:95:85:ce:59:b3:4c:
13:c1:86:8e:35:cd:b9:b6:1f:73:b5:18:59:cf:c5:
16:a0:12:ad:a2:65:09:8f:b6:6b:16:f6:d5:38:14:
e2:1b:40:9d:a7:60:b2:5d:62:ae:7b:be:d6:30:24:
f6:71:c2:38:26:8d:cd:93:4b:a6:e8:ba:d6:c2:f9:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:9F:FF:11:AC:C6:27:3C:EB:3D:74:CD:BC:2A:CC:A9:9A:B1:6F
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/EpSf_xGsxic86z10zbwqzKmasW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.114.0/24
95.142.117.0/24
95.142.120.0/24
95.142.126.0/24
185.54.229.0/24
185.54.231.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2d:58:a9:73:bc:b7:13:1a:d7:d8:ca:b4:13:f2:b9:fc:b2:
38:0f:92:7b:f7:f1:db:4d:77:d9:cd:fd:24:c2:de:f0:36:a9:
9b:7d:a9:2c:04:97:df:49:aa:83:84:0c:c6:47:a5:dc:37:7c:
7a:06:71:3f:e9:70:39:2d:18:66:9b:35:6a:e7:64:d8:11:af:
81:19:1e:fb:55:b5:1b:68:ce:79:10:49:76:f0:f4:22:b5:a8:
c2:3c:80:0e:42:3f:54:cc:07:de:e2:78:d1:01:7a:12:48:f1:
7d:ac:88:68:bb:19:38:35:3c:b5:2f:d0:09:4c:0e:17:78:f7:
84:4c:1a:91:08:88:4f:b4:1c:73:08:10:27:df:0c:aa:42:35:
76:ae:e3:ad:c5:38:06:2e:bf:96:2e:eb:63:43:d5:0b:87:77:
72:3f:8d:23:28:31:88:f2:8a:c1:b0:5a:d5:f8:88:52:13:d9:
b9:df:94:d9:50:f7:a9:a1:d2:52:20:b8:76:d8:df:56:a0:42:
eb:73:bd:39:e1:ea:71:bd:88:c2:8c:56:d5:d9:92:e3:bb:9d:
ef:90:60:13:25:8b:40:8f:3c:1e:26:b3:7f:46:a6:01:c5:fb:
3b:34:4f:09:67:b6:c1:2a:c6:35:10:b0:6c:44:ff:5b:02:e5:
1b:a2:0c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:44:04 2025 by rpki-client