Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hcWCxsNXJ9yg5Hoze1tY7q8fcf0.roa
File: hcWCxsNXJ9yg5Hoze1tY7q8fcf0.roa (raw, json)
Hash identifier: Cm/pymKAKLUiskldZpXb8kvJL0aycJOlWqVALOBQDjg=
Subject key identifier: 85:C5:82:C6:C3:57:27:DC:A0:E4:7A:33:7B:5B:58:EE:AF:1F:71:FD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B54F207EE7FDE54954DCC29E812390
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hcWCxsNXJ9yg5Hoze1tY7q8fcf0.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 79.175.96.0/24 maxlen: 24
109.121.0.0/19 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
188.255.212.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4f:20:7e:e7:fd:e5:49:54:dc:c2:9e:81:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85c582c6c35727dca0e47a337b5b58eeaf1f71fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:15:d3:a5:61:82:26:8a:f3:ee:85:ed:bb:
04:15:0d:ed:60:77:1a:3e:db:dd:9b:95:66:8f:d3:
a0:b7:4f:c1:5f:28:62:5d:e0:be:80:a8:88:a0:81:
b3:bf:ca:09:9e:a7:31:2e:d4:10:42:d1:f4:17:dc:
c0:46:bd:65:08:1d:fb:41:66:61:ab:2e:fe:39:40:
0c:fb:bf:55:a7:2b:26:06:ab:9b:2e:47:5d:37:a0:
08:4c:c3:80:4f:08:67:bd:c1:09:3e:a7:3b:2b:46:
cd:16:18:64:7a:37:26:7d:ea:3d:cf:a7:6a:ce:c8:
ba:77:66:e3:68:79:28:20:d5:64:9f:ac:17:34:e7:
a5:bc:8a:04:b4:b4:cd:79:08:80:c0:c0:a4:8b:d6:
43:b0:56:c5:92:ee:02:e2:f2:b9:d2:ae:2d:2d:99:
7b:7b:ea:ad:0a:8a:50:2d:49:fc:2c:97:b5:98:86:
98:3f:32:4e:51:a3:f5:87:8a:ba:cf:39:4c:f5:4c:
7b:9c:c1:ad:ad:c9:69:88:d2:c6:8e:77:7c:cf:4c:
d1:bc:a7:8c:25:56:dc:10:2f:1c:ac:41:ac:12:8e:
f7:2d:7e:4e:80:4a:90:ea:fb:2c:67:cc:b7:56:2f:
96:c1:78:67:ba:35:d2:7b:a2:46:fd:56:0d:3c:07:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:82:C6:C3:57:27:DC:A0:E4:7A:33:7B:5B:58:EE:AF:1F:71:FD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/hcWCxsNXJ9yg5Hoze1tY7q8fcf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.96.0/24
109.121.0.0/19
109.121.33.0/24
109.121.36.0-109.121.40.255
109.121.42.0/23
109.121.45.0/24
109.121.47.0/24
109.233.184.0/23
178.253.237.0/24
188.255.212.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:88:75:e8:8d:bb:2b:ff:ad:99:a3:30:1d:56:f1:0e:a4:bd:
24:b1:7a:92:ce:30:2b:91:ce:b4:f7:18:ec:0b:e3:26:19:84:
55:e9:66:85:e6:84:87:72:c6:ae:9c:7a:63:62:2e:2c:a3:b0:
34:e1:ec:d6:82:b3:bb:73:94:6b:03:d1:4d:86:f6:1b:ca:01:
93:fd:1a:85:d4:3f:99:4c:3c:4c:65:18:42:ce:ff:b5:4e:4d:
35:29:d7:ba:9d:81:ac:01:8b:f5:c0:ff:f1:cc:51:ac:d4:85:
d9:5f:77:6b:3b:8f:66:14:31:07:7a:18:06:de:61:10:30:fb:
01:7b:ce:84:b3:33:7d:52:bd:74:9f:d8:c9:90:38:75:de:bf:
1f:9e:b9:b6:82:6f:6a:8e:88:28:d6:02:e4:14:a2:16:e5:84:
6b:64:82:97:44:14:6f:53:46:3b:b6:0a:33:cd:fa:ef:9b:c1:
1b:77:b7:7c:ed:a7:ef:2e:c3:7d:03:22:43:9d:46:3d:82:ea:
64:7e:36:fa:30:ac:73:36:b1:cb:90:87:cd:16:d0:a1:58:cf:
f7:b3:a8:41:12:c5:2e:61:6b:c2:f7:b4:c8:68:f2:db:f2:b8:
39:8d:fd:55:12:15:4f:f4:89:e4:2d:7d:8e:c5:01:a0:35:21:
58:46:df:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:28 2025 by rpki-client