Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/lipPE0ZW42V7IEiCduQOBOaBQRM.roa
File: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (raw, json)
Hash identifier: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=
Subject key identifier: 96:2A:4F:13:46:56:E3:65:7B:20:48:82:76:E4:0E:04:E6:81:41:13
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 01941FFA22519B6AA4B965EDCAB96640D39E
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/lipPE0ZW42V7IEiCduQOBOaBQRM.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44306
IP address blocks: 46.151.128.0/21 maxlen: 24
91.199.77.0/24 maxlen: 24
185.151.132.0/24 maxlen: 24
185.151.133.0/24 maxlen: 24
185.151.134.0/24 maxlen: 24
213.186.0.0/19 maxlen: 19
213.186.0.0/20 maxlen: 20
213.186.0.0/24 maxlen: 24
213.186.1.0/24 maxlen: 24
213.186.4.0/23 maxlen: 23
213.186.9.0/24 maxlen: 24
213.186.16.0/23 maxlen: 23
213.186.18.0/24 maxlen: 24
213.186.19.0/24 maxlen: 24
213.186.21.0/24 maxlen: 24
213.186.22.0/23 maxlen: 23
213.186.22.0/24 maxlen: 24
213.186.23.0/24 maxlen: 24
213.186.25.0/24 maxlen: 24
213.186.26.0/24 maxlen: 24
213.186.27.0/24 maxlen: 24
213.186.28.0/22 maxlen: 24
2a02:2608::/32 maxlen: 32
2a02:2608:1000::/48 maxlen: 48
2a02:2608:2000::/48 maxlen: 48
2a02:2608:3000::/48 maxlen: 48
2a02:2608:fffe::/48 maxlen: 48
2a02:2608:fffe:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:22:51:9b:6a:a4:b9:65:ed:ca:b9:66:40:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962a4f134656e3657b20488276e40e04e6814113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:26:f3:b2:41:f5:73:d6:5d:20:37:72:ef:
2c:9a:2e:49:c1:9d:8e:f4:07:67:fd:5c:18:94:01:
92:ab:25:05:af:36:14:b1:d1:85:fb:32:5e:28:03:
26:f2:a2:85:dd:8a:b6:ba:1b:1d:63:e9:cf:47:98:
58:bb:64:9f:85:e2:1a:c5:4b:f5:15:9d:4f:88:0e:
8e:36:39:53:e4:69:85:65:f0:a2:ed:53:65:bb:0f:
b0:37:9b:1b:69:3f:cb:92:10:9d:25:0b:81:1f:51:
26:df:fa:ca:73:24:5d:b0:97:ab:12:c9:f2:5b:6f:
f2:12:ac:a4:a9:59:b9:99:66:27:84:92:46:2c:b6:
4c:30:8b:bd:37:1b:60:ca:4a:57:16:ad:86:3c:2c:
d2:20:02:6c:92:67:66:07:1c:c7:be:dd:63:67:70:
cd:11:b2:9c:ec:47:1f:72:b4:bd:cc:d9:5c:3c:5b:
7d:18:4b:07:d2:0c:41:93:bd:b7:6a:4c:56:d7:34:
c1:2a:a5:fc:34:c0:cb:a5:0b:0a:e6:c1:a6:5e:34:
93:4c:1d:b6:ea:e1:b2:54:f5:04:b5:c2:d3:d7:64:
05:af:64:ad:4a:a7:54:be:90:6f:96:4b:6e:f0:e4:
6e:85:e7:7a:98:fb:a9:72:d5:b3:ad:17:28:e3:11:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:4F:13:46:56:E3:65:7B:20:48:82:76:E4:0E:04:E6:81:41:13
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/lipPE0ZW42V7IEiCduQOBOaBQRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.128.0/21
91.199.77.0/24
185.151.132.0-185.151.134.255
213.186.0.0/19
IPv6:
2a02:2608::/32
Signature Algorithm: sha256WithRSAEncryption
b4:88:a3:0e:7e:78:e7:9c:7f:5b:ed:d7:7c:70:bb:6c:66:68:
03:36:04:86:15:1e:04:a4:34:96:c5:82:db:03:0d:72:22:56:
cc:2a:33:55:51:6f:26:d0:75:ba:0f:2f:3a:c8:a0:b8:dd:a8:
ea:56:62:25:93:8a:b9:5c:9f:74:4e:40:5d:70:09:16:a9:86:
4b:ee:fe:1d:c1:73:0b:33:be:b2:64:b8:fd:8c:26:90:1c:0b:
81:ec:21:31:41:d1:4b:a0:1a:22:77:f3:b0:ee:a3:4d:f7:31:
60:84:27:66:a1:87:e9:ec:98:99:bb:e4:bb:75:9d:59:9c:a7:
96:c9:db:16:55:de:d2:8c:cd:ce:96:75:1f:26:b7:85:40:e5:
e5:b1:42:80:a9:dd:b2:5c:b9:d1:20:19:1b:bc:e0:f7:88:18:
05:56:3f:81:30:20:0b:8c:ea:80:52:55:d8:15:c1:eb:58:c9:
39:c0:47:22:0e:d2:be:2e:85:43:c0:c3:5b:cb:56:8f:00:8f:
88:92:b0:ed:f6:b9:26:9b:32:ea:81:0c:79:22:79:ed:cc:e8:
cd:74:0e:a7:c4:e9:5b:92:1e:68:e5:cd:e6:d5:17:2c:82:08:
16:ff:c6:17:73:f8:09:1f:39:e3:68:d7:2b:36:9f:c3:85:c9:
4f:79:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:36 2025 by rpki-client