Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/94kSZYEi8kZZUVQDGMvt3tM0W5M.roa
File: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (raw, json)
Hash identifier: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=
Subject key identifier: F7:89:12:65:81:22:F2:46:59:51:54:03:18:CB:ED:DE:D3:34:5B:93
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 01941FFA6C181FE9032F94F600846C45CF8B
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/94kSZYEi8kZZUVQDGMvt3tM0W5M.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199118
IP address blocks: 80.241.56.0/21 maxlen: 24
91.198.250.0/24 maxlen: 24
91.223.20.0/24 maxlen: 24
185.97.172.0/22 maxlen: 24
195.10.208.0/24 maxlen: 24
2001:67c:2050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6c:18:1f:e9:03:2f:94:f6:00:84:6c:45:cf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f78912658122f2465951540318cbedded3345b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:3e:c8:f0:bc:47:f3:58:d3:27:7c:b8:10:
dd:b7:53:80:9d:a0:06:20:84:b7:37:db:d7:af:89:
9f:0f:fe:e5:b9:ef:6b:81:ea:b0:74:1a:fa:d1:d9:
ad:3c:13:dc:21:ed:fc:cd:15:3a:81:d3:af:2e:8a:
5c:92:ca:8d:63:79:6b:d1:77:93:e9:13:20:34:6e:
56:65:1b:d7:77:ed:ba:42:17:59:83:80:b2:9b:63:
5a:c8:7e:78:4b:20:6f:da:b1:31:8f:9d:f9:b8:5e:
b4:b6:91:2a:9c:bb:ef:81:09:7d:72:6a:8c:63:c5:
12:7f:05:c1:d5:90:ae:26:45:66:61:78:38:17:3f:
40:a0:8d:54:f4:0f:a2:ef:fc:7e:f8:b3:9c:17:30:
2b:50:9c:18:57:12:6b:8a:99:2c:42:57:fc:f4:93:
e0:b7:b4:11:a1:a3:ee:3b:61:7e:d6:bc:1c:d2:c0:
6f:75:aa:92:a9:1e:42:d9:74:4c:8c:d3:79:b0:c0:
20:25:18:70:f2:20:d6:f0:5b:4c:de:fe:8f:1e:3c:
ba:a6:49:a6:65:d3:d2:5b:95:24:20:44:87:3a:9d:
78:98:b7:51:11:d2:af:9b:38:3e:61:93:7b:8f:d3:
85:f1:6e:af:ac:71:ca:38:ea:d1:57:7f:de:a9:2a:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:12:65:81:22:F2:46:59:51:54:03:18:CB:ED:DE:D3:34:5B:93
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/94kSZYEi8kZZUVQDGMvt3tM0W5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.56.0/21
91.198.250.0/24
91.223.20.0/24
185.97.172.0/22
195.10.208.0/24
IPv6:
2001:67c:2050::/48
Signature Algorithm: sha256WithRSAEncryption
41:6d:72:55:9a:b4:fa:20:31:29:f6:04:23:20:b3:be:df:5e:
19:74:12:48:fb:8d:01:f7:e4:5c:c2:96:84:fe:e5:b6:34:3a:
ee:5a:4b:f4:a0:46:9e:cd:0f:2d:5e:5b:82:8b:9e:c4:c8:46:
e1:7a:4c:99:28:55:fb:86:95:2d:20:c7:d1:52:cc:28:d1:01:
2f:b5:0b:a9:13:ee:d9:64:18:96:e8:f5:09:3f:af:b1:83:7a:
44:01:12:35:34:93:51:7b:13:3b:ac:cc:d1:77:fb:76:f2:ce:
b7:fd:9c:1f:04:3b:ff:0b:1f:6f:b6:89:11:23:36:ac:1c:52:
60:f4:e9:44:d2:cf:b8:d5:fd:1b:0c:d7:6b:67:9c:a5:f7:88:
ac:1c:cb:97:ab:4b:f8:2c:bf:90:e1:55:38:8b:4c:c8:6e:c6:
47:0d:99:ed:2a:81:46:50:58:b0:54:f8:cd:98:13:58:0d:af:
dc:40:9c:79:a1:af:fe:bd:c8:a8:86:16:3a:9d:ae:bd:22:bd:
69:0a:87:82:2a:50:46:1f:79:f1:d6:7c:c8:a6:d6:5d:79:1a:
ca:31:00:eb:c6:c2:02:cc:17:92:c6:b5:09:95:1a:73:28:cc:
88:c9:6d:59:77:d9:bb:fb:d3:15:25:55:75:88:84:63:8f:ab:
b2:86:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:21 2025 by rpki-client