Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E2GrCqaoTJzCoqIA0gKaQ23hdKM.roa
File: E2GrCqaoTJzCoqIA0gKaQ23hdKM.roa (raw, json)
Hash identifier: BTSC/oRN+X/KCdbgnaZ+bE3ow36tGNoPXpAt2f16iM4=
Subject key identifier: 13:61:AB:0A:A6:A8:4C:9C:C2:A2:A2:00:D2:02:9A:43:6D:E1:74:A3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019427469F746A94E956AAAB8780C37C4E96
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E2GrCqaoTJzCoqIA0gKaQ23hdKM.roa
Signing time: Thu 02 Jan 2025 13:48:47 +0000
ROA not before: Thu 02 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60446
IP address blocks: 31.210.37.0/24 maxlen: 24
31.210.38.0/24 maxlen: 24
31.210.39.0/24 maxlen: 24
31.210.40.0/24 maxlen: 24
78.135.75.0/24 maxlen: 24
78.135.76.0/24 maxlen: 24
188.132.224.0/24 maxlen: 24
188.132.226.0/24 maxlen: 24
188.132.230.0/24 maxlen: 24
188.132.239.0/24 maxlen: 24
188.132.241.0/24 maxlen: 24
188.132.242.0/24 maxlen: 24
188.132.243.0/24 maxlen: 24
188.132.250.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:9f:74:6a:94:e9:56:aa:ab:87:80:c3:7c:4e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1361ab0aa6a84c9cc2a2a200d2029a436de174a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:1d:c5:f9:02:58:b2:b1:aa:aa:b6:93:de:
2f:b3:6d:f4:2b:9c:49:b2:b5:9e:02:61:d9:0c:7b:
1b:1f:e7:ff:ab:d8:89:05:76:98:0d:ea:1f:5c:d2:
c1:95:9e:e1:28:cb:b8:75:68:67:13:76:c2:36:d7:
f1:b4:4d:ff:a5:0a:21:33:a7:c0:65:5c:e0:5f:1b:
1e:53:82:0f:3b:11:f3:05:a7:73:72:94:57:91:44:
e8:01:9e:9b:9d:4a:43:18:ed:11:ae:02:79:df:6c:
14:80:2c:af:cd:31:16:cb:0a:92:98:16:38:ee:e9:
05:dd:8e:93:a3:7b:3c:a4:19:74:84:18:4d:77:b5:
0d:2e:f0:85:e9:bf:35:ae:a6:49:0e:e9:f1:3f:89:
d4:e1:29:c8:b2:8b:be:cc:dd:e9:38:7d:94:bd:38:
b0:ed:cf:4d:73:b5:7b:ef:e1:51:98:86:60:f7:53:
15:0a:50:ec:48:6c:b0:03:e7:94:b5:0d:73:3d:ba:
ed:2c:b1:f4:19:0b:e6:d8:17:10:37:2d:ce:a5:ba:
a1:2d:fa:ba:04:16:29:05:41:f0:3a:fd:7b:71:83:
00:49:14:7a:38:0a:b5:84:1d:92:57:fb:56:d5:2b:
78:95:f9:8a:ca:5a:3e:20:c5:1f:63:f9:51:0e:5c:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:AB:0A:A6:A8:4C:9C:C2:A2:A2:00:D2:02:9A:43:6D:E1:74:A3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/E2GrCqaoTJzCoqIA0gKaQ23hdKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.37.0-31.210.40.255
78.135.75.0-78.135.76.255
188.132.224.0/24
188.132.226.0/24
188.132.230.0/24
188.132.239.0/24
188.132.241.0-188.132.243.255
188.132.250.0/23
Signature Algorithm: sha256WithRSAEncryption
70:4d:a9:b9:5e:6a:7f:f5:38:9f:75:2c:4e:fe:17:00:32:1b:
8a:af:7c:f4:a9:7c:df:84:a9:4f:f0:42:6d:2e:8a:25:68:23:
c6:38:fc:1f:70:37:f1:cb:c6:01:65:66:06:17:e4:2d:52:2d:
0d:04:f3:a3:8b:f4:84:ab:ec:37:ac:52:18:f2:6a:a7:9d:f0:
4d:9a:16:7a:b2:03:dd:ae:16:a5:a5:cc:ab:99:1a:6f:28:d4:
e3:a5:29:ad:bb:fd:63:73:a4:20:fc:4a:a4:6a:89:9d:57:ac:
2e:08:e8:58:65:91:5b:6d:82:18:73:6c:8c:e9:0b:95:c6:1f:
3a:5c:99:7e:7a:19:a7:b3:c3:e3:13:f3:d2:3a:c6:04:78:eb:
c9:dc:62:40:86:38:75:1d:54:10:9b:98:1c:bf:63:00:85:91:
dd:5d:16:11:6f:c2:e9:50:82:bb:f3:0a:03:87:37:b4:dd:96:
80:cb:38:60:3c:3e:ef:01:ad:ad:2c:5c:ac:56:87:70:6c:15:
69:2d:55:ef:28:2e:25:73:57:55:67:9a:60:04:1d:ee:5a:14:
c8:1a:4b:8c:80:18:70:15:8d:99:cb:6a:cf:32:c2:c5:c5:cb:
7b:ea:68:ff:52:47:0b:89:b6:a3:03:ae:d7:26:5e:30:c5:61:
ce:fb:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:47:18 2025 by rpki-client