Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/G67im2f6_ZhJBmi9qes0fIWNsWo.roa
File: G67im2f6_ZhJBmi9qes0fIWNsWo.roa (raw, json)
Hash identifier: rcGVW1BtLRG5wqd17uLZEGASDvopWpXiN4N5Gl4c/9Y=
Subject key identifier: 1B:AE:E2:9B:67:FA:FD:98:49:06:68:BD:A9:EB:34:7C:85:8D:B1:6A
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 01942823ECB85AC27702ABB0A5FD5B99C6A3
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/G67im2f6_ZhJBmi9qes0fIWNsWo.roa
Signing time: Thu 02 Jan 2025 17:50:30 +0000
ROA not before: Thu 02 Jan 2025 17:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2872
IP address blocks: 2.58.40.0/24 maxlen: 24
2.58.41.0/24 maxlen: 24
2.58.42.0/24 maxlen: 24
45.115.92.0/24 maxlen: 24
45.115.93.0/24 maxlen: 24
45.115.94.0/24 maxlen: 24
45.115.95.0/24 maxlen: 24
89.43.206.0/24 maxlen: 24
89.43.207.0/24 maxlen: 24
185.123.0.0/22 maxlen: 22
185.123.0.0/24 maxlen: 24
185.123.1.0/24 maxlen: 24
185.123.2.0/24 maxlen: 24
185.123.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ec:b8:5a:c2:77:02:ab:b0:a5:fd:5b:99:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Jan 2 17:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1baee29b67fafd98490668bda9eb347c858db16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:93:fe:ea:d3:ee:10:56:4e:96:97:e9:7c:
ac:dc:03:b5:cf:27:37:f4:ef:64:5e:05:60:15:14:
55:e8:cd:87:fe:36:92:f3:7d:2f:31:c0:58:c3:c7:
59:81:37:f7:df:71:ca:3c:69:bd:2b:8f:09:b4:5a:
aa:d9:93:f7:f7:82:74:6d:d0:7f:da:bc:d6:d7:d2:
fe:28:35:d7:01:3b:e3:80:1c:df:98:d7:71:f3:2b:
e4:b8:12:d6:e5:8e:c4:45:60:b3:31:7d:5d:ef:ac:
bb:ed:0e:83:9f:bc:77:4b:c5:76:6a:54:61:62:bd:
c1:a2:c8:6a:0d:43:ed:16:c0:4e:b3:66:79:68:7b:
1b:e3:b2:86:05:fe:62:c4:63:a1:f2:46:3b:6a:de:
d2:5c:90:b5:e9:c2:6e:0a:e9:55:8e:00:ea:99:2d:
23:a6:1c:7f:ca:e9:a9:87:42:5d:77:ba:73:7f:35:
80:0c:47:ac:87:73:70:63:d5:ae:33:b9:a7:0c:32:
ce:5a:e5:14:04:b3:2e:fd:5b:b6:90:85:ab:b0:84:
23:00:53:1e:36:19:dc:a5:2d:32:c4:56:57:9c:75:
0b:2d:b9:cb:b7:c8:0b:14:6a:68:fd:19:78:20:be:
e1:cc:7b:14:a9:1f:55:d0:b4:9f:55:92:52:e1:45:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:E2:9B:67:FA:FD:98:49:06:68:BD:A9:EB:34:7C:85:8D:B1:6A
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/G67im2f6_ZhJBmi9qes0fIWNsWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.40.0-2.58.42.255
45.115.92.0/22
89.43.206.0/23
185.123.0.0/22
Signature Algorithm: sha256WithRSAEncryption
42:3c:82:82:db:9e:e5:27:8d:73:ac:30:39:b4:10:44:2f:13:
3d:b4:b6:dc:4a:0d:09:00:27:1d:5c:d7:e8:6c:70:61:28:9d:
50:4c:95:e9:d1:e9:ae:40:c6:fa:9f:ef:76:22:89:2f:80:7c:
b3:2c:d1:b6:d9:6a:41:fe:37:10:f3:20:e6:47:02:6a:ca:4c:
2f:d9:f7:c5:6f:3c:7c:47:43:59:ee:dc:c3:c7:37:29:ba:88:
1b:95:23:3e:82:23:c9:23:c2:91:49:bb:d0:ce:8f:1e:8b:f3:
36:ae:d3:aa:90:df:9c:25:0d:25:27:3a:c8:d2:20:f6:90:c4:
7f:85:a4:98:92:b0:52:35:ac:b4:53:a5:61:7b:f9:6b:c1:9a:
7b:4b:9b:29:9f:fb:7a:1b:95:d8:11:e9:ec:ff:c1:7b:d3:6e:
eb:28:08:4c:ed:98:e7:a2:35:64:df:bc:d3:87:d7:8f:25:e9:
ac:35:a5:b4:9d:7f:ad:30:27:d9:12:48:1d:45:5a:9b:1c:eb:
f4:3b:1b:9a:52:4e:ba:db:48:75:79:e7:8d:54:ed:91:82:e2:
64:67:fd:7f:02:71:ae:b3:a9:73:58:c1:2d:27:dd:df:09:5b:
4d:d3:80:34:b3:f7:66:29:82:f5:77:29:68:df:b3:a6:34:04:
32:cd:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:46 2025 by rpki-client