Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/aGKbrC-2TFRuIRSo1mubaaBlJwo.roa
File: aGKbrC-2TFRuIRSo1mubaaBlJwo.roa (raw, json)
Hash identifier: q6Z4oiV5clUVLrYMvRMuNkNUlVbH7YullaT3MBgUCzY=
Subject key identifier: 68:62:9B:AC:2F:B6:4C:54:6E:21:14:A8:D6:6B:9B:69:A0:65:27:0A
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 01957F949B7EA1A5C7A6E7B615F5BDE05B9D
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/aGKbrC-2TFRuIRSo1mubaaBlJwo.roa
Signing time: Mon 10 Mar 2025 10:23:20 +0000
ROA not before: Mon 10 Mar 2025 10:23:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 82.85.16.0/24 maxlen: 24
82.85.18.0/24 maxlen: 24
82.85.24.0/24 maxlen: 24
82.85.27.0/24 maxlen: 24
82.85.28.0/24 maxlen: 24
82.85.61.0/24 maxlen: 24
82.85.154.0/24 maxlen: 24
94.32.64.0/20 maxlen: 24
94.32.80.0/21 maxlen: 24
94.32.96.0/23 maxlen: 24
94.32.100.0/22 maxlen: 24
94.32.102.0/24 maxlen: 24
94.32.104.0/21 maxlen: 24
94.32.115.0/24 maxlen: 24
195.130.248.0/22 maxlen: 24
212.123.79.0/24 maxlen: 24
212.123.82.0/23 maxlen: 24
212.123.84.0/23 maxlen: 24
212.123.93.0/24 maxlen: 24
213.205.0.0/19 maxlen: 24
213.205.32.0/19 maxlen: 24
213.205.32.0/24 maxlen: 24
213.205.33.0/24 maxlen: 24
213.205.34.0/24 maxlen: 24
213.205.36.0/24 maxlen: 24
213.205.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:94:9b:7e:a1:a5:c7:a6:e7:b6:15:f5:bd:e0:5b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Mar 10 10:23:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68629bac2fb64c546e2114a8d66b9b69a065270a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:1a:0c:c7:45:07:42:48:ea:1e:70:d2:11:
a9:c4:ee:9f:ea:33:90:b4:bc:5e:2c:cc:e2:aa:90:
ca:a7:c8:d7:55:1b:85:70:c1:c5:a3:93:73:66:e4:
64:fd:b6:75:67:cf:57:9b:6f:ab:60:8d:c8:fd:7d:
64:b1:1c:c2:f9:a0:75:31:db:ad:aa:a3:a7:83:4a:
ee:5e:5f:3d:6a:5c:66:06:d9:7c:44:5e:e3:56:a5:
79:c8:63:8b:13:31:a4:77:6b:75:9d:7c:a7:50:fe:
74:c9:a8:a8:0e:92:7f:b0:43:96:0b:3e:1a:6d:98:
4b:a2:98:82:93:54:12:ae:fa:34:74:3c:e1:fe:7a:
36:88:3d:28:c0:8c:fc:14:86:8e:fd:66:14:ea:b1:
77:86:f6:c4:26:37:16:51:dd:76:77:89:85:fa:ab:
23:bf:21:5d:8e:69:85:b2:f6:93:05:ff:64:51:c4:
30:2c:c0:74:04:31:7a:07:f7:5d:0b:d3:75:c8:7e:
66:ca:02:df:56:a2:53:4c:d1:76:b1:24:65:8d:d2:
39:dd:da:e5:f9:f7:d8:ef:83:07:02:0e:e5:c6:13:
4a:c1:5c:27:45:5f:dd:7e:d7:1b:07:72:72:17:4d:
1d:c6:b0:27:03:a8:8a:31:0c:50:ba:97:8e:5b:74:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:62:9B:AC:2F:B6:4C:54:6E:21:14:A8:D6:6B:9B:69:A0:65:27:0A
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/aGKbrC-2TFRuIRSo1mubaaBlJwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.85.16.0/24
82.85.18.0/24
82.85.24.0/24
82.85.27.0-82.85.28.255
82.85.61.0/24
82.85.154.0/24
94.32.64.0-94.32.87.255
94.32.96.0/23
94.32.100.0-94.32.111.255
94.32.115.0/24
195.130.248.0/22
212.123.79.0/24
212.123.82.0-212.123.85.255
212.123.93.0/24
213.205.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2b:6a:1d:40:cf:54:6d:fa:db:e1:b3:66:c3:0f:c3:8d:5a:ef:
99:25:6b:36:e9:49:d8:13:fa:59:52:3b:84:da:00:d6:d4:cb:
26:da:50:75:45:4a:4d:23:36:45:af:d1:67:00:be:00:47:02:
14:b7:8e:24:cb:8f:76:80:56:86:71:ac:93:9a:47:14:13:df:
73:94:16:5b:81:b6:82:12:5f:dc:0c:23:e6:31:a2:57:59:ee:
36:da:3e:70:e9:8d:09:fb:cf:4a:0f:b7:e1:f6:f4:fb:24:93:
bb:3f:a1:f5:2e:4f:30:8e:90:56:c1:b0:ce:c9:d7:a3:b7:b9:
19:82:ad:81:20:6f:f1:c6:4d:22:c3:4a:b5:ad:46:03:6e:95:
72:dc:2a:61:b4:67:5d:83:65:0e:a4:b9:40:6e:f0:c4:6a:23:
24:07:5c:39:7f:b3:f3:43:8d:24:9b:85:17:ec:d0:56:33:5d:
e5:15:1a:ec:a1:29:7e:2a:00:d4:6b:bf:97:79:21:65:a2:cc:
81:18:15:a2:d0:09:6a:5e:7a:67:b8:b1:ec:55:bf:e9:ac:29:
ba:4a:d3:ae:af:be:bd:d4:3c:23:52:0c:13:03:20:3c:9f:71:
d4:d0:72:23:87:66:5d:cd:be:6d:27:97:2f:07:1d:a0:78:54:
94:ff:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:55:37 2025 by rpki-client