Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/e9G7IJcvo_7a5dSGCNbeN4tFSxs.roa
File: e9G7IJcvo_7a5dSGCNbeN4tFSxs.roa (raw, json)
Hash identifier: Mu/lJwVbh/1+u4MzgbLDi3M1S5lCY4Q0nFxdiOF7I28=
Subject key identifier: 7B:D1:BB:20:97:2F:A3:FE:DA:E5:D4:86:08:D6:DE:37:8B:45:4B:1B
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 0194CB82AD75B6C242882436284683C39654
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/e9G7IJcvo_7a5dSGCNbeN4tFSxs.roa
Signing time: Mon 03 Feb 2025 11:12:06 +0000
ROA not before: Mon 03 Feb 2025 11:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21350
IP address blocks: 80.244.160.0/21 maxlen: 21
80.244.160.0/24 maxlen: 24
80.244.161.0/24 maxlen: 24
80.244.163.0/24 maxlen: 24
80.244.164.0/24 maxlen: 24
80.244.165.0/24 maxlen: 24
80.244.166.0/24 maxlen: 24
80.244.168.0/24 maxlen: 24
80.244.169.0/24 maxlen: 24
80.244.170.0/24 maxlen: 24
80.244.171.0/24 maxlen: 24
80.244.172.0/23 maxlen: 23
95.175.32.0/20 maxlen: 20
95.175.38.0/24 maxlen: 24
95.175.45.0/24 maxlen: 24
95.175.48.0/24 maxlen: 24
95.175.49.0/24 maxlen: 24
95.175.51.0/24 maxlen: 24
95.175.52.0/22 maxlen: 22
95.175.52.0/24 maxlen: 24
95.175.53.0/24 maxlen: 24
95.175.56.0/21 maxlen: 21
95.175.60.0/24 maxlen: 24
95.175.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:82:ad:75:b6:c2:42:88:24:36:28:46:83:c3:96:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Feb 3 11:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bd1bb20972fa3fedae5d48608d6de378b454b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:96:f4:10:c1:09:10:da:b1:62:b1:ac:fa:
58:93:8a:76:f9:7b:82:56:1c:1a:33:d2:bd:65:e0:
9b:11:dc:17:cf:b9:de:27:93:f8:da:0d:f4:e3:22:
03:ca:48:d3:e7:81:8a:9c:de:71:c5:f9:54:24:ca:
88:b2:42:17:25:07:2e:8c:df:58:93:36:7a:fe:da:
c1:3e:59:9e:83:f7:12:bb:d2:d6:e4:a3:24:bc:eb:
11:7e:5f:fb:9e:8f:dd:eb:c2:30:15:ec:4c:fb:c4:
7c:f6:c2:b6:a5:5b:e4:6a:0d:2e:ed:5e:cc:40:9b:
db:ed:7f:f1:2e:59:62:ad:54:74:cb:74:8e:b6:4c:
ee:db:0a:75:53:ce:b9:63:20:80:2a:59:67:b2:fe:
d6:2f:3a:38:cb:bf:de:5a:c4:f3:0a:17:d2:9b:0e:
b4:3d:f0:56:c4:b5:fb:ce:39:ed:f1:17:53:09:c3:
2f:17:53:b7:57:e3:0a:b0:83:28:55:79:6a:e4:d7:
f7:2f:88:ee:3b:53:af:29:55:f6:1d:8a:30:60:cd:
30:a1:3a:d7:3a:4e:5a:3e:f5:70:f8:34:8f:01:46:
e7:bf:3b:eb:24:cc:b2:46:99:c7:02:22:26:e4:77:
fa:72:34:63:78:27:96:6c:f5:50:99:36:49:75:40:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:BB:20:97:2F:A3:FE:DA:E5:D4:86:08:D6:DE:37:8B:45:4B:1B
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/e9G7IJcvo_7a5dSGCNbeN4tFSxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.160.0-80.244.173.255
95.175.32.0-95.175.49.255
95.175.51.0-95.175.63.255
Signature Algorithm: sha256WithRSAEncryption
63:2d:8c:4d:67:d4:f4:3f:5a:39:bd:95:6d:12:72:95:55:e5:
28:ec:df:c6:01:db:35:e4:7d:39:73:46:b2:fa:38:5e:31:6f:
ad:2f:c9:b8:1e:dd:92:cd:42:5f:d1:f2:3c:d0:cd:68:b5:74:
92:f5:d1:e6:5b:50:e7:fe:e7:06:2b:fe:cc:d4:76:71:23:82:
50:4f:27:08:e4:87:a5:1f:0b:88:c6:bb:d3:b7:10:23:e8:14:
07:4e:ff:a8:9a:49:a3:9f:56:71:e2:8e:ec:de:b7:f0:20:1e:
9d:d5:d4:4b:78:1f:6e:d2:bd:96:39:fa:08:28:9e:a8:88:90:
d3:07:38:a7:9a:24:85:98:77:5b:e2:a0:26:8a:82:53:2b:80:
0a:e5:bb:65:af:22:92:55:00:f7:5c:5b:92:ab:98:84:9c:7a:
e3:6e:13:7a:ec:1d:db:c9:e6:3c:96:64:dd:45:0b:36:fd:0b:
88:a2:6d:43:15:c6:f3:d5:26:88:98:ea:b4:41:27:91:4f:c6:
a6:29:91:d9:89:af:6d:e5:94:e4:f2:2d:bd:ac:51:43:d6:3e:
9d:aa:4c:9b:60:b6:f8:dd:41:4f:c3:90:53:c9:1f:62:85:34:
ad:1b:4d:20:6f:55:f2:a5:5b:da:34:e5:44:90:24:a4:33:67:
99:4f:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:13:03 2025 by rpki-client