Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DjGkNZQgp7DIHB0qmf95W8dw_cU.roa
File: DjGkNZQgp7DIHB0qmf95W8dw_cU.roa (raw, json)
Hash identifier: XirlaqleKRfJpDXzySwzJGfRZ5n0Gk9/gXly6xoroV0=
Subject key identifier: 0E:31:A4:35:94:20:A7:B0:C8:1C:1D:2A:99:FF:79:5B:C7:70:FD:C5
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827B5D48577D9713E6C78D0E8CD8FE9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DjGkNZQgp7DIHB0qmf95W8dw_cU.roa
Signing time: Thu 02 Jan 2025 17:54:38 +0000
ROA not before: Thu 02 Jan 2025 17:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 79.172.226.0/24 maxlen: 24
79.172.230.0/23 maxlen: 23
87.229.20.0/23 maxlen: 23
87.229.40.0/24 maxlen: 24
87.229.51.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
95.138.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:b5:d4:85:77:d9:71:3e:6c:78:d0:e8:cd:8f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e31a4359420a7b0c81c1d2a99ff795bc770fdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:ae:34:ab:d0:be:0e:9a:a2:9f:cb:ac:7c:
ac:ca:5d:16:94:6d:60:0d:7a:5a:37:35:f4:20:b8:
8e:f6:ed:bb:ed:2d:fc:49:1b:d3:4b:82:29:44:ed:
e7:ae:4c:f2:32:05:b1:22:d3:89:6a:55:27:30:f8:
62:c3:44:6a:31:e3:d5:d6:c7:54:87:25:28:63:d9:
09:e3:27:e0:48:b6:eb:bd:4d:05:12:b3:16:20:01:
46:14:17:8f:67:89:61:cc:13:5f:6d:a1:45:af:40:
08:d9:82:9f:f5:d2:04:41:8b:0b:b7:de:35:d1:bb:
0f:fe:1c:cf:80:84:d6:5d:b6:56:df:ec:c0:21:c3:
f3:a5:60:46:39:ae:de:6a:5e:98:31:5b:b8:97:a7:
5a:f6:2b:3f:11:a8:36:21:55:31:49:47:0b:3f:a7:
e1:ce:84:d9:64:9f:06:d7:eb:f0:60:4c:df:80:cd:
ba:3e:bf:e7:80:e4:91:30:22:14:03:2e:46:b1:80:
6b:83:84:c1:77:44:87:34:d7:8c:06:61:9c:72:88:
72:6c:d6:d5:ed:14:93:f2:ca:91:f0:66:15:2b:5c:
65:80:c1:16:0b:75:4e:ea:67:9a:48:8a:4e:a9:74:
54:20:6a:0d:e8:0e:25:2f:0f:a1:10:76:39:f9:ae:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:31:A4:35:94:20:A7:B0:C8:1C:1D:2A:99:FF:79:5B:C7:70:FD:C5
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DjGkNZQgp7DIHB0qmf95W8dw_cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.226.0/24
79.172.230.0/23
87.229.20.0/23
87.229.40.0/24
87.229.51.0/24
87.229.56.0/24
95.138.198.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5f:0a:9c:ac:b1:90:b8:fe:c6:49:11:cb:8c:f3:6b:83:92:
4b:87:5b:28:45:46:bd:e4:fa:93:24:31:74:e3:a5:15:9a:4d:
bf:cd:16:ee:46:a8:c2:e1:33:cb:63:61:f6:5e:a8:e8:5d:70:
f2:f7:2f:94:5c:7f:29:05:c6:a0:74:2b:4c:50:e6:7c:5e:36:
a4:3f:79:f8:70:4d:02:2c:49:24:30:65:28:58:da:36:eb:89:
4a:ac:ac:06:67:d3:12:68:6f:af:00:15:b0:0a:99:d6:61:1d:
74:5e:ff:47:46:98:f8:63:0a:5c:97:81:d8:98:4a:6b:03:c7:
99:3f:21:53:60:7e:c8:1b:8b:fe:73:f0:73:78:28:23:da:48:
27:dc:fd:8a:97:92:af:53:11:51:3f:33:f0:38:23:57:8a:58:
ae:11:20:e8:ad:7b:7e:35:2f:b5:2e:b3:b4:df:0b:90:d6:8d:
75:5c:db:97:01:ea:c0:77:b9:a0:7b:bb:8b:3f:2a:a9:78:12:
95:7d:61:27:40:8a:74:fb:99:a1:c9:ac:34:eb:1d:07:2a:fe:
e9:6a:41:41:09:65:1c:4c:c3:5c:57:1f:cc:8d:74:cf:5e:3b:
c5:dc:a9:07:f7:32:9b:3a:fa:16:c1:bf:49:59:58:3b:ae:0e:
70:2f:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:12:15 2025 by rpki-client