Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LDJGMXk_ae_j9HPJTW9eggK9Ey8.roa
File: LDJGMXk_ae_j9HPJTW9eggK9Ey8.roa (raw, json)
Hash identifier: zsh5NQpIRboQF5WW3F7deaq7r3vhFsdk1TEiJQqCixw=
Subject key identifier: 2C:32:46:31:79:3F:69:EF:E3:F4:73:C9:4D:6F:5E:82:02:BD:13:2F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827BE60C4C94EDBD50F4FE8F06663D7
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LDJGMXk_ae_j9HPJTW9eggK9Ey8.roa
Signing time: Thu 02 Jan 2025 17:54:40 +0000
ROA not before: Thu 02 Jan 2025 17:54:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47159
IP address blocks: 79.172.229.0/24 maxlen: 24
79.172.244.0/22 maxlen: 22
84.21.12.0/23 maxlen: 23
87.229.20.0/23 maxlen: 23
87.229.60.0/22 maxlen: 22
87.229.86.0/23 maxlen: 23
87.229.88.0/22 maxlen: 22
87.229.117.0/24 maxlen: 24
87.229.122.0/23 maxlen: 23
95.138.197.0/24 maxlen: 24
95.138.198.0/24 maxlen: 24
95.138.199.0/24 maxlen: 24
213.181.192.0/22 maxlen: 22
213.181.208.0/23 maxlen: 23
213.181.213.0/24 maxlen: 24
213.181.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:be:60:c4:c9:4e:db:d5:0f:4f:e8:f0:66:63:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c324631793f69efe3f473c94d6f5e8202bd132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fb:4d:8a:2c:4d:2e:1c:9a:61:af:97:7c:09:
14:4a:1d:61:84:cc:a3:d5:3d:1c:a0:8f:09:ca:ef:
66:92:46:ec:98:8f:61:55:c8:af:59:62:e4:46:d7:
fb:74:d9:5c:6e:77:53:ae:95:11:c4:db:dd:10:06:
14:74:89:2f:cf:ae:d2:e5:0a:7f:5e:0a:77:7e:bb:
be:6f:6e:50:84:4e:1d:4d:35:b0:8d:63:c9:e9:6f:
4f:ef:59:de:de:5e:5e:96:bf:21:d6:8a:71:d6:79:
3b:db:27:2b:94:c0:47:fc:46:02:0a:62:a3:0c:43:
bc:f8:00:cf:01:3b:cd:af:6c:1d:1b:a1:ae:e8:ba:
2b:2f:1b:90:4a:71:36:08:58:fc:0d:e1:bd:74:60:
b9:34:74:1d:f5:19:c3:89:b3:15:d6:b5:53:e2:36:
4c:f0:99:be:e7:ef:33:ec:44:9b:70:33:63:0a:bb:
f9:e2:1c:8c:ee:ef:59:b3:0b:10:2a:5e:89:de:34:
f2:53:b9:4e:c9:fd:ac:1b:b2:8a:7a:bf:3e:db:09:
3e:08:f0:ac:54:a3:d3:18:c0:17:23:d9:a8:e8:67:
a4:da:24:4b:74:32:27:3f:1a:5b:bc:34:4b:84:b6:
52:16:ff:3e:dc:10:d6:43:5f:1c:f8:e2:d8:d4:d1:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:32:46:31:79:3F:69:EF:E3:F4:73:C9:4D:6F:5E:82:02:BD:13:2F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/LDJGMXk_ae_j9HPJTW9eggK9Ey8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.229.0/24
79.172.244.0/22
84.21.12.0/23
87.229.20.0/23
87.229.60.0/22
87.229.86.0-87.229.91.255
87.229.117.0/24
87.229.122.0/23
95.138.197.0-95.138.199.255
213.181.192.0/22
213.181.208.0/23
213.181.213.0-213.181.215.255
Signature Algorithm: sha256WithRSAEncryption
36:0d:f4:81:e1:a5:08:3f:57:01:c6:e8:f2:27:cc:87:25:8d:
76:3b:dd:c9:1c:06:61:e6:34:5c:e2:74:67:9c:af:f5:ca:9e:
28:24:87:fd:aa:9f:7b:04:f3:fe:d4:3d:95:d0:59:62:c3:38:
f5:b1:7b:46:2e:17:40:63:f8:6e:d0:a1:71:3c:c7:95:a5:d8:
50:44:c0:26:b0:85:73:71:f0:08:bb:ba:14:66:92:13:e5:5c:
d5:5b:87:b3:7f:9e:e3:a9:e3:81:f0:f1:b9:9f:3c:7b:66:2f:
30:63:a2:ad:15:19:5d:87:95:9f:a5:42:4e:f2:3b:a8:4c:ac:
5c:bb:4e:35:46:4e:c9:dd:51:50:54:60:29:9c:19:40:87:ec:
2c:3a:4f:29:c9:a5:dd:22:ea:05:27:00:c0:af:93:c9:36:aa:
bf:06:cb:b7:07:9f:1f:fc:b5:51:eb:4e:33:84:da:15:a3:5a:
60:6d:98:74:9a:97:19:2e:4a:4b:e4:93:b1:41:86:6e:e1:d3:
f6:78:cb:fb:60:a7:49:dc:30:c4:e1:56:52:3b:68:62:ba:78:
6b:37:22:86:5a:f6:74:f7:40:1a:4c:dd:31:13:08:2e:cd:1d:
99:4b:07:02:e2:06:80:c9:e0:89:a6:79:15:e4:c2:50:e5:b1:
7e:27:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:14 2025 by rpki-client