Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/evtgJCjNqU-XiKSUJUSfZ04sXjo.roa
File: evtgJCjNqU-XiKSUJUSfZ04sXjo.roa (raw, json)
Hash identifier: NQC1UGMOOMrvGagAY9DsWpPzFXGA3j1MjZq1RpVWcCg=
Subject key identifier: 7A:FB:60:24:28:CD:A9:4F:97:88:A4:94:25:44:9F:67:4E:2C:5E:3A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827C16176F32561CBC58D2F71633232
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/evtgJCjNqU-XiKSUJUSfZ04sXjo.roa
Signing time: Thu 02 Jan 2025 17:54:41 +0000
ROA not before: Thu 02 Jan 2025 17:54:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60071
IP address blocks: 87.229.72.0/24 maxlen: 24
87.229.103.0/24 maxlen: 24
87.229.104.0/24 maxlen: 24
87.229.120.0/24 maxlen: 24
95.138.196.0/24 maxlen: 24
217.144.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c1:61:76:f3:25:61:cb:c5:8d:2f:71:63:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7afb602428cda94f9788a49425449f674e2c5e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:65:20:91:a0:74:13:61:14:18:44:37:50:
1c:d9:11:79:8f:ef:01:03:b7:65:d1:a9:f9:8c:6b:
ab:c5:70:23:9b:6d:3a:3f:0d:b9:26:28:03:e1:0b:
e9:89:e6:2b:b9:4a:8d:ff:bd:9d:29:66:09:13:28:
28:65:2a:7f:0d:08:01:83:65:b2:a3:cb:f6:5f:27:
b2:7f:71:fc:6b:9b:e0:c1:57:8f:9f:73:00:25:20:
b9:cf:ab:42:32:46:36:4c:8d:25:27:23:45:2b:ef:
6d:d9:49:ef:0c:78:32:19:c9:0e:ec:8b:38:6b:c5:
56:fe:ae:32:f5:a2:af:b8:27:dc:53:16:61:33:d7:
79:10:1a:03:f8:84:9e:ad:31:24:3f:e2:72:8a:34:
22:de:ca:eb:c0:e7:36:c1:3a:4c:e4:34:60:e5:55:
4c:91:7a:ce:e2:6b:dc:f3:84:3b:cd:93:92:67:81:
89:9c:f8:77:48:71:94:86:7f:21:10:2d:19:8f:a2:
7f:41:97:34:83:1d:c1:26:95:f7:88:78:38:77:fe:
18:59:b1:e4:44:11:4a:db:b9:42:6b:00:d5:15:60:
57:60:08:64:ba:b9:9f:ed:01:68:7a:df:75:74:25:
80:da:06:19:48:3a:30:bd:d9:6d:54:56:27:de:03:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:60:24:28:CD:A9:4F:97:88:A4:94:25:44:9F:67:4E:2C:5E:3A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/evtgJCjNqU-XiKSUJUSfZ04sXjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.72.0/24
87.229.103.0-87.229.104.255
87.229.120.0/24
95.138.196.0/24
217.144.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:87:b7:77:72:92:54:ba:c3:53:cb:13:30:54:50:47:cf:4e:
d4:04:6d:ae:e5:1d:7e:36:e8:4b:55:81:5e:b0:87:14:3d:36:
65:01:7e:9c:7f:e3:03:45:dc:cc:85:78:f5:d0:83:fb:e3:b8:
8e:2f:d6:f1:7f:fa:33:85:9f:5b:22:e3:d5:c0:20:be:04:f6:
e6:ad:49:e7:4b:19:1f:83:c7:b7:ee:71:40:0b:3e:0b:e3:d1:
32:ee:2c:68:5d:08:99:b6:41:14:9c:ad:22:7e:6c:aa:63:75:
74:69:8f:48:31:4e:e3:df:72:1d:8b:91:5d:16:83:a6:c4:10:
53:29:b4:2e:9a:63:ba:a9:a3:4b:60:4b:e4:03:c7:53:89:ee:
89:4d:31:22:59:55:80:ed:76:bf:29:0c:2a:0c:15:59:53:6a:
5f:e3:38:e8:b7:d6:a6:23:c9:c5:62:7e:cf:26:82:43:91:bc:
3d:f7:ce:9a:90:dc:17:ef:ee:bd:6a:a3:19:d7:0f:21:68:0d:
4e:ff:45:ef:a5:ab:2b:c9:a9:e9:16:ba:41:2d:6c:a7:b2:f3:
51:f2:5c:35:8c:1b:03:e9:cc:08:23:82:02:3c:ef:b7:1b:97:
e6:fe:70:ee:93:52:eb:d6:f4:20:91:16:93:78:ab:c4:2c:d1:
1c:48:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:32 2025 by rpki-client