Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/1-ecgLM9Ei9k4oVFiF4_4nYtHj5o.roa
File: 1-ecgLM9Ei9k4oVFiF4_4nYtHj5o.roa (raw, json)
Hash identifier: WRYcSDPy+48O3h5FVEkLg3Iy70hWglPF/KiTfUTP0D0=
Subject key identifier: F9:E7:20:2C:CF:44:8B:D9:38:A1:51:62:17:8F:F8:9D:8B:47:8F:9A
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 0194266BFFAB9A48B86F1F6A615DA797CC1B
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/1-ecgLM9Ei9k4oVFiF4_4nYtHj5o.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204544
IP address blocks: 45.129.36.0/22 maxlen: 22
45.129.36.0/24 maxlen: 24
45.129.37.0/24 maxlen: 24
45.129.38.0/23 maxlen: 23
45.129.38.0/24 maxlen: 24
45.129.39.0/24 maxlen: 24
185.53.140.0/22 maxlen: 22
185.53.140.0/23 maxlen: 23
185.53.140.0/24 maxlen: 24
185.53.141.0/24 maxlen: 24
185.53.142.0/23 maxlen: 23
185.53.142.0/24 maxlen: 24
185.53.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ff:ab:9a:48:b8:6f:1f:6a:61:5d:a7:97:cc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9e7202ccf448bd938a15162178ff89d8b478f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:91:2b:1d:e9:0b:6d:8e:8d:23:e8:28:af:
ef:f4:2c:1b:bc:0e:71:8e:6b:41:32:8d:e9:5a:9c:
20:e0:7b:3d:26:06:c4:b9:c1:22:05:43:dc:e5:8e:
b8:4f:51:f1:c9:40:60:61:a2:a6:f0:5b:55:1a:ef:
49:6a:bb:fe:90:bb:73:11:52:89:06:1f:69:c8:2b:
5d:24:00:09:6e:48:04:79:58:bc:69:49:78:6d:2a:
bf:3d:6c:8d:92:f1:2f:99:27:11:2b:a0:c8:39:7d:
8d:1c:f5:98:ff:59:f5:3b:d5:b5:d1:df:07:b8:44:
f8:04:d6:40:cb:38:a0:71:bd:ca:e8:ee:a4:78:e7:
e4:64:9d:ea:92:0e:ee:e2:c3:ae:c3:34:a5:83:73:
70:d9:64:bd:fe:26:65:08:92:dc:5d:78:35:1c:da:
37:4e:b7:98:0a:62:66:17:79:2d:68:e4:61:f9:40:
61:da:83:e1:69:1d:bf:1a:20:ab:f6:db:ac:88:31:
42:bb:c9:3c:3e:93:92:ab:8a:19:64:49:15:6b:33:
02:4c:05:b0:81:90:11:91:81:e5:b0:6c:d2:0a:9d:
4e:58:c8:f7:bf:53:30:e8:b8:e9:4d:ec:d7:4e:8c:
a5:bc:d4:b3:18:54:1d:97:03:35:94:01:b3:ef:9e:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:20:2C:CF:44:8B:D9:38:A1:51:62:17:8F:F8:9D:8B:47:8F:9A
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/1-ecgLM9Ei9k4oVFiF4_4nYtHj5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.36.0/22
185.53.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:01:cf:28:fa:3b:20:82:92:96:4d:d8:89:45:62:2d:e3:0d:
cb:2a:52:3a:6b:8b:ce:d7:9c:cd:c7:69:d9:f4:1d:ce:fc:1c:
ef:38:fe:6f:ab:f7:83:45:f5:9b:6e:20:88:05:9c:1a:73:d4:
3b:52:07:b9:b0:0a:cc:13:0f:2f:b5:2e:fd:b6:62:ae:1f:54:
4c:1b:a6:77:11:63:97:ae:b1:04:3c:39:3f:7a:fe:01:07:fa:
8d:62:c8:82:1c:af:f7:6b:66:b3:4a:fb:97:e4:d2:8a:85:31:
6c:a0:a5:d9:fb:99:43:8d:fb:ed:0f:de:8e:dd:30:86:52:28:
05:94:9e:9d:7b:68:9b:8d:e2:67:29:05:7e:f2:33:80:56:37:
73:4b:34:11:27:64:87:b0:d5:86:7e:23:0e:7d:69:27:4e:72:
42:a9:d0:4a:93:2b:73:ca:bf:23:22:99:6f:2c:df:0c:68:11:
0b:ed:66:14:9c:dc:1a:a6:53:11:c9:c2:81:0b:c2:78:95:4a:
81:1e:fa:f6:a3:d7:42:6a:b3:a6:1d:24:4f:64:18:77:cb:e7:
9e:f4:14:c4:b8:13:a4:50:35:6c:29:91:be:9c:b7:53:8b:8e:
b6:60:df:18:2f:ab:d1:ec:8d:bc:97:ed:01:04:df:01:15:56:
7c:d5:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:51 2025 by rpki-client