Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/1-EBqQrT3eC_nxc7Cq29UCGXfrws.roa
File: 1-EBqQrT3eC_nxc7Cq29UCGXfrws.roa (raw, json)
Hash identifier: /fSp0NUgyT3DGS+foORd4E+QTSVz7kGcWwaPOqxB8jI=
Subject key identifier: F8:40:6A:42:B4:F7:78:2F:E7:C5:CE:C2:AB:6F:54:08:65:DF:AF:0B
Certificate issuer: /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Certificate serial: 01942067CF20191B84D2DF5E37C124E4186E
Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/1-EBqQrT3eC_nxc7Cq29UCGXfrws.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35311
IP address blocks: 87.242.0.0/18 maxlen: 18
88.132.0.0/19 maxlen: 19
88.132.32.0/19 maxlen: 19
88.132.64.0/21 maxlen: 21
88.132.72.0/21 maxlen: 21
88.132.80.0/21 maxlen: 21
88.132.88.0/21 maxlen: 21
88.132.96.0/19 maxlen: 19
88.132.128.0/19 maxlen: 19
88.132.160.0/19 maxlen: 19
88.132.192.0/20 maxlen: 20
185.145.204.0/22 maxlen: 22
2a02:808::/29 maxlen: 29
2a02:808::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:20:19:1b:84:d2:df:5e:37:c1:24:e4:18:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8406a42b4f7782fe7c5cec2ab6f540865dfaf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:c1:50:46:cd:fc:85:50:5d:f2:f7:b3:06:
3c:88:4f:72:db:2d:fe:77:a3:5d:da:6c:52:aa:64:
55:f3:8f:76:6d:19:99:6e:ae:c6:17:3b:11:e9:99:
ce:2a:42:73:df:c0:bc:e3:a9:4f:c8:df:6a:ac:89:
3e:34:10:aa:ee:8b:85:5d:bd:c8:b8:35:a1:98:9c:
1e:37:ee:47:bf:50:ba:88:01:67:31:20:48:54:08:
6b:17:70:f3:5a:60:f7:7a:9f:aa:00:d7:72:59:ea:
88:f7:09:27:54:c7:7a:03:1f:43:dc:97:d5:ff:cd:
23:76:09:0c:21:7e:1a:42:5e:29:e5:6a:c2:95:42:
42:02:0c:72:42:cb:12:77:94:3f:35:2a:cf:ec:e8:
73:9b:2b:c6:01:d1:e6:55:96:dc:14:66:af:c6:0b:
46:51:06:cc:48:31:09:23:2d:ac:ef:03:ca:ad:af:
06:0a:7d:c7:83:54:51:ad:87:5a:24:2e:5e:02:f0:
a8:fd:c3:d0:f3:c4:f4:b9:0a:6f:a6:45:fe:aa:d1:
3f:75:97:88:c7:b7:38:3e:19:70:4e:91:f8:cb:0e:
66:33:61:a1:b3:d2:fc:4c:37:fa:9e:55:9a:d4:11:
74:1a:b6:52:a8:54:18:df:6f:bd:3d:31:c0:8a:3b:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:6A:42:B4:F7:78:2F:E7:C5:CE:C2:AB:6F:54:08:65:DF:AF:0B
X509v3 Authority Key Identifier:
keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/1-EBqQrT3eC_nxc7Cq29UCGXfrws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.242.0.0/18
88.132.0.0-88.132.207.255
185.145.204.0/22
IPv6:
2a02:808::/29
Signature Algorithm: sha256WithRSAEncryption
39:2c:9a:6e:fa:db:7b:e3:46:c7:72:ce:0c:d0:7d:2a:80:39:
d2:10:a0:56:52:43:6d:89:e4:cb:e2:e1:3c:3e:97:14:8c:d8:
09:ef:8a:bf:68:e5:34:e2:90:52:27:78:51:b8:75:b0:5d:f9:
ba:b9:1b:7d:d2:28:2f:a9:cf:4c:3b:9a:eb:5b:b9:71:72:17:
73:a9:c2:93:90:8e:f8:88:d9:65:c4:b2:e1:86:e6:5e:51:6d:
71:41:3b:17:cc:a4:ee:25:cf:e3:d6:d6:b5:67:ab:16:bd:97:
7a:46:4d:bb:49:f9:9c:db:f6:14:e2:b6:05:fa:37:65:10:db:
8f:a8:2f:2f:d8:7c:b2:60:2b:3d:94:35:a6:97:27:2f:9f:fe:
d2:32:bf:16:ee:6b:7d:e9:ba:e2:15:04:45:72:d5:b1:6e:d9:
6d:bc:b3:da:28:c4:cf:dd:02:ca:79:27:2e:8a:53:4b:2c:ae:
30:c4:5e:d2:11:48:8a:bf:73:ea:2a:8c:bf:22:26:ed:3c:07:
c7:0c:ce:85:cc:be:16:d2:1c:37:98:86:51:95:13:34:59:02:
9b:38:59:3c:46:83:40:ee:c9:20:df:0d:2b:05:2d:42:00:d6:
90:95:4a:9e:12:a9:82:72:44:a5:28:40:e4:4c:cc:0f:c2:3b:
9a:f6:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:51 2025 by rpki-client