Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa
File: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (raw, json)
Hash identifier: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=
Subject key identifier: EF:13:95:01:00:21:1B:16:97:85:15:41:E0:26:DC:65:72:8D:68:B7
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 0194228DFFAF585F1B49613EB077C7F8D075
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa
Signing time: Wed 01 Jan 2025 15:48:38 +0000
ROA not before: Wed 01 Jan 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215733
IP address blocks: 45.11.168.0/22 maxlen: 22
185.97.236.0/22 maxlen: 22
185.152.72.0/22 maxlen: 22
185.206.192.0/22 maxlen: 22
185.209.164.0/22 maxlen: 22
194.36.58.0/23 maxlen: 23
194.36.64.0/23 maxlen: 23
2a01:ac::/32 maxlen: 32
2a01:ad::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ff:af:58:5f:1b:49:61:3e:b0:77:c7:f8:d0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Jan 1 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef13950100211b1697851541e026dc65728d68b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:b2:01:71:16:79:23:d1:cf:29:d2:9d:4a:
92:2f:15:fc:88:d6:db:1f:f3:b1:8a:5d:ab:70:07:
d4:df:fb:d4:f6:87:43:c3:f3:da:98:f7:8a:5c:77:
3c:54:c5:54:30:04:c4:85:5d:cb:e1:a8:54:b0:14:
48:43:b5:1f:1e:98:33:6b:f0:c3:b9:65:2b:9b:2b:
df:bb:95:14:20:86:84:65:3f:10:fd:11:cd:b0:84:
c7:c1:86:ec:57:0e:6b:aa:86:4e:d2:e1:9e:0c:82:
1d:15:19:d1:0c:8f:45:bc:0e:78:37:16:2b:34:76:
dd:83:38:b2:21:b7:10:05:be:eb:d0:c6:a6:82:7e:
14:b2:2c:f5:30:6b:ab:6f:05:3b:b6:6e:3f:f6:2a:
3a:de:85:9e:8f:72:85:bb:0c:cd:45:e4:91:48:e6:
77:7f:6a:53:2b:c7:0f:22:80:50:53:62:43:63:c9:
ee:25:2c:be:e2:61:1c:73:ad:77:bc:b8:c0:a9:cb:
0e:66:f2:54:20:f0:01:69:13:40:98:5f:3a:11:fe:
0e:18:54:5d:b3:7d:cb:f4:4f:7e:fd:24:4e:50:1b:
61:cc:bc:88:6c:b3:76:a7:4c:2e:4d:fa:0a:1d:3c:
74:85:d1:c2:1f:14:87:22:16:b7:55:b5:a3:58:eb:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:95:01:00:21:1B:16:97:85:15:41:E0:26:DC:65:72:8D:68:B7
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.168.0/22
185.97.236.0/22
185.152.72.0/22
185.206.192.0/22
185.209.164.0/22
194.36.58.0/23
194.36.64.0/23
IPv6:
2a01:ac::/31
Signature Algorithm: sha256WithRSAEncryption
22:ec:e8:13:ff:21:3d:33:24:2c:73:3e:a4:83:1e:ab:a0:f1:
73:26:75:04:16:57:ea:d1:a4:56:76:bc:3b:ea:8a:19:ca:b9:
67:71:dd:92:94:38:44:6e:05:01:f6:a0:d4:33:f6:1e:52:c1:
38:e8:b3:e1:29:11:04:ce:0a:60:5b:7c:33:8e:6f:4a:43:76:
f4:f0:56:61:a5:19:15:92:65:ec:c0:fb:7e:1d:38:ff:75:eb:
47:c4:66:8c:05:86:54:94:7f:65:ee:fb:7a:1c:a7:c6:34:5e:
d5:b4:26:89:c1:7b:6e:44:cc:94:2e:d1:ff:51:fa:c3:56:1f:
38:d7:de:a3:90:7c:8f:17:f4:c0:58:8c:4e:c3:21:3f:bc:64:
41:a8:6b:30:d7:bd:d8:ba:be:58:3b:25:88:91:14:6c:53:30:
57:90:9f:52:37:41:59:96:71:18:e8:30:0e:de:47:36:7c:a6:
c8:8e:d7:0d:b7:c4:4d:30:6f:0b:af:6b:1d:3e:62:8e:7f:bb:
c4:16:60:54:41:4f:7a:e2:0e:7e:32:bc:54:a1:dd:63:59:3c:
d7:c0:1e:1b:cb:a1:5e:00:dc:88:25:03:65:02:b2:40:05:19:
cc:6a:1f:d4:dc:16:b5:b4:6d:1c:4c:53:b6:d3:7c:7e:3d:b5:
e9:d9:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:54 2025 by rpki-client