Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/slYjYuIFo0w5rC10sA14jjDYTj4.roa
File: slYjYuIFo0w5rC10sA14jjDYTj4.roa (raw, json)
Hash identifier: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=
Subject key identifier: B2:56:23:62:E2:05:A3:4C:39:AC:2D:74:B0:0D:78:8E:30:D8:4E:3E
Certificate issuer: /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial: 01941FFA9A7F9347A056972ED870DD4B7060
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/slYjYuIFo0w5rC10sA14jjDYTj4.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31319
IP address blocks: 83.149.128.0/18 maxlen: 18
91.109.48.0/21 maxlen: 21
185.119.244.0/22 maxlen: 22
185.121.156.0/22 maxlen: 22
2a01:63c0::/32 maxlen: 32
2a03:8c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9a:7f:93:47:a0:56:97:2e:d8:70:dd:4b:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2562362e205a34c39ac2d74b00d788e30d84e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1b:b1:c4:87:4a:36:d7:95:34:50:0d:65:15:
eb:f5:bd:6e:f3:52:fb:58:84:2b:96:d0:35:b1:a7:
21:5e:17:07:d3:96:b4:11:29:aa:6b:63:0f:08:72:
52:d8:48:ff:5b:98:4b:7a:5f:a6:58:34:e5:4c:f6:
39:91:29:04:02:91:82:82:21:bf:cc:05:f1:56:da:
ea:02:3d:2f:cb:cd:4e:e7:2b:bc:bd:76:90:b5:77:
f1:3d:59:fd:80:f7:c3:c0:85:a7:d5:b4:3d:b0:9e:
f0:fa:4f:56:bf:1a:16:52:14:d6:24:21:1c:26:f3:
5d:e8:aa:7f:a8:44:40:22:d4:d6:bb:46:5f:9d:a8:
0a:52:0b:bc:c7:39:20:50:91:19:f1:8e:7c:e3:a8:
26:41:1f:7c:b0:f0:8f:18:c8:ad:50:f5:0d:85:b5:
cf:bd:43:c6:2f:1d:03:cf:52:f7:68:34:af:23:1d:
17:8b:93:d3:c0:55:6d:d7:fc:c1:ac:fb:d8:82:89:
ea:b2:69:d3:48:79:4e:70:5b:d6:7d:5f:79:ef:b6:
13:4b:b0:59:c6:fd:1c:d2:11:58:c4:a8:93:7e:de:
04:89:01:0b:e1:50:3f:75:70:ec:58:8c:a6:13:af:
86:0f:de:5f:cc:24:ab:ea:c9:c8:4c:7d:2f:11:37:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:56:23:62:E2:05:A3:4C:39:AC:2D:74:B0:0D:78:8E:30:D8:4E:3E
X509v3 Authority Key Identifier:
keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/slYjYuIFo0w5rC10sA14jjDYTj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.149.128.0/18
91.109.48.0/21
185.119.244.0/22
185.121.156.0/22
IPv6:
2a01:63c0::/32
2a03:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
43:60:53:41:39:ad:e7:43:b6:be:c9:a8:8f:95:98:ac:4e:9f:
03:be:76:c9:73:ce:d2:4e:15:17:1e:df:9c:fc:32:7c:e3:45:
74:db:b9:16:85:29:45:8c:95:87:ab:f5:e8:a4:fb:60:1c:bc:
68:cf:df:cf:c2:4d:eb:68:32:a6:de:35:ea:e8:77:ed:02:9e:
cf:62:73:ea:76:cf:8b:bc:e5:3c:61:1e:d6:a4:d3:ca:63:92:
c0:fb:49:30:aa:90:fa:01:ff:3e:90:56:dc:95:96:38:18:80:
65:b8:c3:18:15:7d:80:58:7d:f3:3a:a0:2f:82:42:96:a4:d4:
6c:a2:79:d3:b1:64:d9:1a:8b:ed:2b:53:e3:fc:bc:e0:d7:f8:
85:70:49:e0:5c:1a:e9:67:d7:c5:e5:e4:6d:a5:57:dc:06:66:
0e:09:7c:32:8c:28:2c:9d:29:e6:c1:28:2d:9b:41:0e:ba:25:
ba:fe:ec:68:2f:df:f7:19:20:ae:05:7e:9c:bd:5c:ac:42:c4:
28:2e:b1:ad:84:c2:37:66:ec:13:6b:ff:86:e7:b8:1c:0e:ba:
9e:5f:46:22:6c:34:35:46:ab:5d:e7:aa:05:f9:ce:5d:37:af:
f5:1f:de:f9:4d:74:90:be:ea:9b:34:f9:cf:cc:d6:82:d6:21:
dd:96:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:53 2025 by rpki-client