Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/YEfco2c9_b6VDtGwlUBszWvCvI0.roa
File: YEfco2c9_b6VDtGwlUBszWvCvI0.roa (raw, json)
Hash identifier: 0dy3l8v/4sRsGHHGtOtE/Z/gbG5L+kAxLfCYcCqk4xc=
Subject key identifier: 60:47:DC:A3:67:3D:FD:BE:95:0E:D1:B0:95:40:6C:CD:6B:C2:BC:8D
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 019426D96C38735E6E82B15355E432D6A356
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/YEfco2c9_b6VDtGwlUBszWvCvI0.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198440
IP address blocks: 37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
185.102.148.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
188.74.70.0/23 maxlen: 23
188.74.72.0/23 maxlen: 23
188.74.74.0/23 maxlen: 23
188.74.76.0/23 maxlen: 23
188.74.80.0/22 maxlen: 22
188.74.84.0/22 maxlen: 22
217.168.248.0/21 maxlen: 24
2a05:87c0::/29 maxlen: 48
2a05:87c3:1000::/36 maxlen: 36
2a05:87c3:2000::/36 maxlen: 36
2a05:87c3:3000::/36 maxlen: 36
2a05:87c3:7000::/36 maxlen: 36
2a05:87c3:8000::/36 maxlen: 36
2a05:87c3:9000::/36 maxlen: 36
2a05:87c7:1000::/36 maxlen: 36
2a05:87c7:2000::/36 maxlen: 36
2a05:87c7:3000::/36 maxlen: 36
2a05:87c7:7000::/36 maxlen: 36
2a05:87c7:8000::/36 maxlen: 36
2a05:87c7:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6c:38:73:5e:6e:82:b1:53:55:e4:32:d6:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6047dca3673dfdbe950ed1b095406ccd6bc2bc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:72:78:f8:40:2f:de:cd:ef:6d:72:6a:b5:
e3:24:1f:16:98:61:69:95:4a:95:27:3b:52:e9:4e:
31:7a:61:6d:6d:cb:64:e8:8a:ef:c8:c7:cd:82:f7:
31:ea:a6:74:38:8f:af:42:22:16:6a:81:1f:fc:7c:
63:c1:cf:0c:14:81:1b:5b:dc:f6:1c:92:b0:fa:5e:
75:17:db:d8:cc:35:8b:8d:37:15:0e:44:3d:a1:7d:
6f:89:bf:6c:7b:60:c2:ef:e6:33:fa:a8:fa:7d:56:
22:79:01:52:59:26:22:77:f4:c8:1a:36:c2:0e:0f:
0d:b1:82:aa:f3:ac:22:c4:97:f4:42:95:ef:ff:ad:
77:18:74:d0:89:80:01:77:d3:41:a2:21:34:07:f5:
d3:23:bf:7f:bb:64:b3:08:1d:bb:b5:ed:4c:fb:5b:
4d:1f:16:b4:2e:37:12:0d:52:28:e3:53:cc:69:0b:
fb:89:79:56:a1:af:a8:3a:ae:5f:3f:a6:14:98:5f:
ae:11:68:de:b7:71:53:9f:2c:1c:2d:54:2c:3d:8d:
52:ac:43:19:d1:31:0a:48:c3:dc:fc:ad:d3:d1:ad:
31:16:4e:ee:64:ab:10:4d:c9:0f:b6:49:3c:d7:5d:
bf:ba:d5:d2:b7:7c:17:fb:a7:a8:a1:bd:6e:88:03:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:DC:A3:67:3D:FD:BE:95:0E:D1:B0:95:40:6C:CD:6B:C2:BC:8D
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/YEfco2c9_b6VDtGwlUBszWvCvI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.224.0/24
37.48.229.0-37.48.230.255
62.64.128.0-62.64.139.255
62.64.144.0/20
185.102.148.0/22
188.74.64.0/19
217.168.248.0/21
IPv6:
2a05:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:0e:7c:4e:5a:36:4d:4e:fa:c4:2f:f8:48:48:74:ce:bd:66:
ec:11:55:f1:74:a9:cf:99:4f:9a:10:d6:5d:b8:e6:a5:7c:89:
60:9b:23:b6:98:eb:8b:32:a1:4e:7b:ae:46:da:c7:20:7e:2b:
68:66:32:d9:e5:4c:eb:58:5e:10:43:b1:65:56:fd:6c:27:2e:
79:96:db:57:31:7c:da:90:34:2e:b2:0b:6d:eb:ac:19:68:d1:
e3:24:54:04:2e:92:f2:5f:ea:67:2b:0c:4d:ae:ee:c8:0e:8f:
8c:ee:1c:de:75:5b:57:44:c6:9c:c7:44:2d:ef:56:8e:da:a9:
13:f5:f8:24:e5:f8:6e:be:2e:27:02:95:da:a4:32:51:6d:97:
d6:d8:80:50:5c:3b:6f:a4:5a:97:f9:ed:36:df:a7:de:8f:40:
16:21:2c:9c:0b:bb:57:e8:13:11:76:b6:cd:92:b1:9c:aa:13:
18:45:2b:12:e4:60:7e:81:54:e3:95:1f:90:87:95:4b:3e:fc:
fb:53:13:62:d6:61:ff:41:dc:f7:37:8f:36:f5:84:de:4e:1a:
3e:a2:81:d5:ff:60:55:af:df:7f:3b:2a:11:c0:f6:e4:6c:15:
d5:87:69:cb:d6:41:aa:1a:0e:41:0a:b6:c5:10:9a:3a:f3:68:
bc:ab:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:22 2025 by rpki-client