Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa
File: KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa (raw, json)
Hash identifier: dw0fO1xhc9eufYQ0WpteBCztc0/BFVhz2enclISvMos=
Subject key identifier: 2B:11:E8:DC:F1:F9:5E:A0:16:FD:EF:B8:45:B0:AF:53:F8:00:41:67
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 0194258EA2508710183CF3FE61D29E10B19C
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa
Signing time: Thu 02 Jan 2025 05:48:12 +0000
ROA not before: Thu 02 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6823
IP address blocks: 37.202.48.0/21 maxlen: 21
37.202.48.0/24 maxlen: 24
37.202.49.0/24 maxlen: 24
37.202.50.0/24 maxlen: 24
37.202.51.0/24 maxlen: 24
37.202.52.0/24 maxlen: 24
37.202.53.0/24 maxlen: 24
37.202.54.0/24 maxlen: 24
37.202.55.0/24 maxlen: 24
178.251.40.0/21 maxlen: 21
178.251.40.0/24 maxlen: 24
178.251.41.0/24 maxlen: 24
178.251.42.0/24 maxlen: 24
178.251.43.0/24 maxlen: 24
178.251.44.0/24 maxlen: 24
178.251.45.0/24 maxlen: 24
178.251.46.0/24 maxlen: 24
178.251.47.0/24 maxlen: 24
2a01:6be0::/32 maxlen: 32
2a01:6be0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:a2:50:87:10:18:3c:f3:fe:61:d2:9e:10:b1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Jan 2 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b11e8dcf1f95ea016fdefb845b0af53f8004167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:b7:c3:49:bf:16:5f:7e:1a:32:bf:d9:e1:
25:67:30:a4:73:fc:eb:fd:5e:06:8b:8d:8f:a2:78:
77:8e:83:0f:30:5e:b2:16:27:69:96:c2:b9:16:db:
33:92:47:54:dd:ca:e4:27:8e:bb:8b:8a:d2:98:ac:
7a:8b:4b:02:32:a2:a9:60:56:2c:a9:d2:e9:04:c3:
7a:52:92:e1:ff:92:47:fe:3d:12:1a:26:44:f3:cd:
75:ca:f6:ff:98:65:aa:9b:2f:91:ea:dc:8a:56:24:
18:b4:04:76:34:98:c5:41:40:9b:d3:be:92:1f:86:
1b:9e:0b:07:6a:43:77:fc:c0:6f:8c:40:b4:9f:69:
58:8f:0b:48:f3:43:5b:0c:c7:e8:5c:25:7b:85:3d:
d0:ff:ab:94:4a:f2:51:6f:f6:9d:32:71:38:b2:4b:
3e:fb:59:f1:99:1f:56:63:04:b1:17:3a:f3:59:a0:
b9:8b:ad:e6:06:58:fd:c8:02:8f:ec:99:ce:cf:4d:
1c:d3:c2:f2:a7:67:e6:6b:13:3a:f5:6e:06:14:aa:
79:e0:5d:5e:88:3a:7c:54:c6:68:6a:ec:9c:a0:fa:
e5:bb:ce:1d:71:45:09:16:fe:bd:5c:79:7a:16:2e:
66:9b:a4:b4:a1:60:77:f8:41:60:a0:45:ee:32:f2:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:E8:DC:F1:F9:5E:A0:16:FD:EF:B8:45:B0:AF:53:F8:00:41:67
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/KxHo3PH5XqAW_e-4RbCvU_gAQWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.48.0/21
178.251.40.0/21
IPv6:
2a01:6be0::/32
Signature Algorithm: sha256WithRSAEncryption
28:33:d1:5e:a1:b0:54:39:cb:96:4e:2e:06:24:7a:fa:db:e2:
5c:e6:dc:81:26:71:c2:bb:68:96:3e:39:3e:6b:4b:74:b1:29:
85:48:30:c9:2f:cc:65:24:31:ff:6f:07:ea:dd:3a:e2:b5:5e:
64:8e:06:77:60:99:6b:43:2d:c5:e6:fe:d5:c4:36:ff:6f:65:
35:9a:5a:7a:44:ce:d5:0f:bf:98:58:ef:04:23:18:be:73:e1:
dc:0e:dc:3a:be:67:a6:cb:fc:9b:02:08:fc:6e:28:2c:12:dc:
d4:d7:34:a8:4b:94:c9:41:c8:60:d9:50:30:3a:9c:be:84:9b:
2e:46:77:b5:ef:5c:46:4e:57:d7:bd:24:ba:e9:52:fd:23:a2:
e3:2b:09:af:33:50:59:ac:be:55:e2:15:0c:58:bd:4b:7a:74:
da:46:93:2e:5f:a3:6d:0c:f4:da:ca:12:70:0a:e3:59:7f:6f:
c4:84:9c:41:cf:46:3d:28:fc:ee:54:8f:5a:f4:a6:d6:e1:eb:
d6:0c:2a:e3:9d:6a:20:88:4f:bb:2f:dd:d4:81:a3:17:7a:50:
76:b7:af:8e:85:b8:ef:f8:d2:1f:74:0b:2f:95:ed:0d:42:a6:
67:d2:17:d7:32:0e:e8:75:cd:62:a1:27:ae:96:ce:cc:f8:50:
6b:c5:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:40 2025 by rpki-client