Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/iUoNxOhwebXoe8b72BR2AhmpSeA.roa
File: iUoNxOhwebXoe8b72BR2AhmpSeA.roa (raw, json)
Hash identifier: tWfhDKNLJhumUMuEB+92tFSBgGLOO7GXSiupWsvky5w=
Subject key identifier: 89:4A:0D:C4:E8:70:79:B5:E8:7B:C6:FB:D8:14:76:02:19:A9:49:E0
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 019421443E5EB60C52141658C4AC73977F44
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/iUoNxOhwebXoe8b72BR2AhmpSeA.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60501
IP address blocks: 185.30.64.0/22 maxlen: 22
185.109.24.0/22 maxlen: 22
185.109.24.0/24 maxlen: 24
185.109.25.0/24 maxlen: 24
185.109.26.0/24 maxlen: 24
185.109.27.0/24 maxlen: 24
185.187.62.0/24 maxlen: 24
185.253.53.0/24 maxlen: 24
193.43.208.0/24 maxlen: 24
194.156.180.0/22 maxlen: 22
2a00:ae20::/32 maxlen: 32
2a04:f440::/29 maxlen: 29
2a06:4dc0::/29 maxlen: 29
2a0d:cc0::/29 maxlen: 29
2a0f:ccc0::/29 maxlen: 29
2a10:b740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3e:5e:b6:0c:52:14:16:58:c4:ac:73:97:7f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=894a0dc4e87079b5e87bc6fbd814760219a949e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:e0:8b:3e:e3:07:97:3a:87:3f:bc:62:88:
8e:78:68:cd:88:93:2f:8b:2b:01:46:81:4a:8b:70:
85:54:7a:04:a7:5a:63:4c:d6:db:3b:43:a3:02:9a:
88:70:72:65:61:1e:5c:2c:41:d5:f4:31:fe:b1:92:
46:78:5e:ee:dc:31:82:18:0d:e8:51:30:91:d8:64:
b0:75:6b:16:b2:36:d9:86:62:ed:b6:47:fa:aa:30:
ea:3b:66:3f:3a:34:e1:74:7f:c3:85:04:27:f2:4e:
bb:bc:b3:d2:06:52:c2:7e:4d:00:eb:fc:a7:60:bf:
6b:17:a6:63:8b:c8:05:a5:94:2c:bc:11:8e:9f:19:
5d:72:81:59:9d:a1:f2:cb:06:9d:44:4f:4d:1f:4b:
64:c6:81:27:4c:c9:4c:5d:d5:ee:cc:2a:80:23:fd:
7e:36:e4:11:8c:31:08:7c:e4:ad:d4:07:07:a0:59:
fa:08:c4:b6:38:35:e1:bf:da:ef:9a:01:be:2e:ce:
4f:3b:ce:9d:79:e3:6c:ce:fb:a4:c2:26:e0:c5:84:
65:f6:c6:66:be:9a:d7:96:d3:71:eb:28:e7:cc:1e:
e7:71:09:cc:0f:b2:f3:5f:ae:5d:27:52:ef:35:76:
92:e3:0c:29:a3:eb:f6:5f:ee:44:91:4a:f7:bf:fb:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:0D:C4:E8:70:79:B5:E8:7B:C6:FB:D8:14:76:02:19:A9:49:E0
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/iUoNxOhwebXoe8b72BR2AhmpSeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.64.0/22
185.109.24.0/22
185.187.62.0/24
185.253.53.0/24
193.43.208.0/24
194.156.180.0/22
IPv6:
2a00:ae20::/32
2a04:f440::/29
2a06:4dc0::/29
2a0d:cc0::/29
2a0f:ccc0::/29
2a10:b740::/29
Signature Algorithm: sha256WithRSAEncryption
64:75:05:f7:b0:bd:ee:be:35:87:3c:ad:7a:de:77:71:0f:9d:
50:1c:f1:5f:fb:bb:2d:58:a6:b8:a6:68:60:64:aa:eb:f1:b6:
96:19:72:f1:ab:55:03:15:2a:f6:46:21:c8:3c:14:1f:80:bf:
30:cd:23:da:5d:e1:45:b6:9e:0b:5e:f1:f5:03:a0:24:1b:6c:
96:14:28:50:d8:2b:fd:94:8a:1d:aa:c0:0f:63:bc:a0:a7:76:
a0:16:39:4f:b8:90:61:e9:1d:42:c6:3c:59:c4:39:23:63:8b:
12:a6:ba:67:66:cc:ae:4a:14:75:72:9f:2a:08:c5:ef:a1:8f:
fa:dd:8d:c7:e3:bb:14:6b:63:39:91:33:95:22:8f:02:38:36:
5d:4b:af:15:c9:92:c6:3b:5c:30:4e:eb:a2:21:f9:08:cd:ce:
05:dd:37:0a:29:fa:3c:ab:9a:aa:fe:22:1c:ed:7f:9d:22:a1:
6a:cf:fe:63:32:da:64:74:71:95:eb:99:05:4b:a2:cd:66:13:
fc:73:6d:b4:bf:d8:f8:97:54:82:43:22:e5:85:b1:01:8a:ed:
61:0d:d1:10:4e:22:27:30:24:00:29:b8:01:88:5a:d9:0b:bf:
6d:b7:25:32:fb:72:ba:d6:a6:13:36:16:d3:83:04:4a:fb:bc:
44:7f:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:32 2025 by rpki-client