Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GIY6t8WXECqHBNB2XBzSrMQvdIc.roa
File: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (raw, json)
Hash identifier: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=
Subject key identifier: 18:86:3A:B7:C5:97:10:2A:87:04:D0:76:5C:1C:D2:AC:C4:2F:74:87
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823C96C88CFCEF54F2C500B2D88F0E7
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GIY6t8WXECqHBNB2XBzSrMQvdIc.roa
Signing time: Thu 02 Jan 2025 17:50:21 +0000
ROA not before: Thu 02 Jan 2025 17:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12566
IP address blocks: 62.62.169.0/24 maxlen: 24
87.255.128.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
185.39.216.0/22 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
212.23.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:c9:6c:88:cf:ce:f5:4f:2c:50:0b:2d:88:f0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18863ab7c597102a8704d0765c1cd2acc42f7487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:ab:6e:d7:ec:e1:e5:c8:5d:a9:1a:16:e2:
c7:6a:d5:13:51:f3:68:a2:7a:d1:4b:20:0c:1a:e0:
6b:2d:29:f5:96:3e:49:56:9b:0e:59:5a:0f:f5:bd:
11:c8:bc:1c:d1:7c:2b:bf:8f:6a:e6:28:e4:b2:5d:
6e:20:ce:cb:89:7d:41:e0:64:4c:6c:ee:0c:c4:e1:
ea:ae:d8:35:69:dc:d7:b4:1d:90:3c:ee:5a:02:e2:
e4:17:2c:a6:cf:13:83:e1:3a:93:39:a8:23:b2:7d:
2f:dd:22:93:7c:69:d4:dd:a3:d6:d1:52:5a:b5:5a:
18:1a:53:81:9d:35:19:b8:86:af:3d:1b:53:9d:c7:
00:d6:cf:2a:81:90:c6:21:e3:6f:8d:f4:4a:20:67:
51:58:78:00:ba:03:f6:26:e2:32:2d:8d:d7:63:b0:
10:68:e5:54:d8:b8:b8:df:8e:c4:40:af:e4:04:32:
34:39:32:32:0b:da:98:cf:1c:93:54:02:dc:e0:4f:
ee:58:9e:c3:03:79:bc:06:f1:34:e2:c0:1f:c4:ce:
5e:98:ff:f5:8c:db:1c:1a:f2:d3:a8:3c:9c:db:8c:
ee:b0:dd:5c:e4:80:8a:17:38:b7:6a:35:59:99:5e:
9c:f1:34:1d:01:a3:ba:ae:e2:c6:39:5e:46:63:1e:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:3A:B7:C5:97:10:2A:87:04:D0:76:5C:1C:D2:AC:C4:2F:74:87
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/GIY6t8WXECqHBNB2XBzSrMQvdIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.62.169.0/24
87.255.128.0/19
95.181.220.0/22
185.39.216.0/22
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
212.23.160.0/19
Signature Algorithm: sha256WithRSAEncryption
21:26:1d:3b:c8:1e:5b:30:28:ea:a8:0e:5c:da:c2:93:7a:82:
e5:6e:4c:d4:a9:21:5a:61:5a:25:7e:28:58:60:09:2e:14:e6:
ca:80:a9:2c:84:79:e8:16:8c:48:50:87:89:d1:f3:58:c6:c3:
f7:ea:70:c7:ea:d9:e7:88:e2:0c:26:2c:27:3a:0a:f6:25:60:
aa:68:7e:2b:ca:8d:b8:50:0a:6f:98:1b:f2:21:43:66:69:54:
1d:43:3e:28:48:3f:44:17:05:1a:6c:05:e8:70:d9:6e:e6:13:
b0:bb:3f:14:c2:d3:9b:4f:8c:b3:fd:3a:5e:1b:e9:6a:e3:79:
7c:63:9d:60:a2:4f:71:ea:a6:e3:26:bd:23:b3:05:27:9e:65:
df:5c:86:50:78:7e:76:e9:90:75:ce:a5:d8:7d:a8:04:f2:5d:
dd:64:d7:0d:5f:d4:fd:4c:7d:c7:50:4b:25:e6:da:97:eb:4d:
ae:fd:e1:2f:ae:21:ca:6d:d2:15:e4:90:0e:c4:44:8d:31:7b:
0e:8f:6f:70:a0:a4:69:ef:74:89:64:37:18:f9:39:82:69:76:
ee:6a:cb:f1:18:d7:99:93:51:62:ca:2b:0e:c4:64:a1:1e:e9:
c0:95:0c:5d:82:d1:63:a4:a0:fe:1b:2d:61:26:5e:d7:a8:e9:
6d:29:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:36 2025 by rpki-client