Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa
File: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (raw, json)
Hash identifier: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=
Subject key identifier: 85:F8:97:B9:02:6B:58:81:E3:84:98:8F:96:76:99:8C:86:6D:26:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019425FC4A698D628325D87BDEBBC861E1C3
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51468
IP address blocks: 46.30.208.0/21 maxlen: 21
77.111.240.0/22 maxlen: 22
91.198.169.0/24 maxlen: 24
91.221.196.0/23 maxlen: 23
104.37.32.0/21 maxlen: 21
185.10.8.0/22 maxlen: 22
185.10.8.0/23 maxlen: 23
185.10.10.0/24 maxlen: 24
185.10.11.0/24 maxlen: 24
185.164.12.0/22 maxlen: 22
193.202.110.0/24 maxlen: 24
195.47.247.0/24 maxlen: 24
195.206.121.0/24 maxlen: 24
2001:67c:3c0::/48 maxlen: 48
2001:67c:28cc::/48 maxlen: 48
2a02:2350::/32 maxlen: 32
2a03:53c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4a:69:8d:62:83:25:d8:7b:de:bb:c8:61:e1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f897b9026b5881e384988f9676998c866d26ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:a7:13:a5:27:b2:9d:ac:25:c7:a8:c4:7a:
f5:44:c0:c4:3a:a4:72:66:17:9a:f6:13:57:d2:4a:
39:33:ff:fb:a3:da:94:b0:2c:d5:75:91:83:53:82:
24:74:92:e2:33:ed:f8:f2:50:1b:2c:f2:20:ad:d7:
d3:64:49:07:ff:48:14:0b:3c:de:5b:e4:82:c2:8c:
b7:e6:bc:54:15:37:1d:f0:81:1a:44:93:83:d6:ed:
6b:cc:f6:8b:16:65:2e:a7:44:fd:9d:7b:9f:a3:a4:
b3:ee:01:8c:a6:fa:4a:88:29:5a:2f:0b:64:57:7e:
dc:ff:f5:33:6e:e8:c6:7f:31:c8:e2:a4:37:0b:4b:
1b:a4:98:79:4d:79:9e:1b:33:08:84:5a:72:8d:84:
26:03:41:0e:4e:70:32:4b:bb:14:f0:ec:b6:81:f8:
ac:54:f9:48:4f:34:bf:f3:8f:cd:a4:6e:63:f0:82:
85:be:2a:ea:56:40:c3:13:3a:eb:ea:5c:1d:47:33:
56:bb:cd:ef:4a:49:4b:4f:f9:e6:2e:07:45:f2:ad:
fc:4d:ae:da:4d:37:2d:5f:84:e0:55:3f:62:58:cd:
76:be:d8:9a:a0:87:6d:fb:0d:05:a8:b6:a1:55:54:
c7:55:77:de:eb:54:13:0e:0e:53:31:82:37:d7:9c:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F8:97:B9:02:6B:58:81:E3:84:98:8F:96:76:99:8C:86:6D:26:AB
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.208.0/21
77.111.240.0/22
91.198.169.0/24
91.221.196.0/23
104.37.32.0/21
185.10.8.0/22
185.164.12.0/22
193.202.110.0/24
195.47.247.0/24
195.206.121.0/24
IPv6:
2001:67c:3c0::/48
2001:67c:28cc::/48
2a02:2350::/32
2a03:53c0::/32
Signature Algorithm: sha256WithRSAEncryption
67:76:ac:6c:6d:b2:ca:bb:00:7c:16:2f:8b:55:23:8c:79:78:
53:be:60:3e:0c:21:9b:69:c0:7e:66:d8:68:2a:4f:cc:a5:f0:
50:6e:1b:41:c3:2e:71:a2:e3:f7:11:7e:99:19:e2:9d:9d:a8:
41:0e:7b:79:62:65:be:b1:39:23:82:56:76:f9:76:b0:fc:ea:
c9:04:c6:7c:e1:4b:10:4c:31:bd:8e:3f:66:6d:b3:39:d1:25:
55:9b:a5:d5:2a:fb:54:39:6b:a8:26:53:a0:55:90:96:9f:51:
48:af:a0:c8:f7:bd:63:a1:84:30:65:d0:de:78:2c:93:b0:71:
66:9a:3a:c6:a4:c4:d5:c8:86:8b:a6:9b:07:dd:3d:53:f6:08:
89:22:46:ac:23:0d:ca:57:3b:ec:b5:f5:4d:b6:73:d3:16:08:
23:e5:4c:e6:59:e3:e5:91:44:ba:6b:a4:bc:4a:20:04:3b:59:
15:a5:ad:9a:21:47:4e:64:61:3b:23:55:82:e6:02:42:e4:41:
a5:42:f1:c9:ef:ff:5f:93:94:af:5d:92:c6:ac:e8:ba:ea:62:
1c:d5:cd:d4:97:a7:64:a0:f5:9f:18:49:8d:d0:c3:33:5d:61:
8d:5a:55:4c:f5:55:71:c9:e7:c8:96:80:cb:34:d8:f5:71:99:
4d:a9:6e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:52 2025 by rpki-client