Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/eTJhKe-LETepmtUCJc23KDC15Os.roa
File: eTJhKe-LETepmtUCJc23KDC15Os.roa (raw, json)
Hash identifier: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=
Subject key identifier: 79:32:61:29:EF:8B:11:37:A9:9A:D5:02:25:CD:B7:28:30:B5:E4:EB
Certificate issuer: /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial: 0194282326F0EE1FE858109984ABBABA3BAB
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/eTJhKe-LETepmtUCJc23KDC15Os.roa
Signing time: Thu 02 Jan 2025 17:49:39 +0000
ROA not before: Thu 02 Jan 2025 17:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42411
IP address blocks: 185.202.140.0/24 maxlen: 24
185.202.141.0/24 maxlen: 24
185.202.142.0/23 maxlen: 23
185.202.142.0/24 maxlen: 24
185.202.143.0/24 maxlen: 24
195.122.64.0/24 maxlen: 24
195.122.65.0/24 maxlen: 24
195.122.66.0/24 maxlen: 24
195.122.68.0/24 maxlen: 24
195.122.69.0/24 maxlen: 24
195.122.70.0/24 maxlen: 24
195.122.71.0/24 maxlen: 24
195.122.74.0/24 maxlen: 24
2a0b:1940::/48 maxlen: 48
2a0b:1940:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:26:f0:ee:1f:e8:58:10:99:84:ab:ba:ba:3b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
Validity
Not Before: Jan 2 17:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79326129ef8b1137a99ad50225cdb72830b5e4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:20:9a:25:39:b7:60:37:6c:09:78:ec:d2:
2a:41:28:aa:09:cd:ae:5e:1d:58:bb:dc:f5:a1:99:
ab:bd:85:bf:1b:0f:ab:52:0c:71:57:66:e4:a0:0a:
f7:d7:d4:7e:2e:7b:37:eb:74:58:1d:bc:d7:86:08:
44:6e:ee:11:0b:8d:0b:a5:62:d6:dd:ce:4e:6d:85:
c0:36:0d:99:81:c6:4f:4a:e5:7c:4c:7d:34:91:f1:
84:28:e2:2b:c0:6a:a7:2c:88:58:ac:02:e9:a7:81:
e1:3e:ff:fc:2c:e7:e2:e1:12:c7:46:a8:c6:ad:b7:
97:94:cf:3a:bc:9d:68:88:51:23:00:99:f1:0a:2d:
66:ae:78:e5:3f:5c:99:d4:0f:02:e8:d7:f6:22:e2:
48:97:0e:09:26:0d:07:13:e1:b4:e5:0c:20:01:55:
39:32:44:72:83:02:4f:62:4f:e7:1f:5b:f2:12:b4:
93:df:38:f3:4c:bd:59:68:81:c5:ec:a9:fb:78:87:
0b:ad:db:d8:04:5a:09:cc:ca:00:94:a4:57:27:5c:
2e:d0:b0:a0:cc:6e:6c:3a:53:98:a7:2b:67:5d:fb:
26:87:74:7e:d7:de:4a:98:04:82:8e:5f:20:b3:de:
89:a8:1b:8a:8a:a7:d8:62:dd:de:cc:dc:78:75:15:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:61:29:EF:8B:11:37:A9:9A:D5:02:25:CD:B7:28:30:B5:E4:EB
X509v3 Authority Key Identifier:
keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/eTJhKe-LETepmtUCJc23KDC15Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.140.0/22
195.122.64.0-195.122.66.255
195.122.68.0/22
195.122.74.0/24
IPv6:
2a0b:1940::/47
Signature Algorithm: sha256WithRSAEncryption
15:80:6a:d3:1c:33:bf:73:8a:92:ef:7d:79:d7:6a:59:55:ca:
ec:b5:f6:0f:2d:b6:26:90:e3:17:22:21:68:ed:2e:71:0e:07:
c9:c3:f1:2f:14:87:de:10:8f:e0:a8:22:a5:07:00:b0:1f:91:
99:9a:f4:50:14:3d:9e:50:8f:db:0e:89:0d:d4:03:0d:19:59:
aa:9c:bc:d9:45:38:a1:24:4a:3e:b9:f7:30:36:ab:14:f4:28:
be:ab:8f:42:cd:3e:33:2e:05:29:ea:0d:a3:cb:2f:f1:08:d3:
5a:aa:21:9e:e5:a5:a8:78:0e:1d:fd:55:13:85:5c:99:63:2f:
f5:aa:b8:d9:cc:77:9e:86:94:df:14:79:78:16:19:02:99:5e:
2f:94:fa:88:a0:47:61:35:9a:03:42:19:7e:14:85:f4:60:f2:
16:6f:71:ce:99:62:d5:83:64:49:4a:12:57:44:83:89:ee:c0:
16:3b:35:bb:8b:08:36:81:87:f3:dd:76:d9:4d:83:9c:14:79:
46:41:9d:67:64:6f:73:2b:1d:11:32:db:e0:13:95:a2:60:ea:
5e:1b:94:d5:0b:86:96:52:3d:54:e4:ff:1d:cd:4a:c4:fe:86:
0a:77:b7:45:28:7f:3f:70:2d:97:ba:e9:0c:4e:7e:df:25:d2:
d3:1e:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:17 2025 by rpki-client