Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6DiPHYmXhjx8dlm5fEGv1KFnYxo.roa
File: 6DiPHYmXhjx8dlm5fEGv1KFnYxo.roa (raw, json)
Hash identifier: AZBYul/WYrAc9HAfNCdaLFVE9sGftC+yaREw1QQ3tuA=
Subject key identifier: E8:38:8F:1D:89:97:86:3C:7C:76:59:B9:7C:41:AF:D4:A1:67:63:1A
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01942220050EC3F1548B5BD2482D41DF77AC
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6DiPHYmXhjx8dlm5fEGv1KFnYxo.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 45.93.213.0/24 maxlen: 24
45.93.214.0/24 maxlen: 24
45.151.234.0/24 maxlen: 24
45.151.235.0/24 maxlen: 24
77.83.246.0/24 maxlen: 24
160.20.156.0/24 maxlen: 24
160.20.157.0/24 maxlen: 24
185.68.186.0/24 maxlen: 24
185.68.187.0/24 maxlen: 24
185.71.214.0/24 maxlen: 24
185.71.215.0/24 maxlen: 24
185.73.180.0/24 maxlen: 24
185.73.181.0/24 maxlen: 24
185.75.132.0/24 maxlen: 24
185.77.138.0/24 maxlen: 24
185.77.139.0/24 maxlen: 24
185.79.132.0/24 maxlen: 24
185.79.133.0/24 maxlen: 24
185.88.98.0/24 maxlen: 24
185.88.99.0/24 maxlen: 24
185.95.228.0/24 maxlen: 24
185.100.156.0/24 maxlen: 24
185.102.114.0/24 maxlen: 24
185.111.24.0/24 maxlen: 24
185.182.130.0/24 maxlen: 24
185.182.131.0/24 maxlen: 24
193.38.228.0/24 maxlen: 24
193.38.229.0/24 maxlen: 24
193.38.230.0/24 maxlen: 24
193.38.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:05:0e:c3:f1:54:8b:5b:d2:48:2d:41:df:77:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8388f1d8997863c7c7659b97c41afd4a167631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:ce:e0:7e:ba:ba:9c:75:17:b3:19:51:a6:
e1:db:ce:43:67:32:e5:11:3f:47:96:5c:57:41:85:
d4:d9:27:3b:2d:f0:5c:9e:df:50:fe:6e:f7:91:fd:
0f:3d:b0:7f:55:e1:70:4d:f6:b1:00:d3:72:7c:0a:
7c:9f:a6:82:e5:c5:2d:91:15:09:d8:97:07:83:1a:
b0:74:8f:f6:bf:f7:04:ae:54:96:37:05:e3:48:ad:
22:55:8e:6a:b0:ca:2a:e1:f0:7c:f4:54:3e:d8:f1:
0a:74:06:12:a9:93:78:05:c5:5d:8b:e2:a5:fb:b0:
7a:f1:f2:30:4d:b8:6c:f1:3c:e1:78:e5:f3:96:67:
ec:36:10:65:3d:a8:9e:c8:a2:8d:d5:9c:de:a9:53:
7a:ca:b4:e4:2a:24:ab:96:1e:62:4f:0b:55:11:0b:
9c:07:84:92:20:a0:26:a8:b5:60:65:4f:cf:d8:31:
38:b1:c0:d9:08:c2:57:d5:37:61:4d:be:4f:70:e7:
30:da:a8:f7:fe:83:61:6f:07:88:c0:06:e7:bb:80:
a7:c8:54:ef:c2:e6:92:3e:3b:0b:91:24:c2:41:79:
20:3c:e8:93:40:cb:9f:7b:61:4d:fa:a5:42:30:06:
e0:f1:16:32:b0:e3:b8:c5:1c:98:49:22:9b:c8:ef:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:8F:1D:89:97:86:3C:7C:76:59:B9:7C:41:AF:D4:A1:67:63:1A
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6DiPHYmXhjx8dlm5fEGv1KFnYxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.213.0-45.93.214.255
45.151.234.0/23
77.83.246.0/24
160.20.156.0/23
185.68.186.0/23
185.71.214.0/23
185.73.180.0/23
185.75.132.0/24
185.77.138.0/23
185.79.132.0/23
185.88.98.0/23
185.95.228.0/24
185.100.156.0/24
185.102.114.0/24
185.111.24.0/24
185.182.130.0/23
193.38.228.0/22
Signature Algorithm: sha256WithRSAEncryption
28:9f:64:f1:6a:c0:e4:f0:27:17:73:a8:6a:02:6e:45:58:cb:
1c:56:59:a4:ca:2a:01:9e:f1:b7:89:14:8a:e8:eb:1e:73:7e:
1c:79:91:fe:3b:27:82:2a:db:3f:0c:da:df:e6:d1:2b:06:57:
81:76:24:47:b7:d7:29:bb:b5:a3:86:b7:cb:c4:c4:88:68:e5:
8e:8c:78:7c:0a:5d:e9:41:0d:72:5e:5b:8e:1e:56:f0:a4:9e:
d5:2a:2b:f1:55:d4:9d:47:cc:63:57:0e:49:5b:3e:99:bb:b5:
77:90:25:f4:0f:81:2e:8f:dc:d7:41:19:6f:93:01:c4:ac:ff:
37:d5:28:91:81:77:83:62:0d:13:aa:76:7a:7c:92:a3:6e:47:
bc:07:1d:cf:1d:31:23:b5:ba:83:0f:f2:8a:2c:91:b6:85:12:
f1:0e:f1:10:67:80:1a:8f:f1:f2:78:ec:df:20:b3:35:bd:10:
dd:4f:37:34:60:a7:ac:1e:a3:e8:14:86:56:10:19:06:fd:9c:
3e:81:dc:0a:cc:d2:cf:2d:51:0b:fb:83:b4:f0:14:d6:a1:d4:
ee:b8:2c:44:c8:8b:d7:34:7a:84:c7:ac:ad:82:0d:05:3f:47:
02:92:f2:a1:12:7c:ae:9a:6d:6e:dc:35:08:65:98:2f:67:24:
98:8c:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:53 2025 by rpki-client