Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa
File: Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa (raw, json)
Hash identifier: K94v285TvMOOo7AcPioAGeK/gkVuCpfkO4FQfselq2s=
Subject key identifier: 4E:DE:65:46:F0:91:E7:D1:26:BC:89:BD:9D:6A:71:89:F2:FC:3E:F4
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0194222012BACC9D04AA0354B973138F024B
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48737
IP address blocks: 93.188.132.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.215.0/24 maxlen: 24
163.171.216.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:12:ba:cc:9d:04:aa:03:54:b9:73:13:8f:02:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ede6546f091e7d126bc89bd9d6a7189f2fc3ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:7f:53:24:c7:bd:a8:f7:a0:d2:e8:6d:68:
d8:82:70:ce:9b:95:b4:95:72:6a:99:9c:3f:49:37:
72:27:0a:21:52:d8:0f:26:e3:f4:a3:7e:a7:ec:b2:
59:3c:b1:16:55:46:3d:c5:4b:08:67:f2:75:e1:95:
6a:a3:f4:07:f2:fc:50:9b:57:17:c6:ef:7d:8d:17:
6a:11:96:db:b9:10:da:c7:89:94:d8:bf:52:04:71:
e3:d2:23:8e:35:b3:33:06:44:76:28:1b:1f:c8:8f:
f5:c4:6d:a3:59:02:85:c5:4b:fc:d0:65:39:30:fd:
19:b0:fc:9a:6f:6f:ba:1a:a6:ef:40:ef:13:d8:98:
b2:ab:ae:c3:a4:77:b2:7d:3b:32:b3:0b:d4:4c:ce:
25:1a:4b:98:82:79:a1:9b:0e:95:e5:69:78:ad:bb:
71:ff:f4:41:be:eb:12:56:d7:20:cc:94:4b:3c:20:
35:34:de:cb:fd:73:1e:f0:d3:06:8d:64:2d:63:76:
ee:f9:89:3f:4d:dd:79:3d:8d:a7:71:3a:b5:73:dc:
7a:32:5a:5e:bd:53:f0:70:fa:b9:7d:40:71:d9:84:
7d:aa:0c:31:1f:9c:eb:25:51:73:1f:22:9c:62:66:
da:02:58:ea:af:a9:3a:32:24:67:58:ca:e0:26:53:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:65:46:F0:91:E7:D1:26:BC:89:BD:9D:6A:71:89:F2:FC:3E:F4
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.132.0/24
93.188.135.0/24
163.171.215.0-163.171.216.255
163.171.252.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3e:24:b5:07:44:a0:d0:41:c7:c3:82:d0:5d:82:38:02:4d:
06:c5:3f:36:08:6d:ae:89:db:6a:97:4a:b1:93:0d:b5:e5:c0:
13:e7:c8:ce:44:dd:24:e4:19:f2:12:9a:16:8f:bf:96:e6:17:
33:2c:68:12:f5:e2:8b:27:c3:12:10:56:8e:be:a8:95:b8:d3:
e9:90:19:b9:2c:18:07:74:1e:28:f3:eb:d3:f7:93:18:62:22:
05:da:80:4e:ff:c4:0b:98:de:a3:9c:d7:a3:52:63:48:9a:e0:
6f:c3:b9:da:35:20:60:89:7b:eb:5e:4c:92:38:6b:67:eb:cd:
c0:ed:83:0a:9d:90:00:4e:4e:c3:7a:c4:b1:6b:4d:b3:cf:8e:
33:39:3b:aa:36:e8:43:23:7f:1a:70:85:36:3b:20:ad:34:38:
3e:a8:67:ec:e8:b2:fa:d1:cd:9f:7e:af:0e:fd:86:d0:54:ed:
65:1e:1f:f2:77:0a:eb:bb:cc:3e:ac:c4:53:86:83:fa:af:4f:
98:ea:5c:4c:eb:01:5f:50:52:02:e9:6d:e2:08:2c:a7:3a:62:
5f:13:33:b8:8c:3a:d6:4a:87:62:71:90:b2:14:7f:6c:5b:fa:
4e:6d:86:39:e8:84:38:3f:b9:1e:05:05:27:bc:c0:36:2d:47:
12:9e:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:27 2025 by rpki-client