Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/1-tdTzrCyZd7lEHmJJDJ8ws5WSYg.roa
File: 1-tdTzrCyZd7lEHmJJDJ8ws5WSYg.roa (raw, json)
Hash identifier: 4j/Yryuq0eJvbWon8IZY/muGfuoD1JF1qyyc+MjhZB8=
Subject key identifier: FA:D7:53:CE:B0:B2:65:DE:E5:10:79:89:24:32:7C:C2:CE:56:49:88
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0194F5AADB4593DC241984B6E6510FC5F6C5
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/1-tdTzrCyZd7lEHmJJDJ8ws5WSYg.roa
Signing time: Tue 11 Feb 2025 15:40:02 +0000
ROA not before: Tue 11 Feb 2025 15:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 80.68.159.0/24 maxlen: 24
91.90.193.0/24 maxlen: 24
91.90.195.0/24 maxlen: 24
91.196.7.0/24 maxlen: 24
91.210.164.0/23 maxlen: 23
91.210.167.0/24 maxlen: 24
92.118.149.0/24 maxlen: 24
92.118.150.0/24 maxlen: 24
92.118.151.0/24 maxlen: 24
94.131.17.0/24 maxlen: 24
94.142.255.0/24 maxlen: 24
176.126.163.0/24 maxlen: 24
185.39.30.0/24 maxlen: 24
185.190.251.0/24 maxlen: 24
185.237.224.0/23 maxlen: 23
185.253.44.0/23 maxlen: 23
185.253.46.0/23 maxlen: 23
193.111.210.0/24 maxlen: 24
193.162.47.0/24 maxlen: 24
2a0a:8c41::/32 maxlen: 32
2a0a:8c42::/32 maxlen: 32
2a0a:8c43::/32 maxlen: 32
2a0a:8c44::/32 maxlen: 32
2a0a:8c45::/32 maxlen: 32
2a0a:8c47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:aa:db:45:93:dc:24:19:84:b6:e6:51:0f:c5:f6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Feb 11 15:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fad753ceb0b265dee510798924327cc2ce564988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:07:e7:36:3f:d3:41:01:8e:b1:62:a3:29:
4f:52:c0:f8:85:14:d9:da:ac:90:4f:74:35:b6:a6:
02:ba:f3:30:37:a3:37:5f:03:c1:fd:46:bf:76:9f:
48:41:25:0e:78:8e:a9:d4:ee:38:72:a4:c2:e4:63:
1a:6e:4b:22:31:8e:4e:a9:2d:e4:62:54:e2:2c:24:
23:5f:b0:ea:cb:99:9c:87:fc:4a:8e:a1:0f:9f:4b:
a2:fc:f1:8e:bb:f0:cb:b5:91:02:2e:61:ab:87:19:
21:28:55:8a:e1:e6:28:19:b8:e7:1a:ce:0a:5a:02:
bd:b8:c2:8f:bd:cf:46:d5:1c:33:a5:92:60:39:24:
58:71:57:d9:f9:48:f5:bc:13:b3:e0:2e:b7:bf:38:
52:99:e8:b7:d8:27:55:04:2c:1a:df:f8:98:df:d8:
c6:d4:41:40:9c:8d:a7:c3:d4:9c:da:e0:2f:f2:4a:
2a:fa:e7:0d:47:b7:ef:f5:a0:cc:16:14:bc:77:7e:
d0:d7:cd:88:f5:06:6d:6c:6e:0e:5a:fd:d8:85:59:
36:dc:f2:2d:38:86:75:e0:62:e7:b5:19:3f:2b:b9:
4f:e7:19:e7:52:90:5c:a7:ae:cf:5c:79:48:cb:85:
f9:c2:86:ab:0b:35:52:d8:f0:fb:17:38:e0:84:01:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D7:53:CE:B0:B2:65:DE:E5:10:79:89:24:32:7C:C2:CE:56:49:88
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/1-tdTzrCyZd7lEHmJJDJ8ws5WSYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.159.0/24
91.90.193.0/24
91.90.195.0/24
91.196.7.0/24
91.210.164.0/23
91.210.167.0/24
92.118.149.0-92.118.151.255
94.131.17.0/24
94.142.255.0/24
176.126.163.0/24
185.39.30.0/24
185.190.251.0/24
185.237.224.0/23
185.253.44.0/22
193.111.210.0/24
193.162.47.0/24
IPv6:
2a0a:8c41::-2a0a:8c45:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:8c47::/32
Signature Algorithm: sha256WithRSAEncryption
93:40:55:18:90:62:58:97:02:58:43:e2:0c:28:a3:2a:ef:24:
01:86:74:15:ca:86:e4:41:b6:30:a1:32:7a:ad:1d:96:fe:63:
93:30:8c:7c:da:f8:c2:f2:7e:b6:d1:28:15:40:cf:08:26:16:
49:9e:68:d0:eb:c6:f4:84:f9:2a:57:db:f0:35:09:fd:e4:81:
26:7f:15:ed:54:be:03:ee:96:10:c3:7c:46:6b:56:d1:ed:e1:
83:53:d9:96:8f:9d:81:b1:e0:c9:21:33:2a:34:00:52:39:41:
24:4d:00:a5:5c:db:4d:d4:d9:fe:13:f0:80:fb:93:4c:a9:de:
bf:33:50:61:5b:1c:26:d8:36:9d:fb:19:98:71:97:7e:08:63:
1c:d2:0f:06:4e:94:18:64:2b:45:d6:d2:35:45:a2:62:42:d7:
0f:61:9b:41:8e:cd:26:a5:71:02:3f:bf:28:35:97:c5:30:12:
82:9d:b2:0d:e9:60:79:50:53:ad:65:97:a5:db:d0:9c:5d:de:
95:ca:8e:70:5a:d0:0e:9a:ff:d5:3b:0e:78:d4:90:64:95:f8:
7f:31:47:0f:1d:c0:de:21:2e:71:31:ee:4e:66:c7:2b:3f:bc:
26:8a:6c:83:e1:8b:2c:09:98:18:c7:af:b7:74:f6:4b:05:2c:
24:fe:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:13 2025 by rpki-client