Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/_1DWCHYZt3IJUPgYrKUZaMInep8.roa
File: _1DWCHYZt3IJUPgYrKUZaMInep8.roa (raw, json)
Hash identifier: +nXF4K7xpaQsUmrfPkqndd6oPANpWarX/ugo0T1Hdh8=
Subject key identifier: FF:50:D6:08:76:19:B7:72:09:50:F8:18:AC:A5:19:68:C2:27:7A:9F
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 0195378ADE7F83A50432CA478F1779A3EA5E
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/_1DWCHYZt3IJUPgYrKUZaMInep8.roa
Signing time: Mon 24 Feb 2025 10:40:02 +0000
ROA not before: Mon 24 Feb 2025 10:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42656
IP address blocks: 5.134.208.0/21 maxlen: 24
91.194.188.0/23 maxlen: 24
91.207.14.0/23 maxlen: 24
193.203.222.0/23 maxlen: 24
193.203.223.0/24 maxlen: 24
2a02:dc8::/30 maxlen: 48
2a02:dc8::/32 maxlen: 32
2a02:dc8:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:8a:de:7f:83:a5:04:32:ca:47:8f:17:79:a3:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Feb 24 10:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff50d6087619b7720950f818aca51968c2277a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e5:ff:7a:ae:cc:c3:2f:c0:f4:89:f6:82:bd:
93:7d:ed:51:c6:e1:b8:4d:d4:31:c1:eb:9a:63:d5:
87:d9:3d:57:0d:cb:90:f6:64:a9:83:30:31:2f:78:
4b:46:b8:ac:c1:ae:1c:22:62:73:14:1e:25:d3:24:
3d:f9:23:99:19:9a:ff:00:40:c1:16:56:aa:5f:d7:
db:19:36:94:06:42:a4:c7:44:a3:df:a0:5d:b7:11:
6d:89:6f:84:c1:0e:d7:87:90:6b:b1:bd:99:34:ac:
af:fc:c7:82:b7:63:24:f5:4b:22:f5:19:92:d4:99:
ab:ec:07:b6:4f:20:eb:b0:e0:81:55:dc:62:65:de:
d6:51:79:b7:60:ae:54:50:c6:94:7b:24:12:4a:3c:
46:33:6a:8a:50:35:35:ca:84:eb:47:31:68:76:2d:
4a:02:13:4f:73:db:f7:b1:94:b1:8f:db:29:7b:94:
57:f5:ae:65:46:ef:3f:65:e5:92:c0:2f:6c:84:29:
3a:ab:d0:84:42:28:53:24:76:96:3e:a6:1f:1b:48:
35:05:33:f8:49:5e:c0:cf:02:22:8f:0c:87:99:e2:
38:a5:17:68:91:2b:22:9e:db:ef:be:c2:df:9e:e3:
de:f4:90:1b:30:83:12:44:44:37:f3:15:7d:9e:67:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:D6:08:76:19:B7:72:09:50:F8:18:AC:A5:19:68:C2:27:7A:9F
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/_1DWCHYZt3IJUPgYrKUZaMInep8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.208.0/21
91.194.188.0/23
91.207.14.0/23
193.203.222.0/23
IPv6:
2a02:dc8::/30
Signature Algorithm: sha256WithRSAEncryption
73:a8:76:4d:a3:25:ca:7c:e4:0d:e2:b8:3c:aa:9e:db:15:fd:
e2:5a:09:8e:19:7c:e5:b2:70:63:db:8e:f2:5a:da:66:ed:dc:
d7:f5:ec:4e:68:b4:3a:85:52:3f:7a:8e:e7:61:4a:31:e2:d7:
90:2e:ca:64:54:29:7f:9c:4b:47:ae:92:53:2d:d2:f2:ca:f9:
82:6e:53:97:de:3c:57:4d:e4:52:07:de:f8:8a:75:33:4a:31:
ac:97:de:57:1f:46:53:ae:a9:47:00:9a:26:1b:85:38:c8:f1:
ad:7e:57:83:e1:d6:02:67:d6:be:de:ea:f5:fa:7b:8d:b4:19:
7d:62:96:8d:87:f3:95:90:75:bb:93:93:32:59:5e:fd:e8:94:
e6:d4:99:6c:81:52:7f:11:54:07:a8:22:37:e1:c5:33:4d:be:
bf:ec:21:33:c4:03:e9:21:58:4e:5f:79:10:7a:89:24:a0:20:
6e:df:c7:a0:9c:3a:a1:1d:bd:cf:09:b8:98:cb:99:e9:35:aa:
55:5c:67:54:d7:ec:3f:48:7d:32:16:97:7f:c9:6b:e8:be:4d:
b5:59:06:fa:8d:a4:3c:ff:50:56:61:69:23:ca:f2:a5:1c:4f:
80:e8:13:34:2d:15:bd:5c:c8:7e:2e:ff:1f:43:14:4e:0c:94:
c8:42:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:29:15 2025 by rpki-client