Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/bZHncdmF5KrWNlZWpNRpsaE6nbQ.roa
File: bZHncdmF5KrWNlZWpNRpsaE6nbQ.roa (raw, json)
Hash identifier: 7MucZNPxoy6xDKGVNK0X6Z3pxNOoq8ocl4uzKyv0GQI=
Subject key identifier: 6D:91:E7:71:D9:85:E4:AA:D6:36:56:56:A4:D4:69:B1:A1:3A:9D:B4
Certificate issuer: /CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Certificate serial: 0194266BE385018D8535D897957C52386CDD
Authority key identifier: 52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/bZHncdmF5KrWNlZWpNRpsaE6nbQ.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59816
IP address blocks: 185.70.132.0/22 maxlen: 22
185.70.132.0/24 maxlen: 24
185.70.133.0/24 maxlen: 24
185.70.134.0/24 maxlen: 24
185.70.135.0/24 maxlen: 24
185.241.36.0/22 maxlen: 22
185.241.36.0/24 maxlen: 24
185.241.37.0/24 maxlen: 24
185.241.38.0/24 maxlen: 24
185.241.39.0/24 maxlen: 24
185.251.224.0/22 maxlen: 22
185.251.225.0/24 maxlen: 24
185.251.226.0/24 maxlen: 24
185.251.227.0/24 maxlen: 24
185.254.88.0/22 maxlen: 22
185.254.88.0/24 maxlen: 24
185.254.89.0/24 maxlen: 24
185.254.90.0/24 maxlen: 24
185.254.91.0/24 maxlen: 24
194.147.120.0/22 maxlen: 22
194.147.120.0/24 maxlen: 24
194.147.121.0/24 maxlen: 24
194.147.122.0/24 maxlen: 24
194.147.123.0/24 maxlen: 24
2a05:2a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e3:85:01:8d:85:35:d8:97:95:7c:52:38:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ad19786dd54b35a4b96ad3fbc5793278e4474
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d91e771d985e4aad6365656a4d469b1a13a9db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2e:b7:b7:96:d2:53:d2:2b:f4:d0:a6:a9:64:
e4:95:a9:81:23:7b:01:0e:ad:b4:fd:b3:9f:59:04:
b8:3e:b0:f2:76:f4:41:c5:de:37:4c:78:2d:1b:34:
96:61:82:33:0e:ab:cd:9e:72:59:e8:71:9d:21:5e:
da:d9:a9:60:a7:a8:66:8e:31:0e:91:ac:1d:b6:a7:
52:c6:19:2f:92:f5:7c:33:9e:8f:4e:ba:49:6d:bd:
16:fc:0c:90:fd:fc:94:c9:44:2d:ba:4a:70:bc:b4:
97:8d:4e:7f:bc:a6:88:05:45:fd:09:1b:c1:aa:1f:
8b:58:e9:fd:f6:fc:6f:fd:f2:88:2f:c2:80:d5:0e:
fa:a6:67:23:73:0f:3d:c8:5e:b7:5b:93:e7:5f:c7:
eb:e1:1f:65:da:b9:6d:57:07:e2:71:85:f5:27:6b:
ff:5d:9c:39:af:18:d3:96:39:83:58:08:1c:fa:07:
92:ff:53:77:79:43:a3:fe:33:dc:a1:ff:eb:0b:23:
86:33:e3:06:88:5e:68:8c:aa:0d:29:45:c7:45:d1:
fe:c2:14:b0:88:96:72:53:23:c4:8c:c6:38:da:28:
ff:e3:74:9f:9d:f2:bf:52:6d:60:2a:e6:0a:f0:aa:
bd:ee:74:af:93:0e:2c:7f:0a:50:bb:ae:d1:bb:15:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:E7:71:D9:85:E4:AA:D6:36:56:56:A4:D4:69:B1:A1:3A:9D:B4
X509v3 Authority Key Identifier:
keyid:52:7A:D1:97:86:DD:54:B3:5A:4B:96:AD:3F:BC:57:93:27:8E:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnrRl4bdVLNaS5atP7xXkyeORHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/bZHncdmF5KrWNlZWpNRpsaE6nbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/698f5e-58c2-4a43-9c6a-155c72c1a723/1/UnrRl4bdVLNaS5atP7xXkyeORHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.132.0/22
185.241.36.0/22
185.251.224.0/22
185.254.88.0/22
194.147.120.0/22
IPv6:
2a05:2a00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:e4:ab:70:19:b4:bc:7e:bc:3f:65:f9:ef:e1:69:f9:03:8e:
05:ce:fb:ba:54:08:c0:32:07:54:84:e5:56:71:93:70:d5:a9:
df:51:51:2d:58:1e:ba:6c:21:b9:29:10:c5:fb:56:fd:9e:1e:
76:ed:60:7a:58:6e:a4:93:cb:54:0f:bc:da:03:ba:ff:ba:bf:
2f:e0:7d:06:fb:97:0e:f4:94:fc:a8:e7:ef:71:21:d5:c5:67:
b0:07:42:aa:91:27:fa:02:0d:a9:81:b4:23:a6:c1:19:ef:1a:
24:c3:f7:14:1c:e3:91:99:85:39:bf:96:2b:b0:d1:f2:6a:ae:
86:d2:ba:2e:d5:e4:59:09:4f:72:a4:47:7c:ce:3c:c5:3d:14:
07:fb:47:4a:3f:af:46:a1:13:73:e6:b2:dd:8a:41:d0:bb:f4:
e9:eb:13:dd:13:51:6e:c7:ea:15:68:ae:4d:c2:55:8e:2f:67:
5f:45:c7:0f:9d:2e:b9:9b:67:bd:b4:5b:5d:41:86:ec:39:38:
31:21:be:ea:74:98:67:c5:28:94:21:ff:a1:95:f0:e1:73:47:
cf:75:d9:96:8f:fb:32:5a:8a:cc:c4:86:55:44:aa:cb:98:c6:
fa:dc:d2:d2:22:e1:d6:80:c9:54:40:78:d5:af:59:12:e8:aa:
3a:82:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:16 2025 by rpki-client