Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CUlLGJ5fiiKDYEq3ufoiYfmk8bQ.roa
File: CUlLGJ5fiiKDYEq3ufoiYfmk8bQ.roa (raw, json)
Hash identifier: y7Tg4/RK7BgjlwcVcG0FjBWUwwsAbsRH4U/0gZxOEgA=
Subject key identifier: 09:49:4B:18:9E:5F:8A:22:83:60:4A:B7:B9:FA:22:61:F9:A4:F1:B4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143F0096F97602182D6CD6F5CECED96
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CUlLGJ5fiiKDYEq3ufoiYfmk8bQ.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 82.152.90.0/23 maxlen: 24
82.153.55.0/24 maxlen: 24
82.153.65.0/24 maxlen: 24
82.153.135.0/24 maxlen: 24
82.163.16.0/24 maxlen: 24
89.213.40.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
89.213.219.0/24 maxlen: 24
89.213.239.0/24 maxlen: 24
194.105.81.0/24 maxlen: 24
213.218.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f0:09:6f:97:60:21:82:d6:cd:6f:5c:ec:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09494b189e5f8a2283604ab7b9fa2261f9a4f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:0a:db:d1:61:54:d3:e6:90:c9:88:0c:f3:
73:22:49:4f:1f:44:c9:05:61:a4:6a:8c:d6:d6:a7:
d8:e5:c7:9b:04:32:9f:42:dd:53:14:7b:e6:94:43:
1c:01:f0:15:f0:11:38:04:ae:9c:eb:4c:9f:3d:4e:
c0:74:7c:0a:f8:43:b7:f2:a9:4e:ce:64:75:44:4e:
a9:b8:a3:67:cf:bb:ea:fc:cd:28:ee:56:52:1e:84:
1f:b9:31:dc:34:9e:4c:c9:ea:50:72:a7:89:35:a0:
64:3f:f3:13:4e:40:2d:14:fd:4d:c5:2b:77:c8:12:
fb:57:26:dc:f2:09:26:f2:05:59:b6:bd:68:6b:1d:
5b:26:41:fd:9e:e9:1f:1f:00:7b:85:f4:cd:04:b9:
33:7e:d7:13:bf:0a:81:8a:3b:07:8f:b9:8a:af:87:
7c:2e:e2:72:ce:92:01:16:0d:3a:ad:e7:17:a3:c7:
85:29:40:e2:f0:75:66:60:7a:aa:a4:a6:ac:56:d7:
ea:ec:87:eb:8d:13:6f:bf:59:f1:3a:74:6b:52:46:
8c:98:f5:bc:cc:d1:c4:77:1b:04:e1:e4:e4:85:f3:
96:87:7a:42:bb:bf:e1:b5:00:00:29:53:0a:8f:62:
74:dd:cf:9d:dd:60:b3:7a:65:d3:60:7a:7e:ff:9d:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:49:4B:18:9E:5F:8A:22:83:60:4A:B7:B9:FA:22:61:F9:A4:F1:B4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CUlLGJ5fiiKDYEq3ufoiYfmk8bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.90.0/23
82.153.55.0/24
82.153.65.0/24
82.153.135.0/24
82.163.16.0/24
89.213.40.0/24
89.213.182.0/24
89.213.184.0/24
89.213.219.0/24
89.213.239.0/24
194.105.81.0/24
213.218.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:13:46:9b:87:50:f8:77:8e:bf:a3:93:2a:fa:de:78:20:3b:
7b:1e:bc:ba:cb:7f:53:35:a7:51:39:6d:bb:8a:8d:9c:61:33:
de:0d:7c:cd:88:7b:eb:f0:28:1b:f0:44:2a:68:02:f0:10:47:
a1:d8:ce:e3:3c:e2:e6:aa:29:38:a5:14:37:92:53:11:65:85:
52:15:17:6a:61:d1:b5:10:b3:f7:27:80:9c:fc:e4:68:15:be:
2e:34:f0:35:f9:0c:8b:97:95:95:52:53:8f:20:3c:cf:e5:72:
bd:c0:b4:11:bd:4d:50:fb:60:a3:2d:dd:7b:ec:32:b7:8f:e6:
6f:c2:87:54:ca:a7:60:c8:4a:99:3b:b3:b8:8e:49:c1:2c:08:
cc:51:1d:22:9d:95:1a:e6:1e:db:81:8f:d1:1a:d5:81:98:ae:
1b:64:89:d7:90:52:3f:2d:28:4e:fc:67:cc:06:22:8a:eb:1e:
c0:0f:fe:73:9f:7d:b9:f9:25:5f:02:29:3f:61:3e:91:f5:19:
97:ed:76:92:5b:a3:77:0a:a1:3c:5f:17:25:39:c9:f1:fd:84:
1a:a0:16:0e:5a:d5:e0:67:db:2f:36:ec:66:52:34:12:f6:45:
cd:e7:79:50:88:48:ab:c9:5f:3e:ae:2c:27:0a:3a:1c:75:03:
49:f0:2c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:07 2025 by rpki-client