Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/_PaUGjvJShI2nma6rn1q_5nZsbw.roa
File: _PaUGjvJShI2nma6rn1q_5nZsbw.roa (raw, json)
Hash identifier: IISCWbKH8fVMYSEIH2kdkWijGfyVlaENW4tYYQwgOus=
Subject key identifier: FC:F6:94:1A:3B:C9:4A:12:36:9E:66:BA:AE:7D:6A:FF:99:D9:B1:BC
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 019427479505A2C2E1ED8BA969CB8CF926BE
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/_PaUGjvJShI2nma6rn1q_5nZsbw.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13287
IP address blocks: 109.234.80.0/24 maxlen: 24
109.234.81.0/24 maxlen: 24
109.234.82.0/23 maxlen: 23
109.234.82.0/24 maxlen: 24
109.234.84.0/24 maxlen: 24
109.234.85.0/24 maxlen: 24
109.234.87.0/24 maxlen: 24
185.19.68.0/22 maxlen: 22
185.33.66.0/24 maxlen: 24
185.33.67.0/24 maxlen: 24
185.111.184.0/22 maxlen: 22
185.111.184.0/24 maxlen: 24
185.111.185.0/24 maxlen: 24
213.162.192.0/24 maxlen: 24
213.162.193.0/24 maxlen: 24
213.162.195.0/24 maxlen: 24
213.162.196.0/22 maxlen: 24
213.162.197.0/24 maxlen: 24
213.162.200.0/22 maxlen: 22
213.162.204.0/24 maxlen: 24
213.162.205.0/24 maxlen: 24
213.162.206.0/24 maxlen: 24
213.162.207.0/24 maxlen: 24
213.162.208.0/23 maxlen: 23
213.162.210.0/24 maxlen: 24
213.162.211.0/24 maxlen: 24
213.162.212.0/24 maxlen: 24
213.162.214.0/24 maxlen: 24
213.162.215.0/24 maxlen: 24
213.162.216.0/22 maxlen: 22
213.162.217.0/24 maxlen: 24
213.162.218.0/24 maxlen: 24
213.162.219.0/24 maxlen: 24
213.162.220.0/24 maxlen: 24
213.162.221.0/24 maxlen: 24
2a02:23a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:95:05:a2:c2:e1:ed:8b:a9:69:cb:8c:f9:26:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcf6941a3bc94a12369e66baae7d6aff99d9b1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:90:1c:49:a3:15:34:2b:a0:2e:d0:63:62:
52:f4:d8:d0:00:81:ff:bc:38:70:fc:64:c7:33:0a:
44:67:7e:ce:ac:a7:14:6c:33:cc:08:e8:f8:a2:92:
73:80:bb:11:19:22:5c:e9:fa:7a:5a:26:89:c9:26:
85:89:fc:bf:5a:b1:2e:4a:0b:1a:5f:d6:63:0a:65:
43:69:20:d8:d9:4e:b9:ef:bf:1c:ed:bf:d1:c9:d8:
38:fd:48:06:a3:7b:0d:ba:d9:b3:db:2a:57:4c:10:
09:3a:99:07:f2:52:c8:a5:55:bc:a0:b8:96:66:03:
da:b6:6e:1b:84:41:3d:55:a6:6a:83:f2:34:a1:c9:
c8:4f:0c:0b:ac:5b:7c:bf:5b:99:e8:f2:7c:d8:b2:
69:df:51:c4:68:9a:d6:68:16:d7:d4:e0:a8:7f:2a:
57:11:25:79:66:d5:6b:1e:96:62:f7:ec:c8:1a:50:
aa:a1:4f:af:5c:66:df:32:a1:21:c7:5e:41:6b:5d:
7a:61:3a:8e:da:f4:12:15:bf:07:a9:45:2f:f3:7d:
74:e2:25:06:ad:f1:5a:1a:7f:e2:02:a4:ae:60:06:
0a:79:d9:3f:b6:25:ad:e7:f4:12:dc:0e:3d:d1:27:
ed:80:82:5a:55:ce:bf:e9:d4:b1:e0:6d:e1:54:00:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:94:1A:3B:C9:4A:12:36:9E:66:BA:AE:7D:6A:FF:99:D9:B1:BC
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/_PaUGjvJShI2nma6rn1q_5nZsbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.80.0-109.234.85.255
109.234.87.0/24
185.19.68.0/22
185.33.66.0/23
185.111.184.0/22
213.162.192.0/23
213.162.195.0-213.162.212.255
213.162.214.0-213.162.221.255
IPv6:
2a02:23a0::/32
Signature Algorithm: sha256WithRSAEncryption
01:60:58:de:6c:72:37:82:94:6d:41:7d:4e:4e:9c:18:ff:a4:
97:84:ce:0a:11:fe:3e:38:8d:de:e7:aa:81:c5:fa:68:4b:de:
d6:dd:1d:70:a9:e1:80:77:c8:c8:fe:02:f7:b7:97:ce:84:21:
d1:5c:d1:f4:e1:b7:0a:ec:8f:a5:c8:1f:05:24:49:52:59:88:
b3:f3:e9:f9:53:b9:d8:5d:45:14:96:8d:0e:dd:a4:fd:19:4e:
e0:1a:03:ae:02:f4:ac:4f:33:35:39:0c:35:3e:75:b1:6f:9b:
7f:d5:15:ba:29:b8:85:9c:3e:94:30:49:7d:2d:32:2c:7b:bd:
b6:89:69:03:cf:1d:38:ed:72:d5:b8:21:20:f4:ee:3a:06:83:
92:97:5e:ff:65:8e:8e:d9:6a:72:18:11:a2:ca:d8:4b:1b:fb:
8e:0f:a9:28:d1:1f:7d:9b:00:38:7f:bb:87:24:88:f3:d8:dd:
07:d4:6f:03:ba:c6:df:9d:c8:01:fc:d9:21:e1:b2:7a:4d:69:
ec:b9:39:63:4c:8a:5f:6f:40:2d:1d:52:13:a1:4f:38:46:9b:
96:1b:15:04:23:20:c6:b1:a9:5c:02:b1:2c:9f:05:9b:1a:df:
06:4e:7b:0d:99:8e:77:d3:43:62:fd:9a:a5:e5:35:3c:51:95:
57:bf:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:00:19 2025 by rpki-client