Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/YoDPQ8jxpF-CN2VHgKxtvvUR3bQ.roa
File: YoDPQ8jxpF-CN2VHgKxtvvUR3bQ.roa (raw, json)
Hash identifier: g/qsR0k5Ei+SDVv91fZQXrt72mIklFPFEABHdzZ/ZJE=
Subject key identifier: 62:80:CF:43:C8:F1:A4:5F:82:37:65:47:80:AC:6D:BE:F5:11:DD:B4
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 019420D6046DAAEEC5BDED5C660D66129C89
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/YoDPQ8jxpF-CN2VHgKxtvvUR3bQ.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 2.59.132.0/22 maxlen: 24
45.145.40.0/22 maxlen: 24
45.157.232.0/22 maxlen: 24
62.192.153.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
176.96.136.0/22 maxlen: 24
185.94.29.0/24 maxlen: 24
185.219.84.0/24 maxlen: 24
185.254.96.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
194.48.217.0/24 maxlen: 24
2a0c:4ac0::/29 maxlen: 40
2a0d:5940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:04:6d:aa:ee:c5:bd:ed:5c:66:0d:66:12:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6280cf43c8f1a45f8237654780ac6dbef511ddb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:d2:41:1f:f6:c0:e2:ae:bb:f3:92:35:b2:
89:dd:7c:63:ea:cf:06:d7:a7:b5:10:de:56:b9:68:
1e:de:5d:b5:a4:c4:bf:76:52:f7:aa:4d:ef:50:b2:
4a:78:dc:28:5e:d2:a4:ea:63:33:bc:98:8d:25:89:
c5:b9:bd:b2:d9:ee:ba:1b:69:4f:0f:32:8b:96:de:
33:52:8a:d4:96:d4:86:6b:07:f5:d8:64:84:40:d4:
e3:72:b7:f3:64:6b:e2:ee:af:ae:52:ec:4f:9b:2c:
e5:f3:5f:d7:d5:b0:ee:18:4b:8d:13:9e:88:af:a5:
ab:c4:07:6b:77:de:d9:b8:c2:90:12:cb:f9:4d:5f:
f4:9e:b5:8d:11:2e:7f:95:16:8b:87:d1:21:59:1c:
c7:c7:d3:c3:14:85:13:be:5a:24:61:c5:b3:f1:6a:
15:59:8c:da:d7:fa:9c:d7:ee:4a:fd:21:c4:42:02:
62:35:74:53:96:0f:de:94:32:84:1c:67:81:50:50:
a8:98:21:a4:18:20:29:64:9f:e0:a6:18:05:c1:ce:
5e:e0:2f:68:3f:c3:68:18:b2:bf:cb:70:80:80:9d:
51:9e:b5:1e:88:77:ae:29:74:66:45:8c:52:ee:bd:
25:df:35:4a:18:e8:de:c2:59:89:86:9b:85:f9:ed:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:CF:43:C8:F1:A4:5F:82:37:65:47:80:AC:6D:BE:F5:11:DD:B4
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/YoDPQ8jxpF-CN2VHgKxtvvUR3bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.145.40.0/22
45.157.232.0/22
62.192.153.0/24
94.143.231.0/24
176.96.136.0/22
185.94.29.0/24
185.219.84.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
194.48.217.0/24
IPv6:
2a0c:4ac0::/29
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
a5:a6:e2:3b:c1:87:81:30:56:0e:65:26:bb:40:16:73:c1:2f:
05:6b:14:10:b5:18:8c:dc:6f:aa:85:97:30:5e:9d:7a:a5:37:
70:3c:07:4e:7a:d4:4a:aa:59:f8:97:6e:24:fb:de:b3:63:95:
dc:d1:34:5e:48:ba:c5:ed:d8:c1:31:83:02:ed:fc:e2:34:ab:
da:e5:73:14:d5:0f:04:93:26:43:42:89:97:93:ab:db:d8:6e:
b6:3f:9c:b5:b8:a2:32:54:d5:39:20:f2:9c:28:87:fd:e8:37:
07:3f:f1:f2:b9:aa:fb:46:22:01:ed:75:b6:02:52:30:35:b3:
8e:0c:40:bd:45:57:1b:d9:66:5e:0a:53:bc:47:8f:b3:30:6e:
07:2a:c2:44:ff:50:e0:b9:ea:b9:7a:02:34:16:6c:c3:74:f5:
64:a6:8b:81:c6:58:05:c1:1c:30:49:03:5c:20:10:25:f6:b6:
6f:47:fe:2e:d2:b0:16:5c:c6:be:a2:64:d1:8d:06:31:22:bf:
7c:d3:ef:e2:24:d5:09:17:08:19:03:70:21:ed:71:90:10:2b:
68:02:18:af:56:74:b6:96:dd:12:dc:93:cc:01:df:dc:ad:cc:
8f:e6:03:5e:9a:2b:5a:15:11:44:f9:2b:97:ee:87:06:54:31:
d8:ba:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:07 2025 by rpki-client