Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/pVu2j0EJCMMdBZE3gYcjdze0MJw.roa
File: pVu2j0EJCMMdBZE3gYcjdze0MJw.roa (raw, json)
Hash identifier: smTFngwmoe2BMrTIAR1rWR3m1Bo7KfOKZGk2cxj/sgk=
Subject key identifier: A5:5B:B6:8F:41:09:08:C3:1D:05:91:37:81:87:23:77:37:B4:30:9C
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 019425220815E25FF109563E979A8EACE142
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/pVu2j0EJCMMdBZE3gYcjdze0MJw.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198651
IP address blocks: 185.153.200.0/24 maxlen: 24
185.153.202.0/24 maxlen: 24
185.153.203.0/24 maxlen: 24
2a07:8980::/29 maxlen: 29
2a07:8980::/32 maxlen: 32
2a07:8980:18::/48 maxlen: 48
2a07:8980:1a::/48 maxlen: 48
2a07:8980:43::/48 maxlen: 48
2a07:8980:44::/48 maxlen: 48
2a07:8980:101::/48 maxlen: 48
2a07:8980:102::/48 maxlen: 48
2a07:8980:1000::/48 maxlen: 48
2a07:8980:6000::/48 maxlen: 48
2a07:8981::/32 maxlen: 32
2a07:8982::/32 maxlen: 32
2a07:8983::/36 maxlen: 36
2a07:8983:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:08:15:e2:5f:f1:09:56:3e:97:9a:8e:ac:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a55bb68f410908c31d0591378187237737b4309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:bb:8b:92:21:d1:d3:db:84:1a:e8:6c:44:
78:a5:09:de:bd:29:d5:65:b9:a6:3d:b4:9a:10:be:
02:f1:45:fa:3e:68:c4:63:e5:36:2b:3a:e8:c2:94:
da:62:b3:2b:f9:38:a0:8d:1c:68:75:4c:13:a5:31:
7d:b8:3d:f3:bb:e4:4a:a2:bd:02:f5:46:a0:e7:21:
6c:1a:44:db:93:53:b4:1a:95:9e:68:c4:7e:61:5a:
f7:cd:76:da:d8:d2:b5:6b:ba:90:96:2c:1f:b6:e1:
15:26:88:10:6c:07:3d:67:3b:b3:72:0a:df:62:a2:
b9:02:af:c7:a4:f2:64:bb:e5:e8:4d:e5:c5:21:91:
02:9c:d7:70:95:11:34:fa:d9:60:40:4b:52:2f:9c:
1f:b3:a7:2d:05:cd:3f:49:fa:cd:fb:05:03:5c:2e:
44:11:9d:7b:24:26:9d:fc:75:88:ba:84:ee:a1:58:
3a:e8:52:8d:7e:d0:86:7d:95:77:28:5a:32:b9:7d:
3f:c2:3c:f3:ed:73:d7:9f:06:82:d1:95:3c:4e:dd:
95:c8:97:f3:c1:17:71:7b:04:3e:13:c1:49:1f:0f:
e4:c1:62:2c:ad:6b:28:17:af:1b:e3:c7:bf:ae:07:
24:ec:3d:12:ae:f4:80:b9:62:8d:43:90:5f:b2:bb:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:B6:8F:41:09:08:C3:1D:05:91:37:81:87:23:77:37:B4:30:9C
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/pVu2j0EJCMMdBZE3gYcjdze0MJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.200.0/24
185.153.202.0/23
IPv6:
2a07:8980::/29
Signature Algorithm: sha256WithRSAEncryption
00:e7:1d:a1:fa:ef:45:1c:22:6c:d1:9b:ae:d2:92:a5:f0:f5:
d0:b6:cb:8d:b2:22:3e:09:1a:c8:36:67:2b:a7:ee:b5:fb:6e:
5f:19:15:35:8f:5e:31:bf:ec:3e:18:9b:f8:eb:a5:5c:df:3e:
7f:40:9a:02:b2:59:ab:46:1a:5d:d2:d5:15:ef:2a:7f:5d:cb:
62:92:73:a7:b7:37:20:37:6e:cd:c3:b4:4c:58:03:45:80:72:
ed:fd:e4:ad:e4:15:2d:a7:0b:51:ac:f5:f0:57:52:2d:fb:f3:
ae:e7:dc:2a:43:f1:cf:34:75:35:f9:04:b1:79:d6:13:15:37:
84:3b:8f:ef:75:eb:3a:a7:48:e4:3f:67:af:f1:cf:30:62:18:
0b:37:97:e4:4e:af:97:60:45:4f:bc:07:d0:d7:db:85:2e:68:
4d:ab:3d:c9:84:11:1d:0a:95:6b:55:04:72:e2:f8:fb:9a:65:
a3:ad:76:e9:aa:9d:bc:c4:27:15:1d:24:1c:a0:0a:de:33:75:
fb:e2:e1:04:e6:00:43:5d:76:88:ca:e6:28:32:95:44:9b:8a:
7e:d9:5c:dc:a5:87:8e:c1:50:f7:88:49:ef:90:60:c4:3f:f0:
c4:d6:8b:32:fa:11:00:7f:5b:65:34:0e:bd:a6:fe:82:9b:0b:
37:47:f5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:52:13 2025 by rpki-client