Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6vHjjWTJF7m4uJ9AcKU0nbvFilw.roa
File: 6vHjjWTJF7m4uJ9AcKU0nbvFilw.roa (raw, json)
Hash identifier: 8DvC0haT6NgmDdikrhypFYqok51kwr+50yD7/3fQKck=
Subject key identifier: EA:F1:E3:8D:64:C9:17:B9:B8:B8:9F:40:70:A5:34:9D:BB:C5:8A:5C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3B5A19D9C5B0397EFC9AA9CABFA1C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6vHjjWTJF7m4uJ9AcKU0nbvFilw.roa
Signing time: Thu 02 Jan 2025 15:47:56 +0000
ROA not before: Thu 02 Jan 2025 15:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400696
IP address blocks: 45.84.214.0/24 maxlen: 24
45.94.29.0/24 maxlen: 24
45.94.30.0/24 maxlen: 24
45.95.240.0/24 maxlen: 24
45.130.142.0/24 maxlen: 24
2a0f:15c0::/32 maxlen: 48
2a0f:15c2::/32 maxlen: 32
2a0f:15c3::/32 maxlen: 32
2a0f:15c4::/32 maxlen: 32
2a0f:15c5::/32 maxlen: 32
2a0f:15c6::/32 maxlen: 32
2a0f:15c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:b5:a1:9d:9c:5b:03:97:ef:c9:aa:9c:ab:fa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaf1e38d64c917b9b8b89f4070a5349dbbc58a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:53:6e:c5:f9:a2:50:cc:5f:33:1b:3c:7c:
08:83:b8:27:9c:38:a5:15:55:d0:d4:2b:47:b7:33:
6b:2c:79:81:76:99:a5:31:e4:4c:e8:e5:00:1b:a9:
36:39:34:e3:c2:a7:f3:71:30:17:41:31:7c:e4:fa:
d8:09:51:75:25:e1:c8:c0:61:69:77:64:75:7b:95:
2a:81:2e:41:79:f4:fd:a7:ad:31:94:77:24:76:19:
13:e6:c5:b5:44:f8:90:30:de:e2:a5:ee:1a:ef:3f:
3f:e7:2f:74:86:00:6d:21:aa:31:d1:2f:5f:7d:c7:
48:14:7e:d3:b5:27:ce:c7:b7:c5:ac:3b:47:e3:4e:
d6:b7:1b:71:07:52:b8:d5:b5:ed:25:67:5d:d1:6d:
46:2b:dc:09:50:e6:86:75:a6:a0:84:36:8f:43:5d:
08:d4:7e:9a:34:68:92:aa:8f:8a:fc:ce:c8:ec:9d:
74:e1:c2:c2:b7:6b:d8:e7:63:eb:19:74:7d:4a:93:
29:0c:ec:e2:2a:1d:98:30:40:f6:d3:b0:50:da:50:
a0:9c:c3:41:fb:0a:e3:28:bb:b1:f7:39:9c:f9:5c:
50:c6:b7:e4:1d:85:45:4d:82:a0:5e:9f:4b:c6:b8:
f4:f0:d4:fa:60:37:50:10:a0:53:55:e1:52:a0:50:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:E3:8D:64:C9:17:B9:B8:B8:9F:40:70:A5:34:9D:BB:C5:8A:5C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6vHjjWTJF7m4uJ9AcKU0nbvFilw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.214.0/24
45.94.29.0-45.94.30.255
45.95.240.0/24
45.130.142.0/24
IPv6:
2a0f:15c0::/32
2a0f:15c2::-2a0f:15c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:e4:af:51:78:a1:71:1d:a7:ee:99:2a:ff:66:1d:d8:91:70:
97:dd:b9:3a:5d:18:00:cd:ef:6b:4a:90:51:a6:f1:45:df:76:
3a:cd:99:c8:a3:0e:39:03:85:e7:bd:28:0b:6f:01:53:2f:71:
a4:90:ac:ab:16:de:31:5f:cc:b0:f0:c4:4c:43:0c:24:a7:94:
4e:3b:12:71:e2:39:c5:c3:e2:06:f7:a3:83:68:ca:9a:c7:35:
10:7c:9a:60:91:fc:01:07:eb:35:53:3f:92:52:67:b8:58:11:
12:a6:b9:0e:35:d8:7a:99:95:c9:f7:24:91:37:80:6e:69:bf:
f9:89:0e:81:85:4c:03:32:ad:36:79:4e:84:70:d6:cf:eb:0b:
92:08:e0:4a:80:a9:9b:28:2b:c0:6f:33:36:b3:ff:0f:2e:e7:
cb:59:75:fb:93:db:b5:e9:76:c6:8f:ea:b5:33:41:aa:c7:ec:
48:73:2f:39:fb:14:e0:69:4b:e3:3d:7f:40:c3:9a:cb:83:78:
f7:02:a8:e3:f4:b4:3a:b0:a1:14:d5:26:ea:de:a9:34:92:77:
a2:17:5c:27:b0:f2:aa:64:76:80:f9:d8:06:5f:a7:c8:b8:de:
72:76:9e:d7:c3:93:a2:07:6f:8a:ea:52:61:de:3a:73:68:c0:
3a:c9:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:55:46 2025 by rpki-client