Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ru8PdeSs7YY9jJPLbPW2b8rtH8o.roa
File: Ru8PdeSs7YY9jJPLbPW2b8rtH8o.roa (raw, json)
Hash identifier: kr4A/TN031AdprvC4GeKReUIhJZBlw3yGBln7Wegwb4=
Subject key identifier: 46:EF:0F:75:E4:AC:ED:86:3D:8C:93:CB:6C:F5:B6:6F:CA:ED:1F:CA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B38EB3D67AF0FF39A8D28866BA36DB
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ru8PdeSs7YY9jJPLbPW2b8rtH8o.roa
Signing time: Thu 02 Jan 2025 15:47:46 +0000
ROA not before: Thu 02 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.87.20.0/24 maxlen: 24
45.140.214.0/24 maxlen: 24
45.142.204.0/24 maxlen: 24
45.142.206.0/24 maxlen: 24
45.144.156.0/24 maxlen: 24
45.144.158.0/24 maxlen: 24
45.145.249.0/24 maxlen: 24
136.144.25.0/24 maxlen: 24
2a07:e343::/32 maxlen: 32
2a0f:e381::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:8e:b3:d6:7a:f0:ff:39:a8:d2:88:66:ba:36:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ef0f75e4aced863d8c93cb6cf5b66fcaed1fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:ad:9e:0c:83:23:95:d9:7c:3d:92:35:4e:
97:73:52:a6:e3:4d:e4:83:0a:84:3c:9d:53:37:6a:
51:b5:fc:2f:03:d1:50:3f:2d:99:a8:fc:df:ad:77:
7d:fb:8a:e9:cc:74:73:88:3f:0e:06:a2:ae:fe:18:
02:ad:e3:13:b0:8d:c3:c4:12:54:f8:50:34:82:0f:
23:bf:a9:49:35:9d:6b:e0:0f:77:df:0d:55:8c:48:
59:65:f6:8b:20:c8:e5:18:4b:a5:62:2c:be:7d:8e:
4f:5a:16:fc:27:4f:a9:e2:b4:05:72:26:2b:c4:ca:
6f:89:38:07:fa:83:4b:61:8f:8b:cb:58:d9:c1:72:
d4:92:14:51:fd:17:b9:8d:cf:46:7b:be:42:8d:3e:
31:32:5d:1f:3d:22:65:2b:1b:ea:3f:2d:da:e7:e7:
3b:6a:0e:9b:1b:9d:e7:fa:48:77:10:01:6d:40:b2:
b6:60:0d:45:b7:79:f4:c1:d9:8c:4d:ea:ed:fa:6b:
e5:79:af:b4:0b:fd:d6:95:5e:56:1b:43:af:8e:03:
f6:f7:5e:f5:d1:ba:1a:e2:e5:6d:f7:dc:04:c3:04:
e9:66:a5:ca:65:5b:83:17:40:39:fe:2f:9d:e4:b3:
a9:f3:80:0a:f6:71:e6:12:b0:ca:8b:eb:d6:ef:7f:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:0F:75:E4:AC:ED:86:3D:8C:93:CB:6C:F5:B6:6F:CA:ED:1F:CA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Ru8PdeSs7YY9jJPLbPW2b8rtH8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.20.0/24
45.140.214.0/24
45.142.204.0/24
45.142.206.0/24
45.144.156.0/24
45.144.158.0/24
45.145.249.0/24
136.144.25.0/24
IPv6:
2a07:e343::/32
2a0f:e381::/32
Signature Algorithm: sha256WithRSAEncryption
4b:6c:c1:2a:60:8d:f2:fe:4e:ae:c2:66:12:72:a8:33:81:d3:
ff:a6:1e:87:be:35:4f:9e:9c:e5:2e:83:f1:87:13:0f:3d:d4:
be:20:16:d0:8b:00:d7:8e:dd:93:57:92:f9:64:fe:86:e4:ce:
c4:02:de:b5:66:85:f4:38:f7:d2:13:2f:7e:c9:91:84:7f:e6:
f8:43:82:e8:ae:b3:a8:7e:82:29:46:20:27:ee:2d:35:0a:c8:
58:0e:f8:fc:94:82:a5:56:54:f7:c1:d1:0d:7f:05:17:30:a5:
c6:0f:98:2e:84:98:a8:1f:2a:01:e4:7f:92:84:ca:c6:0d:2e:
a1:e1:81:39:e6:78:a1:e8:68:c4:90:ac:78:80:f2:a8:27:02:
6f:3c:b2:d2:8b:87:96:18:2a:a3:b0:b7:ac:39:60:8d:65:10:
b6:0f:b7:ea:ec:0d:99:85:cc:28:86:b2:f8:ba:0b:1f:88:c0:
84:37:6a:fb:9f:a4:b9:b1:13:53:67:6d:60:7c:56:1e:85:bc:
2d:63:88:f1:75:ad:5f:c4:7c:bb:a8:d4:d9:ed:9e:b6:8b:c1:
ff:19:8c:b7:5f:d5:04:fa:2c:ef:e1:e4:a8:10:b6:a2:bd:21:
ba:83:6a:d0:6a:06:e0:48:66:a9:97:2d:8f:bc:e1:d2:02:25:
44:56:cb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:38:39 2025 by rpki-client