Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa
File: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (raw, json)
Hash identifier: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=
Subject key identifier: 13:4A:0F:61:30:0D:C1:7E:12:55:F9:A8:E0:6E:01:6F:F1:5F:7E:57
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 01942068572EB63383D90A5E25F42DDEC696
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50821
IP address blocks: 46.39.96.0/19 maxlen: 19
79.142.240.0/20 maxlen: 20
89.255.224.0/20 maxlen: 20
109.238.128.0/20 maxlen: 20
145.14.96.0/19 maxlen: 19
145.40.16.0/20 maxlen: 20
147.28.64.0/19 maxlen: 19
178.16.208.0/20 maxlen: 20
178.251.128.0/21 maxlen: 21
185.81.108.0/22 maxlen: 22
212.100.96.0/19 maxlen: 19
217.69.144.0/20 maxlen: 20
2001:1ba8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:57:2e:b6:33:83:d9:0a:5e:25:f4:2d:de:c6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=134a0f61300dc17e1255f9a8e06e016ff15f7e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:c6:f1:dc:f2:9d:11:ab:23:92:40:23:86:
40:a7:ef:20:ed:7b:8c:f9:88:de:b9:96:57:80:fc:
1a:56:df:a5:96:16:38:f0:3e:4b:0c:42:d0:ef:42:
70:93:2a:f7:aa:2f:9c:72:79:70:80:2c:2c:90:00:
c6:18:a0:6a:25:36:6b:74:ce:ed:a0:23:41:45:b3:
35:67:3b:55:47:b3:16:78:93:4c:fe:d9:2c:e0:13:
42:84:26:52:d0:35:00:ca:d2:06:42:4b:c8:78:40:
1b:71:57:37:11:20:fe:5c:8b:88:db:b0:9a:ff:b3:
a0:94:8d:f7:c5:dd:1d:bf:aa:8f:4e:f7:be:98:a4:
48:30:12:de:90:fb:78:bb:d7:69:72:d4:bf:60:4f:
b9:9e:79:38:3d:0a:85:ec:c4:45:a7:e9:0d:d7:26:
44:67:23:c7:08:91:f9:48:69:a8:a9:34:42:c6:62:
d8:a0:ef:18:5e:6b:33:e4:0f:54:23:e6:a5:d8:5a:
8d:d2:8e:94:f8:c7:8b:a7:4a:2b:8e:6a:8c:a1:0c:
28:b4:53:10:b3:03:5b:75:32:13:4f:7e:44:ca:36:
78:8a:f6:4b:d2:be:c7:44:bc:8c:b0:e5:3b:f6:fe:
8f:56:4a:2f:8b:84:98:2f:0d:b7:fc:b2:75:90:6f:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4A:0F:61:30:0D:C1:7E:12:55:F9:A8:E0:6E:01:6F:F1:5F:7E:57
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.39.96.0/19
79.142.240.0/20
89.255.224.0/20
109.238.128.0/20
145.14.96.0/19
145.40.16.0/20
147.28.64.0/19
178.16.208.0/20
178.251.128.0/21
185.81.108.0/22
212.100.96.0/19
217.69.144.0/20
IPv6:
2001:1ba8::/29
Signature Algorithm: sha256WithRSAEncryption
b7:91:3e:68:8a:91:ce:74:7d:60:56:c8:d5:4c:e5:20:5b:0d:
f5:4e:ec:2a:8d:f4:62:5c:d5:89:93:09:e9:f2:09:3b:ab:d0:
21:d9:3a:b3:82:13:2d:04:8d:28:5f:a5:45:1f:e7:d1:79:64:
51:b8:07:32:10:0c:4e:ab:50:3c:30:32:8b:33:82:f6:ca:5d:
2a:16:0b:12:e4:d2:dc:39:32:40:cf:c9:db:64:e3:61:4b:9e:
03:48:2a:4c:38:b7:26:0c:21:03:52:a4:52:5e:f5:27:e1:44:
25:41:e8:39:97:42:80:ae:b7:af:58:5d:cc:83:86:c0:c9:a8:
ea:a7:8f:69:17:9a:3c:dd:06:fe:fb:07:77:b0:c7:ad:59:ad:
da:12:3f:fc:2b:2c:a4:d0:b7:7f:6c:c9:06:f5:68:7e:1a:a2:
d3:ed:49:77:fc:d6:68:52:2f:08:c1:7e:f0:d2:16:c3:34:1b:
6e:a5:63:83:0f:23:54:91:2f:3d:58:6b:57:30:da:21:81:3e:
ab:41:4e:3a:77:00:45:1b:43:c0:f0:44:ba:d9:e2:51:f2:3f:
46:3e:10:47:08:21:8e:c3:1e:4d:e8:8b:78:ae:8d:23:7f:6f:
e3:f7:d3:1a:6a:df:b5:42:29:83:e3:fe:e0:49:36:d5:91:69:
ae:77:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:23 2025 by rpki-client