Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/AuVvPbpIxYfbjHQfau6WKQEGa-g.roa
File: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (raw, json)
Hash identifier: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=
Subject key identifier: 02:E5:6F:3D:BA:48:C5:87:DB:8C:74:1F:6A:EE:96:29:01:06:6B:E8
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 019422FC46A149CBFE54CBFCE2CBCFF9AAED
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/AuVvPbpIxYfbjHQfau6WKQEGa-g.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198434
IP address blocks: 37.72.32.0/21 maxlen: 24
37.72.32.0/24 maxlen: 24
37.72.33.0/24 maxlen: 24
37.72.34.0/24 maxlen: 24
37.72.35.0/24 maxlen: 24
37.72.36.0/24 maxlen: 24
37.72.37.0/24 maxlen: 24
37.72.38.0/24 maxlen: 24
37.72.39.0/24 maxlen: 24
185.73.248.0/22 maxlen: 24
185.73.248.0/24 maxlen: 24
185.73.249.0/24 maxlen: 24
185.73.250.0/24 maxlen: 24
213.138.216.0/22 maxlen: 24
213.138.216.0/24 maxlen: 24
213.138.217.0/24 maxlen: 24
213.138.218.0/24 maxlen: 24
213.138.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:46:a1:49:cb:fe:54:cb:fc:e2:cb:cf:f9:aa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e56f3dba48c587db8c741f6aee962901066be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:0d:ac:8e:58:bc:8d:9d:7c:db:e7:b3:5b:
43:7c:98:80:85:bc:fd:dd:c6:de:2c:94:3c:b1:3a:
f4:c1:b6:5b:77:6e:ad:31:c0:10:fe:63:7c:cd:c7:
af:54:8f:95:f3:5d:05:30:1d:43:3a:6e:67:0e:68:
34:54:48:c3:16:c0:df:72:02:61:88:4f:ad:2f:01:
88:b3:7b:c2:a9:38:56:a3:9a:12:f3:f0:72:c4:b4:
ea:80:2f:1c:b8:c1:19:16:fd:68:be:b2:e7:a9:ad:
a1:fc:ed:82:ca:74:03:9b:85:71:9c:bf:3e:8f:9d:
16:e6:1e:44:26:65:58:50:58:04:fe:c3:d0:0a:e2:
99:02:a9:2a:36:f1:52:e3:10:0c:8e:14:7e:d6:f7:
14:90:fd:94:55:a9:dd:91:f6:b1:62:9e:5d:a3:2c:
d6:6a:92:bd:b4:19:78:84:6d:21:5a:b2:a0:89:6c:
12:e1:64:5f:06:43:d8:58:b1:fb:0f:0c:53:80:4e:
e8:77:ad:da:db:22:f8:ef:a3:2e:c5:89:68:3f:52:
3f:a5:29:74:fb:51:3c:92:0f:61:f9:c4:0d:62:03:
aa:cd:5c:be:bb:91:90:de:1c:fe:e2:d1:25:21:a4:
ae:2e:e2:55:22:2f:a8:94:44:ef:55:f3:dd:bf:bf:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:6F:3D:BA:48:C5:87:DB:8C:74:1F:6A:EE:96:29:01:06:6B:E8
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/AuVvPbpIxYfbjHQfau6WKQEGa-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.32.0/21
185.73.248.0/22
213.138.216.0/22
Signature Algorithm: sha256WithRSAEncryption
18:37:2d:9b:0f:83:9d:6b:43:99:4a:ab:dc:39:a2:c2:05:2f:
e6:83:0e:d5:1b:4d:4d:47:ba:e1:b4:ed:a9:e1:db:3d:71:cb:
20:8c:10:67:1c:f3:11:fb:83:e6:56:90:f9:01:d7:81:ab:f8:
48:49:e6:e9:3b:91:01:3b:b2:a5:b8:68:26:27:75:61:96:68:
80:32:b3:07:af:10:d8:52:e1:46:09:4b:1b:47:af:07:2e:1a:
52:c2:53:cb:11:86:26:89:b4:0d:49:4c:ae:d4:a5:61:f7:89:
4d:9d:5d:be:cd:1c:8e:4b:03:a3:1c:77:d4:d0:ee:13:8d:01:
4b:75:e4:7e:59:bb:8d:71:27:e2:ee:f3:9d:0b:15:80:dd:7e:
22:f4:4c:6e:ed:10:4f:50:df:6f:f3:3f:a3:fe:02:2b:3b:81:
ce:d0:df:2e:f3:11:c6:bb:4b:e0:86:b6:7a:49:26:76:5a:50:
ef:02:17:73:37:fc:30:9d:c4:b7:ee:4f:1f:fb:31:19:42:75:
59:96:36:d0:75:d1:8b:b9:0b:76:c2:39:9a:95:d0:88:11:3f:
d5:1b:aa:e3:33:c2:9d:72:35:5c:75:9f:b2:00:9f:d4:d4:18:
f4:c6:c7:31:ec:2b:fc:4a:f8:fe:f6:59:53:d0:31:b8:ac:de:
0a:fd:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:45 2025 by rpki-client