Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/rxeu1jMlfqkLgqEeW-h0uQCyJ9Y.roa
File: rxeu1jMlfqkLgqEeW-h0uQCyJ9Y.roa (raw, json)
Hash identifier: ww96H5jhVqSd0N7fssbo3x+oK6VQB2MzM4EG1eP4pJw=
Subject key identifier: AF:17:AE:D6:33:25:7E:A9:0B:82:A1:1E:5B:E8:74:B9:00:B2:27:D6
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 0194206866917874A14025B855F665D501BF
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/rxeu1jMlfqkLgqEeW-h0uQCyJ9Y.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14670
IP address blocks: 65.181.111.0/24 maxlen: 24
88.135.73.0/24 maxlen: 24
190.92.168.0/22 maxlen: 24
190.92.172.0/24 maxlen: 24
190.92.173.0/24 maxlen: 24
192.243.110.0/24 maxlen: 24
192.250.225.0/24 maxlen: 24
192.250.231.0/24 maxlen: 24
193.30.117.0/24 maxlen: 24
195.250.24.0/24 maxlen: 24
195.250.26.0/24 maxlen: 24
195.250.29.0/24 maxlen: 24
199.103.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:66:91:78:74:a1:40:25:b8:55:f6:65:d5:01:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af17aed633257ea90b82a11e5be874b900b227d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:2d:73:ea:5c:82:7b:48:41:b6:c4:f1:de:
37:aa:e3:10:38:fa:82:f3:85:72:e0:f5:2b:88:98:
84:e0:b1:74:c7:4b:0b:80:ce:03:b0:a0:aa:50:d7:
b4:f3:e5:3b:e2:68:39:ab:22:12:0f:c6:57:80:92:
ed:a8:40:d1:5d:c2:0f:f4:91:fa:0e:0c:2d:48:3a:
32:7f:5c:fd:69:02:fc:cf:06:dd:44:94:f9:b1:1a:
4b:88:63:71:3f:5a:12:1b:65:71:db:e8:0a:67:c1:
09:f9:04:7f:5e:b1:a9:21:63:b3:78:3f:96:17:90:
fe:c5:b0:2d:2e:d7:8b:79:f2:1d:91:7a:fc:74:d3:
cf:dd:35:f7:1a:6f:33:33:29:c0:f2:c9:d0:e5:e7:
3f:f2:91:3d:27:1c:64:9e:18:bc:cc:7e:48:dc:ce:
a8:be:11:6f:c6:ce:51:32:a2:b9:b3:2f:ae:4f:de:
a9:cb:79:59:2d:a6:88:f6:fe:47:cf:63:5c:69:84:
93:87:c9:ce:14:e2:79:e7:a2:b5:45:68:38:a7:00:
63:b9:db:12:5a:39:c5:e2:1e:26:24:35:fb:88:db:
94:00:60:df:33:61:ff:85:5d:e6:55:9e:ab:33:20:
72:9b:ae:b5:87:f1:56:22:27:80:17:d1:8d:3f:f0:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:17:AE:D6:33:25:7E:A9:0B:82:A1:1E:5B:E8:74:B9:00:B2:27:D6
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/rxeu1jMlfqkLgqEeW-h0uQCyJ9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.111.0/24
88.135.73.0/24
190.92.168.0-190.92.173.255
192.243.110.0/24
192.250.225.0/24
192.250.231.0/24
193.30.117.0/24
195.250.24.0/24
195.250.26.0/24
195.250.29.0/24
199.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
13:dd:6a:91:32:ab:6c:71:20:18:3b:88:6a:f5:4e:d8:55:0e:
88:34:66:88:94:4d:6f:4e:fa:21:e9:94:0a:ef:b4:ad:95:fc:
1c:fc:62:26:35:33:05:3f:92:bf:2b:89:f9:b2:0c:63:eb:78:
fa:77:ff:20:50:46:a6:d7:8a:db:f2:af:f8:e8:f8:ec:87:aa:
66:59:67:b9:5a:ef:29:e3:cc:ea:fc:82:10:c3:b1:e2:cd:47:
cc:78:9f:3b:81:09:41:da:01:17:b3:4b:86:0a:41:71:57:29:
88:f6:66:0d:92:0c:7d:f9:bf:33:4a:13:08:04:2a:00:9a:de:
c4:a5:ea:c4:5d:0f:d8:c7:bd:4f:07:df:5d:90:d1:ab:f8:7d:
57:53:d4:98:d2:82:a9:56:b6:38:53:ca:3d:a5:26:6b:b3:b5:
06:5b:30:25:b2:09:a8:8a:b4:8a:e6:ba:7b:70:52:2e:de:0b:
0d:7b:23:07:cd:27:fc:ad:0f:7e:90:bc:c2:f9:45:12:5b:86:
99:e3:a9:8e:e8:3a:f1:1a:27:6f:89:25:70:73:c3:07:f6:27:
00:61:25:79:9f:85:ab:15:0b:25:74:4d:6f:2f:f0:5b:f5:b8:
a0:ab:3d:83:4d:53:54:09:9e:91:a6:de:e3:e4:14:aa:86:74:
48:3c:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:43:43 2025 by rpki-client