Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aUd-teT5jp0dyk9CaKXSfSCTv1k.roa
File: aUd-teT5jp0dyk9CaKXSfSCTv1k.roa (raw, json)
Hash identifier: UDxebFPfOk3qfngWClb6LfgsCk9uczSPok0khMlFPko=
Subject key identifier: 69:47:7E:B5:E4:F9:8E:9D:1D:CA:4F:42:68:A5:D2:7D:20:93:BF:59
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 0194274800A0033B67B08E21E092C3C7C690
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aUd-teT5jp0dyk9CaKXSfSCTv1k.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205132
IP address blocks: 46.10.156.0/24 maxlen: 24
46.10.179.0/24 maxlen: 24
77.85.170.0/24 maxlen: 24
77.85.198.0/24 maxlen: 24
83.228.61.0/24 maxlen: 24
83.228.86.0/24 maxlen: 24
83.228.87.0/24 maxlen: 24
83.228.89.0/24 maxlen: 24
84.238.167.0/24 maxlen: 24
84.238.192.0/24 maxlen: 24
84.238.193.0/24 maxlen: 24
84.238.194.0/24 maxlen: 24
87.126.134.0/24 maxlen: 24
94.236.169.0/24 maxlen: 24
212.72.199.0/24 maxlen: 24
212.72.221.0/24 maxlen: 24
213.91.157.0/24 maxlen: 24
213.91.173.0/24 maxlen: 24
213.91.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:00:a0:03:3b:67:b0:8e:21:e0:92:c3:c7:c6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69477eb5e4f98e9d1dca4f4268a5d27d2093bf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:6d:8a:14:00:93:f0:88:31:02:28:3a:0b:
19:d1:45:d4:80:39:24:5b:d1:ed:a1:2f:08:50:56:
09:ff:49:90:66:63:37:f4:5d:a9:b7:aa:67:69:e8:
ed:8a:cc:c6:98:39:da:18:0e:0c:37:9a:12:99:c7:
95:07:f7:a2:ce:0f:d1:5d:38:f6:02:b0:e2:22:2a:
19:1c:52:52:4c:b6:f7:f3:c8:40:d2:89:75:c2:c3:
ef:81:61:af:a8:fd:02:b9:ca:96:af:ae:a2:ad:f2:
80:02:f6:0b:e3:e1:a3:74:cb:fe:54:fb:93:83:52:
5d:4e:d3:c7:00:8d:ad:5d:a8:a4:88:f3:a4:7b:8f:
4e:0a:26:2d:5d:fd:83:55:8a:c0:73:08:3f:8d:1e:
8c:07:fd:4a:eb:e8:84:e1:d5:e5:67:b9:30:0c:de:
3e:e3:6d:6a:50:11:7b:42:53:0d:1c:2d:c1:5c:d9:
5f:6e:34:07:fd:be:1e:c9:0c:6c:fd:b2:0d:02:91:
e0:fd:95:bd:08:b7:4d:5c:24:9d:99:0c:a9:f5:ea:
a5:73:b9:2c:83:e2:82:df:b9:10:1e:cd:7f:62:40:
e1:ef:36:e1:30:71:54:ac:2f:4f:f9:47:be:66:81:
80:ea:fa:bf:c1:f9:38:a5:b2:e8:9e:56:b6:d2:b8:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:47:7E:B5:E4:F9:8E:9D:1D:CA:4F:42:68:A5:D2:7D:20:93:BF:59
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/aUd-teT5jp0dyk9CaKXSfSCTv1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.156.0/24
46.10.179.0/24
77.85.170.0/24
77.85.198.0/24
83.228.61.0/24
83.228.86.0/23
83.228.89.0/24
84.238.167.0/24
84.238.192.0-84.238.194.255
87.126.134.0/24
94.236.169.0/24
212.72.199.0/24
212.72.221.0/24
213.91.157.0/24
213.91.173.0/24
213.91.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:83:0b:f4:7d:62:54:dc:b6:ed:9e:0d:b5:17:78:9b:cc:f8:
36:56:80:44:27:8e:bb:15:13:0d:80:54:9a:fb:0e:14:ee:05:
3d:5e:a8:9b:55:4a:a6:14:88:38:af:56:70:82:dc:ec:94:88:
b5:f6:f1:6d:72:24:ae:7b:27:59:5e:24:a0:13:be:28:9b:f0:
92:b1:2c:49:8d:cd:7e:ad:d5:c9:68:81:56:98:4e:5f:6b:d5:
ac:9d:73:48:21:cc:bb:bb:25:5b:47:4b:c3:71:ac:d7:5f:85:
65:8b:1e:d6:ff:85:7a:50:c3:2b:e8:38:32:8b:d0:c9:ef:e3:
25:ed:f5:97:f3:66:19:2d:a0:80:c1:12:be:b6:b4:a0:0c:ff:
f0:df:b5:94:fe:66:0b:d4:5b:7c:9b:47:11:77:cf:dd:4c:17:
b0:45:c9:d0:b4:7d:4d:e8:5b:64:e8:13:f7:12:22:78:e6:be:
bd:38:98:24:e8:56:8f:20:d6:2a:c3:02:3d:ec:a0:fd:f3:5a:
fa:8f:71:96:55:dc:10:91:36:2f:42:79:c3:3f:27:30:fe:94:
eb:a9:41:97:c6:93:32:5f:91:3a:cf:4a:e0:4c:fd:7e:32:78:
19:a1:33:6f:86:f6:49:99:1a:95:cd:f6:aa:28:ba:ed:d4:c5:
48:77:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:11 2025 by rpki-client