Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1nt7KKZ_kaA4th0sEgXg_btvGGw.roa
File: 1nt7KKZ_kaA4th0sEgXg_btvGGw.roa (raw, json)
Hash identifier: P3hRQakGX2DJeRwO8m5JnZZQAfAIlClGhi09lkYemow=
Subject key identifier: D6:7B:7B:28:A6:7F:91:A0:38:B6:1D:2C:12:05:E0:FD:BB:6F:18:6C
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA4FF8CA93C487092D0C6F184F2AA8
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1nt7KKZ_kaA4th0sEgXg_btvGGw.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51026
IP address blocks: 62.220.126.0/24 maxlen: 24
62.220.127.0/24 maxlen: 24
81.12.24.0/22 maxlen: 24
81.12.24.0/24 maxlen: 24
81.12.25.0/24 maxlen: 24
81.12.26.0/24 maxlen: 24
81.12.27.0/24 maxlen: 24
81.12.30.0/24 maxlen: 24
81.12.31.0/24 maxlen: 24
87.107.110.0/23 maxlen: 24
87.107.110.0/24 maxlen: 24
87.107.111.0/24 maxlen: 24
87.107.144.0/24 maxlen: 24
87.107.152.0/24 maxlen: 24
87.107.153.0/24 maxlen: 24
87.107.166.0/24 maxlen: 24
87.107.167.0/24 maxlen: 24
87.107.174.0/24 maxlen: 24
87.107.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4f:f8:ca:93:c4:87:09:2d:0c:6f:18:4f:2a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d67b7b28a67f91a038b61d2c1205e0fdbb6f186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:b1:d2:61:4c:b7:ca:6a:62:33:d3:c1:f9:
80:6b:88:aa:5c:cf:29:d2:18:72:ac:ed:e9:8f:35:
5b:7b:75:28:a2:90:68:ca:97:8d:13:0b:fd:62:7e:
de:db:88:d6:cd:ee:6c:52:56:40:c1:64:f1:3e:9e:
05:57:8d:6b:9f:9d:88:f3:e7:e8:b9:bb:72:e0:74:
bb:cd:59:46:8b:7c:72:3c:49:72:05:97:8f:f9:bc:
4e:05:27:0c:e9:19:4f:83:01:6d:b2:e8:c5:30:ad:
31:cc:19:1e:99:c0:e2:ca:97:d3:10:1c:95:ad:d8:
53:e5:a9:9c:96:0f:c4:f3:56:08:42:d2:c0:71:06:
c8:ef:d1:40:48:ea:9a:64:77:34:50:b8:c1:4d:e5:
5b:d3:18:b5:04:63:a4:1b:7d:6f:93:45:90:bf:2d:
c6:15:e9:6a:aa:c5:f5:d3:65:5d:d2:18:02:01:55:
33:32:58:54:d2:0a:fb:45:c1:f0:3f:c2:ae:c1:5c:
90:d0:e4:35:1c:cc:3b:9a:e2:3d:06:8a:25:81:e1:
b0:d4:5b:91:cb:35:17:f3:54:b9:33:80:66:b1:4d:
ec:61:12:a4:91:d3:55:e5:9c:f7:fe:d4:10:b4:9e:
a8:6a:86:c0:2d:3b:dc:94:fe:7d:d0:31:cb:d8:dd:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:7B:28:A6:7F:91:A0:38:B6:1D:2C:12:05:E0:FD:BB:6F:18:6C
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1nt7KKZ_kaA4th0sEgXg_btvGGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.126.0/23
81.12.24.0/22
81.12.30.0/23
87.107.110.0/23
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
02:0c:68:26:0b:c9:ac:a7:f9:8c:aa:85:9a:31:17:29:fa:ff:
49:45:b3:0f:9c:b1:8f:da:e2:fe:e0:7a:09:cc:6a:0a:3b:1e:
d3:47:2a:ab:1d:86:fd:3c:99:06:18:ee:6e:0d:45:a0:a6:03:
5d:ab:87:7f:27:ce:19:f2:8e:bc:55:ab:fd:db:96:3c:64:f0:
51:5d:12:5b:00:d7:3a:79:49:11:7f:17:77:f7:c5:f0:0a:a7:
5b:15:28:59:af:70:8d:c2:06:43:bc:03:14:47:db:02:ac:fe:
ce:24:22:89:05:00:f6:5c:f9:57:df:1e:a0:a2:a6:a2:91:3f:
81:49:6f:e4:48:ac:78:5d:c5:bd:dd:0a:e3:87:7d:fd:62:43:
b3:ff:a8:47:4e:9b:b3:35:c5:92:60:a3:c9:86:6b:f4:46:9f:
9d:b4:a0:a9:e2:4b:3d:4b:c7:7c:bd:b9:6e:c5:d6:08:37:ab:
aa:b2:09:5a:8d:f1:10:34:2a:92:b1:46:50:2d:d6:fa:1e:8d:
51:b0:f9:c6:e1:6c:44:78:42:ba:2e:af:52:40:f3:d3:91:32:
16:ea:8a:3b:4f:e0:10:d0:ec:84:78:2f:58:9d:bc:82:ae:4e:
3d:37:30:ce:b9:d0:2e:70:85:aa:f3:c8:29:35:f4:2d:2d:26:
ee:fb:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:51 2025 by rpki-client