Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/smYq7tWRQmDSDcZOZxN4k09kn3E.roa
File: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (raw, json)
Hash identifier: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=
Subject key identifier: B2:66:2A:EE:D5:91:42:60:D2:0D:C6:4E:67:13:78:93:4F:64:9F:71
Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial: 019425FDA865B4F70E200330E8A3FDDE251C
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/smYq7tWRQmDSDcZOZxN4k09kn3E.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34426
IP address blocks: 82.118.160.0/19 maxlen: 19
82.118.161.0/24 maxlen: 24
82.118.162.0/24 maxlen: 24
82.118.163.0/24 maxlen: 24
82.118.164.0/24 maxlen: 24
82.118.165.0/24 maxlen: 24
82.118.166.0/24 maxlen: 24
82.118.167.0/24 maxlen: 24
82.118.168.0/24 maxlen: 24
82.118.169.0/24 maxlen: 24
82.118.170.0/24 maxlen: 24
82.118.171.0/24 maxlen: 24
82.118.172.0/24 maxlen: 24
82.118.176.0/20 maxlen: 20
89.144.64.0/19 maxlen: 19
89.144.96.0/19 maxlen: 19
89.144.102.0/24 maxlen: 24
89.144.103.0/24 maxlen: 24
89.144.106.0/24 maxlen: 24
89.144.107.0/24 maxlen: 24
89.144.110.0/24 maxlen: 24
89.144.111.0/24 maxlen: 24
212.102.0.0/19 maxlen: 19
212.102.13.0/24 maxlen: 24
212.102.18.0/24 maxlen: 24
212.102.23.0/24 maxlen: 24
212.102.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a8:65:b4:f7:0e:20:03:30:e8:a3:fd:de:25:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2662aeed5914260d20dc64e671378934f649f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:29:38:88:aa:34:88:3a:d7:b1:5d:d8:03:
4e:8b:bb:99:74:22:04:cd:03:20:bd:5e:59:e6:ac:
16:92:b8:19:76:7f:09:8a:07:b0:d2:0c:0a:d0:83:
7c:9f:aa:f0:0f:a2:a1:45:09:0c:3b:ce:83:9e:32:
e1:66:b4:63:36:d9:55:79:8a:6c:d9:82:25:00:9f:
2b:85:30:0a:e7:15:c8:3b:bf:b5:b5:96:09:6d:96:
bc:af:fe:47:26:10:73:f5:99:4a:c8:d6:46:31:d8:
c8:48:e0:6b:40:40:52:df:61:b0:05:0b:1d:30:a7:
0c:d3:f8:53:b5:fd:f2:0a:73:d9:6c:62:e9:ac:33:
91:8d:8f:58:b5:93:51:aa:ab:41:ec:8a:4b:09:23:
c8:70:b1:d8:e7:48:42:d6:6d:d4:92:ab:e6:e2:d8:
fb:23:e8:ea:ce:96:0b:09:e8:5a:64:d7:62:36:00:
46:d1:0a:10:bd:b3:8d:e7:10:8b:36:8f:ce:9e:0d:
18:88:5b:29:95:16:9a:45:7b:f2:ad:e2:28:48:f5:
6e:37:50:3a:0f:ff:03:b0:e9:3f:0c:d8:17:e8:e5:
aa:5b:f7:36:45:a1:ef:87:0e:b4:6a:9e:4f:13:3f:
9b:a9:24:b2:8f:35:6d:56:b7:e5:b6:9f:b7:b8:ff:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:66:2A:EE:D5:91:42:60:D2:0D:C6:4E:67:13:78:93:4F:64:9F:71
X509v3 Authority Key Identifier:
keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/smYq7tWRQmDSDcZOZxN4k09kn3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.160.0/19
89.144.64.0/18
212.102.0.0/19
Signature Algorithm: sha256WithRSAEncryption
53:04:c3:7c:9c:0a:48:7d:59:cd:65:c8:45:e8:2d:c3:ee:c6:
f3:e5:43:91:28:81:dd:16:fd:ad:98:e9:c0:ec:37:12:64:a2:
ed:18:c8:d9:c8:55:c4:02:be:d3:a7:bd:bc:b2:a5:c1:d0:3f:
17:76:ea:50:00:0c:fd:fb:58:1f:49:4c:51:0d:94:3f:62:51:
f7:9e:07:a2:f3:0a:71:ad:e6:8d:6a:21:27:05:70:79:fd:23:
e7:33:d3:84:f6:8f:fe:bb:bf:ed:e3:24:f3:b9:8d:f4:70:26:
49:53:b6:f3:dc:dc:cc:8b:6e:6b:b0:55:06:50:ae:84:b8:b4:
9b:b3:ae:36:34:5a:dd:39:bb:e9:71:8b:85:7c:3c:a2:57:4c:
e7:6a:8c:bb:ba:42:2f:93:a6:5b:21:df:33:fa:78:9d:7c:d0:
6e:da:cc:71:72:6b:27:91:55:8b:5a:f3:aa:0d:05:18:b6:f3:
68:f5:7e:4f:0a:f2:42:c6:8e:50:86:24:44:f2:31:50:fa:91:
10:de:f5:54:f6:0f:a6:2e:e1:f3:3a:1c:f0:65:d6:94:98:7b:
b9:88:41:95:73:48:87:fd:44:d5:e7:4a:35:24:76:a9:35:33:
a4:83:94:2c:c5:75:04:92:2b:d0:b5:94:e6:73:fc:df:81:72:
5f:e9:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:49 2025 by rpki-client