Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/tB1FmU5b5xvjEP8JMpgceU5ERXQ.roa
File: tB1FmU5b5xvjEP8JMpgceU5ERXQ.roa (raw, json)
Hash identifier: goZDdm6IGSnZfuEYpeXzwDB0t1myPonOX7jaHweWI/U=
Subject key identifier: B4:1D:45:99:4E:5B:E7:1B:E3:10:FF:09:32:98:1C:79:4E:44:45:74
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 019421B1BD62A18C098534BA897F37325E32
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/tB1FmU5b5xvjEP8JMpgceU5ERXQ.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57961
IP address blocks: 37.139.112.0/21 maxlen: 22
37.139.114.0/24 maxlen: 24
37.139.116.0/22 maxlen: 22
2a00:9f40::/32 maxlen: 32
2a00:9f40:1::/48 maxlen: 48
2a00:9f40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bd:62:a1:8c:09:85:34:ba:89:7f:37:32:5e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b41d45994e5be71be310ff0932981c794e444574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:1e:db:c5:3f:11:42:24:17:32:96:03:73:
2b:57:54:95:a7:58:66:cc:d6:1c:f0:af:0b:c5:e4:
9f:56:de:f8:ca:09:52:bd:6d:ce:19:8e:be:3d:0d:
26:fc:69:32:30:8e:a6:33:62:30:2c:0a:1b:16:59:
b2:ab:de:76:13:27:de:b2:52:d6:47:a9:8a:41:9d:
ac:98:ea:f2:c0:fb:38:dc:aa:98:3a:50:73:16:44:
a2:75:cd:34:07:be:0d:5a:fd:c0:ca:70:ba:af:3d:
2a:65:29:1b:08:af:af:7f:c5:ce:0f:00:67:87:28:
5a:da:77:c5:d6:a3:96:86:5c:84:26:eb:a0:9c:df:
ed:ed:e9:d4:f4:a7:72:a6:3c:a7:42:0c:49:f8:36:
48:d1:29:59:1e:89:2c:9c:05:bf:09:5d:d8:0b:b6:
a1:df:0b:0f:e0:2b:69:24:14:13:8d:87:92:a2:c5:
61:c0:f4:8e:e6:22:3e:83:b4:58:7f:df:a5:b5:b7:
e2:2b:2d:a3:00:25:87:4d:c0:8b:6f:cc:6d:6f:a5:
40:90:2e:bf:60:53:81:c6:3b:b8:6c:61:f1:d7:d2:
ea:51:8e:be:e9:d5:66:21:ef:7f:fb:d6:f2:0a:2b:
73:53:db:22:e6:13:50:a8:71:8c:aa:0e:f0:09:e8:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1D:45:99:4E:5B:E7:1B:E3:10:FF:09:32:98:1C:79:4E:44:45:74
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/tB1FmU5b5xvjEP8JMpgceU5ERXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.112.0/21
IPv6:
2a00:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
bf:7e:ac:5f:1d:2f:44:bc:bc:c7:d5:86:eb:0a:8d:49:bf:fa:
fd:91:6e:9e:cf:3f:63:ab:1a:e3:59:53:7e:90:a1:5e:d2:02:
ea:15:08:6a:b6:f1:b8:5c:a6:e7:6c:25:f5:b4:5a:96:05:f3:
9f:6e:e5:3c:48:73:f9:5f:d7:68:42:be:13:b1:5a:7f:c5:ba:
d3:82:97:b6:84:1f:f8:da:d1:dd:a3:32:6a:6c:d2:7c:e5:21:
22:cf:58:b2:bc:f3:03:e2:db:9c:8a:c8:03:b2:d8:ed:9f:40:
f6:9e:ab:38:34:eb:ee:42:36:47:71:bf:49:ae:25:e7:60:4c:
2f:59:90:02:d0:9d:93:86:ff:4a:e3:fe:bd:bf:e4:70:b2:cc:
68:20:d3:69:96:94:87:f3:ec:a5:66:41:bd:65:fd:ab:57:b3:
c1:08:a1:6b:04:95:4a:f0:77:e6:d4:a3:ef:f0:80:3d:86:3a:
ae:77:80:57:3d:00:03:66:af:8d:5a:23:09:49:dd:4e:f4:ff:
41:9d:e1:09:da:95:a5:79:c7:22:3e:29:45:10:99:11:86:80:
a5:fb:97:56:46:f3:d2:ef:b4:d0:3c:3a:ab:16:ca:5e:f4:45:
d6:ac:70:33:02:b0:d9:fb:ae:a6:9d:82:2d:50:b9:5e:d6:7b:
c2:1f:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:39:23 2025 by rpki-client