Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa
File: aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa (raw, json)
Hash identifier: K2mPF2eHRJwmWDINxTS4kipEwWDutquLs7wNrJd3zo4=
Subject key identifier: 68:96:89:1A:D3:1F:58:D4:90:88:0F:DB:00:45:AD:88:B1:DD:FC:54
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424455D8CD72E2069D7A2527B9D04DE9A
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6813
IP address blocks: 80.58.201.0/24 maxlen: 24
80.58.252.0/24 maxlen: 24
81.45.26.0/23 maxlen: 23
81.45.156.0/22 maxlen: 22
194.179.98.0/23 maxlen: 23
194.224.158.0/24 maxlen: 24
195.55.74.0/24 maxlen: 24
195.235.59.0/24 maxlen: 24
195.235.232.0/24 maxlen: 24
195.235.234.0/23 maxlen: 23
212.170.30.0/23 maxlen: 23
212.170.34.0/23 maxlen: 23
212.170.227.0/24 maxlen: 24
212.170.228.0/23 maxlen: 23
212.170.232.0/24 maxlen: 24
213.4.28.0/24 maxlen: 24
213.4.82.0/23 maxlen: 23
213.4.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5d:8c:d7:2e:20:69:d7:a2:52:7b:9d:04:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6896891ad31f58d490880fdb0045ad88b1ddfc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:8e:0e:6c:25:c1:30:8a:41:db:ab:26:65:
bd:bb:ea:5d:74:fe:29:73:00:de:43:6a:44:41:57:
b7:d8:f3:19:f1:bc:aa:28:bb:f8:d4:ba:77:f5:28:
d0:93:61:3e:c9:b2:86:d6:b1:c9:83:0e:50:b3:9e:
0b:36:75:93:53:00:05:dc:df:80:8d:1e:d0:af:7a:
46:4c:e5:da:ce:b3:cf:bd:5c:bc:6e:30:0f:3e:3d:
50:c9:44:91:08:2d:b6:11:76:9e:45:e1:97:eb:41:
02:bc:56:9c:99:6e:a3:e6:6d:7a:b6:f0:4c:ef:02:
20:88:28:c1:f6:ba:c3:ba:41:94:c5:a5:c3:59:d9:
6b:a7:2f:cb:75:f7:2e:6d:c1:f6:fa:1b:12:5c:b8:
21:4c:3c:5e:f1:cb:0e:2d:4e:0f:67:c1:37:1e:d3:
68:ad:f3:ac:50:ee:49:fa:32:b7:c7:1f:25:37:af:
e2:83:d6:b0:93:aa:c4:6c:3d:1a:b6:04:16:91:76:
6f:73:d1:9f:43:3d:cd:da:f0:80:9f:95:1e:31:6f:
fd:75:29:5f:c4:f4:cc:e6:66:9d:44:2f:ee:33:48:
21:2a:df:e0:8c:8a:27:e5:d2:9e:50:5f:b2:d8:28:
1c:26:fd:8f:d8:1e:03:77:55:55:2b:14:5c:dd:68:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:89:1A:D3:1F:58:D4:90:88:0F:DB:00:45:AD:88:B1:DD:FC:54
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/aJaJGtMfWNSQiA_bAEWtiLHd_FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.58.201.0/24
80.58.252.0/24
81.45.26.0/23
81.45.156.0/22
194.179.98.0/23
194.224.158.0/24
195.55.74.0/24
195.235.59.0/24
195.235.232.0/24
195.235.234.0/23
212.170.30.0/23
212.170.34.0/23
212.170.227.0-212.170.229.255
212.170.232.0/24
213.4.28.0/24
213.4.82.0/23
213.4.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bb:05:32:87:77:73:ae:ee:b8:e7:a1:fd:5f:b0:74:f1:78:
e6:de:8d:d0:8b:ec:90:86:0d:b8:ac:2b:01:f0:00:1f:07:be:
28:fe:0b:b7:39:5c:67:2a:25:82:91:08:8e:51:b5:b6:59:d3:
a4:1b:4e:5c:e7:a8:43:05:b2:27:28:f5:f6:ca:11:7d:b9:10:
61:61:37:d8:42:2f:18:c3:6f:fd:1e:9f:68:78:60:e5:c5:3d:
96:09:de:eb:51:23:94:0f:55:ca:27:38:47:30:82:e6:f7:eb:
88:10:fa:1e:1c:23:03:51:2b:93:30:86:8d:a0:76:f1:eb:0a:
80:47:bf:97:89:6a:30:1a:b7:b6:69:1e:b7:c2:7d:dd:09:7d:
93:07:de:f0:ba:e3:d3:58:3e:05:09:c6:bc:df:7a:10:29:a3:
19:eb:70:93:af:e3:eb:9b:a0:06:97:d1:4b:a1:84:b1:05:8a:
35:7c:fb:ad:32:27:35:1d:92:2b:c1:4d:0a:75:cc:27:65:ff:
f5:18:d3:b7:c1:a3:e2:49:b7:1e:b2:86:ce:c6:02:ae:cc:a5:
96:5a:35:4a:40:93:db:d7:15:8d:19:5d:12:19:bd:62:db:9c:
4b:90:ec:e0:ef:6f:da:4d:f7:6d:12:37:80:78:2c:6a:26:e7:
d8:76:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:09 2025 by rpki-client