Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/iiUeXLLt-1_q1sqXQylSJn8YIz0.roa
File: iiUeXLLt-1_q1sqXQylSJn8YIz0.roa (raw, json)
Hash identifier: QigdA9bNMVfoJev0ZZ7xl7Qye3Fuam811gOFHSrVr2A=
Subject key identifier: 8A:25:1E:5C:B2:ED:FB:5F:EA:D6:CA:97:43:29:52:26:7F:18:23:3D
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 019580A658CE750DBCEC8D447D003D578810
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/iiUeXLLt-1_q1sqXQylSJn8YIz0.roa
Signing time: Mon 10 Mar 2025 15:22:20 +0000
ROA not before: Mon 10 Mar 2025 15:22:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58325
IP address blocks: 212.68.172.0/22 maxlen: 22
212.68.172.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.176.0/22 maxlen: 22
212.68.176.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.180.0/22 maxlen: 22
212.68.180.0/24 maxlen: 24
212.68.181.0/24 maxlen: 24
212.68.182.0/24 maxlen: 24
212.68.183.0/24 maxlen: 24
212.68.184.0/22 maxlen: 22
212.68.184.0/24 maxlen: 24
212.68.185.0/24 maxlen: 24
212.68.186.0/24 maxlen: 24
212.68.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:a6:58:ce:75:0d:bc:ec:8d:44:7d:00:3d:57:88:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Mar 10 15:22:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a251e5cb2edfb5fead6ca97432952267f18233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:e5:6a:1e:f1:52:34:28:e6:65:fa:97:4f:
42:dd:7c:58:be:13:a4:94:b6:2e:91:4a:cc:23:2b:
11:5a:50:32:1d:fc:59:be:6e:37:9f:98:9f:44:dc:
51:2a:76:08:4c:bd:95:90:63:d6:9a:d8:96:ae:9b:
48:e9:44:f3:1e:80:8c:f1:27:41:1a:02:3a:31:fc:
47:0e:2d:09:5d:ac:cc:7e:34:dc:12:3c:35:b0:df:
a7:6d:f3:53:72:0d:a6:59:66:00:f8:89:da:2e:40:
83:97:32:19:e9:e4:e0:90:0a:a1:0b:7e:cb:10:c7:
56:8b:fe:82:a0:90:32:7c:0f:ef:7b:e0:74:96:69:
5f:d2:05:5a:5f:f4:34:5b:c6:95:2b:fa:9c:5d:7b:
1f:85:0f:29:1a:ac:69:2d:a4:9d:b3:a1:0d:d8:a8:
7b:30:e5:5e:33:df:5d:ce:68:02:ab:7f:18:e9:cc:
62:a7:33:de:d7:1a:9c:7d:1e:04:67:eb:86:6d:ae:
3f:9b:e2:09:bc:af:45:01:92:1a:5d:3d:e5:6f:14:
03:33:d2:89:5d:36:87:57:68:85:4c:a1:3e:93:1a:
2f:55:ca:a8:90:51:9d:16:6a:c2:60:82:c4:e9:d7:
21:39:a1:25:a1:0f:c2:f4:cd:46:81:24:d3:f6:19:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:1E:5C:B2:ED:FB:5F:EA:D6:CA:97:43:29:52:26:7F:18:23:3D
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/iiUeXLLt-1_q1sqXQylSJn8YIz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.172.0-212.68.187.255
Signature Algorithm: sha256WithRSAEncryption
13:cb:c0:9a:d6:54:de:db:9f:37:5d:4d:40:21:5e:c1:87:d4:
eb:88:64:86:21:99:51:24:0c:0d:66:b8:c8:5c:77:af:9e:cc:
e1:96:bc:00:7c:23:fd:60:6b:7e:18:da:7f:b7:cf:a9:65:1b:
db:04:67:e0:16:58:34:46:9d:ca:9c:e8:f0:35:6c:63:b7:f4:
e7:36:5a:0e:cc:44:68:25:2c:fd:34:c8:ac:c6:92:ec:aa:ce:
01:a2:49:d2:bb:9c:56:13:07:4f:bb:8b:e8:05:eb:26:a2:8b:
e2:26:71:19:e4:32:de:e2:9c:1b:cd:00:3d:8b:67:37:5a:45:
22:45:f1:96:86:37:23:09:23:5e:9e:cd:61:42:3e:61:c2:83:
19:b0:f9:b7:2b:17:a8:4f:63:e7:ac:20:e1:ba:2d:db:96:8a:
99:f0:75:cb:c2:7c:34:70:4e:16:0d:38:b8:e7:91:fb:f4:b6:
8a:0a:74:f9:1e:b9:82:72:93:4f:7a:35:6d:8d:91:42:14:34:
f3:18:93:6f:4e:41:46:7e:8b:66:76:e2:6b:54:ba:82:b7:f3:
bf:94:db:c1:38:63:b8:d1:e1:bf:84:5d:8d:39:7e:63:67:f5:
cd:3f:79:3c:8c:77:c7:75:5f:1f:a3:38:47:54:d4:7f:98:3a:
e6:c0:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:57:50 2025 by rpki-client