Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/xlTjepejuGlW3CGUnuf8jiI_Sb8.roa
File: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (raw, json)
Hash identifier: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=
Subject key identifier: C6:54:E3:7A:97:A3:B8:69:56:DC:21:94:9E:E7:FC:8E:22:3F:49:BF
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0194228DEAA1277B63A4B90361D54295005E
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/xlTjepejuGlW3CGUnuf8jiI_Sb8.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204145
IP address blocks: 45.130.220.0/24 maxlen: 24
45.130.221.0/24 maxlen: 24
45.130.222.0/24 maxlen: 24
45.130.223.0/24 maxlen: 24
45.157.196.0/24 maxlen: 24
45.157.197.0/24 maxlen: 24
45.157.198.0/24 maxlen: 24
45.157.199.0/24 maxlen: 24
89.35.179.0/24 maxlen: 24
185.50.72.0/24 maxlen: 24
185.50.73.0/24 maxlen: 24
185.50.74.0/24 maxlen: 24
185.50.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ea:a1:27:7b:63:a4:b9:03:61:d5:42:95:00:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c654e37a97a3b86956dc21949ee7fc8e223f49bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:55:04:7f:b2:52:26:a9:5b:e3:82:23:56:
22:8d:91:92:36:7f:23:a2:c1:5a:a4:29:dc:b1:77:
4b:8f:72:e1:1e:4d:c9:51:a5:98:61:e6:64:ae:f7:
20:2d:08:80:8c:12:33:25:3b:3c:61:bb:8e:f4:3b:
3e:4a:c0:35:ad:5c:71:6b:6c:ee:17:bc:4a:f2:46:
70:64:f1:cc:d9:c4:f6:45:33:88:11:cc:01:51:5b:
b7:28:94:5d:54:d3:f9:d0:8b:fe:41:41:91:03:49:
4f:48:74:ad:25:d2:7e:fc:8b:51:be:2d:de:e8:0a:
1a:b4:0c:6f:a0:94:e0:7e:65:35:46:bc:71:10:74:
94:8f:e6:1f:67:76:8e:60:4f:5f:aa:a0:0d:94:24:
d7:18:80:e6:b3:63:31:ce:bc:4b:bc:33:29:55:84:
90:fa:f5:b1:d2:e9:15:7b:df:56:f1:d3:dc:3b:08:
b8:89:e1:26:78:25:99:ef:ff:17:8c:3a:75:fb:6b:
f4:73:66:12:8a:60:d7:0a:21:49:47:08:d9:70:63:
4e:34:17:71:ac:ed:cc:d8:0e:3d:dd:df:d4:fd:d4:
41:51:40:c9:c9:7f:8a:da:c0:08:55:c4:c2:04:21:
b1:d1:7e:17:35:2a:b5:0c:6c:64:86:e3:b2:a7:de:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:54:E3:7A:97:A3:B8:69:56:DC:21:94:9E:E7:FC:8E:22:3F:49:BF
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/xlTjepejuGlW3CGUnuf8jiI_Sb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.220.0/22
45.157.196.0/22
89.35.179.0/24
185.50.72.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:4e:8a:bd:a4:2f:a4:4d:51:54:37:ee:fa:27:05:71:a2:5b:
29:b2:f9:22:4e:d4:b1:6d:54:e6:09:c7:5c:19:90:46:76:ec:
38:03:2f:3b:1f:25:c0:06:d7:00:e2:fc:8e:c3:c3:56:50:71:
77:95:68:3f:42:4f:67:83:c6:a8:e4:a4:1d:ac:f9:aa:97:ab:
92:f3:3d:b3:5c:2a:96:f2:c4:b0:5a:87:d8:28:f7:5f:43:7b:
36:48:98:7d:4e:de:01:bb:8e:60:72:f1:d3:0c:b2:f3:d2:aa:
75:04:26:a6:c9:4c:5b:ff:06:b5:63:73:bf:4b:3e:cf:09:52:
c2:0a:0b:17:7c:34:10:2a:32:54:83:e8:65:4c:49:a8:c8:2b:
9f:a4:45:d0:94:85:a3:4c:57:0e:c2:dd:08:41:a3:e5:76:bb:
9f:2c:5d:da:cd:f1:41:98:a6:63:b5:3d:17:a8:3a:c4:8c:5b:
2d:de:7f:9c:69:82:a1:3d:93:3d:c7:13:52:2a:a4:8a:0c:1a:
35:1f:6e:9d:4c:33:77:33:1c:1f:b3:4b:4b:a9:73:7a:b7:6b:
9c:0f:ce:12:ea:98:b7:a8:9a:d2:61:19:32:0c:cc:89:69:c4:
4b:8e:d2:b8:6a:9d:1e:67:cd:93:2d:8b:4f:f4:16:60:6d:ee:
bd:b8:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:53 2025 by rpki-client