Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/xHpXDv6E_1YUNoDN2LC9vwG7R2M.roa
File: xHpXDv6E_1YUNoDN2LC9vwG7R2M.roa (raw, json)
Hash identifier: iKgnd8chs/jWQOV3iRdSagUM//dORmkxw4iMfLfQ7Gg=
Subject key identifier: C4:7A:57:0E:FE:84:FF:56:14:36:80:CD:D8:B0:BD:BF:01:BB:47:63
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 019426D9ABADEEB6DFA930DED602F607B557
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/xHpXDv6E_1YUNoDN2LC9vwG7R2M.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203593
IP address blocks: 157.97.163.0/24 maxlen: 24
185.129.252.0/24 maxlen: 24
185.129.253.0/24 maxlen: 24
185.129.254.0/24 maxlen: 24
185.129.255.0/24 maxlen: 24
193.254.202.0/24 maxlen: 24
193.254.203.0/24 maxlen: 24
213.244.32.0/24 maxlen: 24
213.244.33.0/24 maxlen: 24
213.244.34.0/24 maxlen: 24
213.244.35.0/24 maxlen: 24
213.244.36.0/24 maxlen: 24
213.244.37.0/24 maxlen: 24
213.244.38.0/24 maxlen: 24
213.244.39.0/24 maxlen: 24
213.244.40.0/24 maxlen: 24
213.244.41.0/24 maxlen: 24
213.244.42.0/24 maxlen: 24
2a06:d680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ab:ad:ee:b6:df:a9:30:de:d6:02:f6:07:b5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c47a570efe84ff56143680cdd8b0bdbf01bb4763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:49:a8:e5:f2:7c:ec:53:e0:e4:87:67:12:2e:
a1:d4:f0:9a:25:e7:c9:e8:6d:19:47:52:7f:c6:0f:
31:ec:30:09:b3:81:96:1c:72:05:27:e2:d8:33:60:
a4:e9:1c:25:ad:7a:e5:75:b5:87:bc:d8:4e:9f:09:
44:0d:cf:56:e5:e4:9e:e5:2a:46:c8:d6:22:f7:a4:
d9:ab:06:81:14:05:8a:5d:c6:01:54:ac:a4:22:ae:
ee:ae:99:af:03:c5:94:76:1e:a7:c9:8d:7b:15:8c:
dd:1b:3d:f8:f1:62:89:e0:3f:cf:60:36:b6:d9:68:
f6:c5:52:10:a6:38:a2:89:f6:78:0d:cf:d5:ae:1b:
f5:c4:83:7f:1b:bd:71:c0:36:dd:c1:a6:b7:f4:3a:
9a:d5:ba:63:da:d0:4c:a6:f0:6f:d5:ec:ad:55:5f:
75:a5:01:9c:cb:de:7b:63:87:a9:ad:a3:a9:fc:08:
9c:31:8e:b4:db:27:48:3d:2e:a8:81:29:b7:49:66:
ec:fc:43:44:4c:cd:94:cf:ae:7d:84:96:aa:e9:02:
e2:87:1f:dd:27:cc:e8:6c:7e:22:72:5b:76:48:19:
69:2f:93:2d:ba:7e:6c:49:be:58:1b:c9:49:86:68:
e1:da:22:3b:8d:c1:15:56:a7:d3:47:b4:4d:6d:2c:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7A:57:0E:FE:84:FF:56:14:36:80:CD:D8:B0:BD:BF:01:BB:47:63
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/xHpXDv6E_1YUNoDN2LC9vwG7R2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.163.0/24
185.129.252.0/22
193.254.202.0/23
213.244.32.0-213.244.42.255
IPv6:
2a06:d680::/29
Signature Algorithm: sha256WithRSAEncryption
5d:40:b7:4e:e6:a8:b6:a0:8d:bb:f8:e3:ef:ec:9f:1f:ba:fa:
f2:05:fe:96:71:dd:5b:31:a6:c6:33:0b:ab:62:a2:ee:86:8b:
f7:5e:4c:22:a3:d1:c3:d2:d4:43:0a:52:df:05:59:78:70:33:
21:dc:1e:c0:9b:55:de:84:f2:00:46:b4:dd:39:21:77:2d:52:
db:b1:e1:fa:5a:e0:32:eb:c2:2f:29:ef:cd:71:53:73:d9:76:
da:24:33:83:8f:f5:11:a2:66:90:1d:22:d3:67:a4:75:d8:5b:
b1:b2:d3:8c:a7:37:03:8b:bd:cf:18:c2:cb:e4:82:af:8c:e4:
c8:d5:69:ed:80:a0:b2:67:1f:50:92:4a:d5:1b:c5:ff:8d:8b:
f7:55:60:3c:86:78:51:d3:0f:52:54:3b:07:4f:43:06:a7:3f:
e2:b9:7c:9f:0a:6a:8e:47:0a:ae:a5:53:b1:ae:2d:09:73:08:
bb:af:e2:e3:4a:66:cf:85:19:1d:06:f2:f0:31:4c:33:4a:17:
1f:89:c5:da:da:9e:72:91:36:e6:b8:b3:b9:ed:c3:9a:06:52:
93:a2:c0:97:3d:dd:cd:30:a8:02:27:aa:8c:b7:45:64:cb:88:
f8:7e:c6:1e:90:ba:91:d9:bd:9c:0a:4a:53:4b:60:94:58:c9:
fe:d4:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:47:26 2025 by rpki-client