Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/IfMAb-baYtrUi8Zzn2tFLvkovDA.roa
File: IfMAb-baYtrUi8Zzn2tFLvkovDA.roa (raw, json)
Hash identifier: d2CMRn1kc4oEgu4bSk14WiS27zlRxc0nqJ5C1IGfk8o=
Subject key identifier: 21:F3:00:6F:E6:DA:62:DA:D4:8B:C6:73:9F:6B:45:2E:F9:28:BC:30
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FD19D41C5EB41627A534FDCCF6AA6
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/IfMAb-baYtrUi8Zzn2tFLvkovDA.roa
Signing time: Wed 01 Jan 2025 13:48:18 +0000
ROA not before: Wed 01 Jan 2025 13:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206957
IP address blocks: 78.133.237.0/24 maxlen: 24
89.174.109.0/24 maxlen: 24
89.174.116.0/24 maxlen: 24
89.174.117.0/24 maxlen: 24
89.174.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d1:9d:41:c5:eb:41:62:7a:53:4f:dc:cf:6a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21f3006fe6da62dad48bc6739f6b452ef928bc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ba:c8:91:eb:7a:63:59:70:ea:57:b7:bd:e9:
68:5b:43:56:fb:89:df:18:81:90:a8:48:5f:f4:a1:
c1:5d:40:a7:ec:e4:12:c2:8a:57:7d:13:f7:9b:38:
7a:a9:4d:f5:33:45:ad:62:a1:75:e1:e1:0e:cf:5c:
55:ff:b1:62:45:7e:de:b1:7c:2f:2e:6b:b4:cb:4d:
a7:3e:55:d7:9b:d4:82:d9:e7:62:8e:cb:31:9b:88:
a3:af:b6:08:0d:8c:3d:0d:31:c1:4b:e0:e1:f4:74:
6b:c2:b8:7d:32:7a:c4:9e:c5:9b:03:a3:c3:dc:8e:
0f:7f:2f:14:dd:e5:e4:85:16:bd:24:74:77:ba:79:
95:76:8e:32:31:aa:c9:e7:5d:a3:96:3f:5b:d4:58:
9d:da:81:b1:ff:3d:99:05:ec:02:27:db:ae:31:a1:
2d:29:a6:af:17:ea:5c:2b:5f:41:8e:55:5c:52:36:
3c:a1:c4:ef:3f:9f:e7:46:57:99:8a:7e:0a:64:b9:
56:75:a2:d3:df:b9:4b:9b:60:c1:dd:92:4b:08:61:
9c:6d:b7:ce:98:9a:12:d3:46:7b:c5:31:05:49:68:
54:33:f4:b3:5b:20:9f:ca:8b:80:33:4b:d6:6b:73:
f1:16:d7:5b:73:10:cc:76:b7:b2:cf:c8:7b:47:43:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:00:6F:E6:DA:62:DA:D4:8B:C6:73:9F:6B:45:2E:F9:28:BC:30
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/IfMAb-baYtrUi8Zzn2tFLvkovDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.237.0/24
89.174.109.0/24
89.174.116.0/23
89.174.228.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e6:e8:65:78:4b:df:9e:04:46:0a:61:0a:ee:66:97:4d:2c:
ac:9b:8f:d5:ff:97:98:1c:1d:3a:ab:f1:85:f3:e4:f2:29:83:
43:52:19:c9:67:7c:7a:dc:bf:ba:e4:7f:d5:30:11:e8:e5:89:
82:bb:13:36:4f:bb:eb:b8:01:a9:10:e5:c4:e0:13:b3:47:ff:
98:cd:3a:aa:84:9c:62:5c:05:4f:81:09:ee:02:14:c8:12:ec:
e2:48:cb:5a:1f:c1:5f:42:b3:91:83:58:4b:68:23:2d:3e:d3:
86:eb:66:1a:bc:da:b8:70:81:43:d6:7b:4d:df:ee:80:b5:3e:
ab:ba:4c:43:e9:57:37:a6:c1:3a:86:12:91:ea:9c:b5:48:53:
79:74:99:10:cc:c2:88:4a:4b:60:26:e3:54:ce:c0:d3:fc:75:
a3:da:d8:2b:17:e9:8d:de:a8:bb:4b:27:67:e7:5c:fe:8c:8e:
23:74:48:67:20:e8:07:7d:21:5d:f9:38:57:c1:a1:31:c1:7e:
98:08:03:bb:35:7d:35:53:89:22:4b:31:bf:8c:ea:a8:93:b4:
c9:97:b7:3f:05:94:5d:30:45:0a:1a:05:6d:29:07:af:17:f4:
7a:86:b1:8d:5c:3e:fe:a9:58:51:26:a0:9f:14:ca:bc:48:99:
4c:0d:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:28:49 2025 by rpki-client