Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/IlEk63neJHqfpfbvnUBv-DVBYPc.roa
File: IlEk63neJHqfpfbvnUBv-DVBYPc.roa (raw, json)
Hash identifier: CxWOVhTUflYXLGhWPbki87CzIqMP5NkcVbmRw3OnKdA=
Subject key identifier: 22:51:24:EB:79:DE:24:7A:9F:A5:F6:EF:9D:40:6F:F8:35:41:60:F7
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA42885A9905138CCFD5FF5550AD2E
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/IlEk63neJHqfpfbvnUBv-DVBYPc.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214529
IP address blocks: 84.247.29.0/24 maxlen: 24
84.247.55.0/24 maxlen: 24
84.247.56.0/24 maxlen: 24
86.107.31.0/24 maxlen: 24
89.40.77.0/24 maxlen: 24
94.176.128.0/24 maxlen: 24
188.211.27.0/24 maxlen: 24
188.211.30.0/24 maxlen: 24
188.211.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:42:88:5a:99:05:13:8c:cf:d5:ff:55:50:ad:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=225124eb79de247a9fa5f6ef9d406ff8354160f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:8e:a3:be:74:7f:6c:7c:4e:54:a1:b3:03:
c1:76:34:aa:da:20:7b:66:e4:f0:91:aa:29:bc:bc:
01:69:94:7d:0a:89:d7:90:06:72:2a:f0:ca:de:33:
a5:a2:e1:cf:b4:cc:25:d0:f3:ea:39:a1:86:86:ae:
76:56:f5:32:57:65:a5:00:0d:35:58:cf:80:7c:9e:
34:b1:8c:c0:de:fb:f7:ec:f9:f4:9e:38:04:56:f0:
fd:85:90:c2:29:5a:8c:c2:0e:b1:9d:e5:3a:24:1c:
ee:c5:20:26:97:cb:fe:e2:5d:b0:c6:fc:f2:de:61:
73:be:78:56:5d:6f:0b:78:21:61:93:1a:38:92:e3:
a0:cb:68:bf:c1:e7:b4:9e:f3:4c:67:94:22:f4:b7:
45:3c:ec:88:52:e3:f0:46:f3:89:24:52:d9:0c:c8:
a0:31:54:1b:66:28:a4:8b:f9:40:fd:72:ef:a4:85:
91:76:35:2b:11:2a:03:e1:75:46:2c:52:b3:e3:75:
59:d5:bd:89:e0:22:c0:9c:87:26:1f:3e:39:fc:9b:
bc:43:71:27:3e:1b:ac:ae:b0:ad:24:52:2d:a6:aa:
0b:7a:e7:a8:ad:19:6d:15:c9:14:a9:2d:f9:5d:03:
49:d2:c4:b7:1d:96:7d:c6:42:e1:e7:22:d8:16:a9:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:51:24:EB:79:DE:24:7A:9F:A5:F6:EF:9D:40:6F:F8:35:41:60:F7
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/IlEk63neJHqfpfbvnUBv-DVBYPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.29.0/24
84.247.55.0-84.247.56.255
86.107.31.0/24
89.40.77.0/24
94.176.128.0/24
188.211.27.0/24
188.211.30.0/23
Signature Algorithm: sha256WithRSAEncryption
57:d9:34:90:dc:16:7f:f9:c5:1d:19:05:4e:7a:28:74:85:71:
3a:53:9f:eb:f8:e9:98:62:0d:20:9c:82:4e:3c:5e:41:a3:a9:
17:23:d7:da:97:12:a6:24:3c:11:8a:d7:85:68:7b:75:ca:e5:
17:85:35:7b:30:ed:7b:9f:35:62:cc:15:04:59:be:b0:98:9c:
c4:06:c0:09:9d:6f:d8:97:95:99:ea:4f:c7:5b:bd:94:e2:cf:
04:bf:ca:8c:d7:4d:aa:21:9d:30:73:f3:11:ca:28:7d:35:8f:
09:64:b5:e8:e0:7b:63:96:43:c2:98:76:d9:39:f4:58:cb:a3:
81:3d:ef:53:5d:47:b6:3b:5d:91:25:db:02:b9:3d:6d:31:75:
c4:ac:d3:a3:46:d0:ad:5b:1b:e2:ec:73:59:e6:a4:a7:02:89:
b9:be:02:f5:d5:4d:3b:38:7a:bf:49:30:fe:37:1a:ee:80:3b:
c3:72:a7:20:ac:8a:8e:69:88:98:d1:f6:65:89:07:7c:70:e9:
1f:f2:94:45:cf:87:40:bb:22:27:df:da:60:eb:57:e5:b2:1b:
43:c5:7e:63:0d:8d:27:1b:2b:1b:ed:b5:c6:b2:a2:7a:4d:eb:
59:09:1e:d5:7a:65:73:5f:df:6e:4d:31:31:ed:e1:52:ac:4c:
0b:6e:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:21 2025 by rpki-client