Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/evv1AEwBABySsTk3nBF2LjzybHU.roa
File: evv1AEwBABySsTk3nBF2LjzybHU.roa (raw, json)
Hash identifier: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=
Subject key identifier: 7A:FB:F5:00:4C:01:00:1C:92:B1:39:37:9C:11:76:2E:3C:F2:6C:75
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 0194274807CA566EC7122873FCFC6867AFD9
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/evv1AEwBABySsTk3nBF2LjzybHU.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51263
IP address blocks: 62.56.176.0/20 maxlen: 20
168.86.192.0/19 maxlen: 19
178.251.176.0/21 maxlen: 21
178.251.176.0/24 maxlen: 24
178.251.177.0/24 maxlen: 24
178.251.178.0/24 maxlen: 24
178.251.179.0/24 maxlen: 24
178.251.180.0/24 maxlen: 24
178.251.181.0/24 maxlen: 24
178.251.182.0/24 maxlen: 24
178.251.183.0/24 maxlen: 24
185.25.56.0/22 maxlen: 22
213.244.200.0/21 maxlen: 21
2a03:e240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:07:ca:56:6e:c7:12:28:73:fc:fc:68:67:af:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7afbf5004c01001c92b139379c11762e3cf26c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:95:7e:b9:cd:cb:ba:ef:b6:9a:36:1f:2d:
e4:b9:7b:d6:16:b0:95:b1:e7:9f:ed:52:c5:f9:2b:
3a:24:a6:1e:2c:36:d0:33:c1:12:0d:ee:81:53:fd:
ee:3b:2f:ad:02:1e:95:02:00:02:fe:0c:0e:c9:d7:
b3:b9:51:3c:ac:49:95:3f:b9:e2:ed:9d:ac:ca:aa:
2e:d5:9d:29:bf:90:1a:0d:c1:0e:59:68:35:7c:fc:
93:58:11:40:8c:9b:c5:3e:49:00:7e:21:ea:91:8d:
8f:a3:d4:15:c3:7d:14:23:69:4c:d3:4a:83:bd:82:
db:b3:9a:f2:18:9c:94:5d:93:3f:74:8e:d9:6d:a7:
a0:95:55:4a:ad:59:b7:d2:a9:fe:4a:c2:77:a0:1d:
37:e7:9f:83:8e:ff:13:b6:39:43:d3:aa:b6:bf:1b:
f9:ef:b6:50:40:4b:13:c9:c2:80:00:a1:7e:ff:9c:
57:7d:b8:9c:d2:4f:89:f5:86:79:78:ee:49:3a:49:
f6:69:f6:7b:70:79:a2:2a:ba:89:86:98:5e:51:2f:
f4:e5:08:34:ff:19:a0:03:f7:6f:92:29:96:79:9d:
57:12:71:37:a5:11:a5:cd:40:1d:99:5d:c3:4f:0c:
41:ef:42:cb:76:14:f5:3a:6d:7c:58:0f:53:73:c3:
0f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:F5:00:4C:01:00:1C:92:B1:39:37:9C:11:76:2E:3C:F2:6C:75
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/evv1AEwBABySsTk3nBF2LjzybHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.176.0/20
168.86.192.0/19
178.251.176.0/21
185.25.56.0/22
213.244.200.0/21
IPv6:
2a03:e240::/32
Signature Algorithm: sha256WithRSAEncryption
20:46:56:f1:d4:c6:50:83:61:61:76:3e:9c:69:ea:6a:ff:48:
c6:36:74:06:26:fe:16:17:48:cf:a2:44:5b:7c:86:5e:ce:c6:
85:43:0b:cd:57:9d:ad:da:ff:3e:a3:92:62:60:bf:5c:9d:17:
0c:a3:22:2f:1c:f7:17:21:b9:50:aa:e5:e5:4d:48:e4:ae:4c:
76:46:61:80:09:b2:c7:5b:35:28:57:25:87:b7:f3:ed:bc:3c:
c1:ff:14:f2:bf:8f:a9:74:2a:ec:20:77:c3:91:57:fc:8a:c2:
70:3b:16:b4:1b:c8:f0:9e:40:21:89:f8:90:7a:87:be:67:7a:
26:8b:76:d3:f5:0f:44:89:b9:12:4b:09:bf:7b:42:af:e4:22:
ea:2b:0a:bf:d8:3f:73:68:f5:70:2f:3e:09:f4:7d:0f:48:4f:
48:2c:59:fe:12:bd:91:fd:2d:e3:3f:ca:41:30:f1:2c:61:9d:
c7:d7:ed:f5:04:0e:fb:6d:6e:59:38:ed:20:46:97:df:e5:49:
70:00:e4:e4:a7:af:84:80:b9:1b:ea:32:79:f7:7f:75:16:3d:
01:cc:d3:01:8f:e9:1b:e0:61:c7:a5:22:b4:3c:fc:e7:27:f0:
d4:d6:e7:fe:c3:92:b5:1a:d4:78:56:a3:67:9e:7a:94:64:c3:
c2:c0:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:46:03 2025 by rpki-client