Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/PhqjprJzbWIvvB7osWR9awoye5s.roa
File: PhqjprJzbWIvvB7osWR9awoye5s.roa (raw, json)
Hash identifier: XDqMhieQTxvY+bO6WNn9WVVliXKsbboocVQsGeYD0FA=
Subject key identifier: 3E:1A:A3:A6:B2:73:6D:62:2F:BC:1E:E8:B1:64:7D:6B:0A:32:7B:9B
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 01942747CBC704A613D4425EA55FC85B35C1
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/PhqjprJzbWIvvB7osWR9awoye5s.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31252
IP address blocks: 37.233.0.0/18 maxlen: 32
87.248.160.0/19 maxlen: 32
89.28.0.0/17 maxlen: 32
89.28.21.0/24 maxlen: 32
91.216.97.0/24 maxlen: 24
95.65.0.0/17 maxlen: 32
178.18.32.0/20 maxlen: 32
178.168.0.0/17 maxlen: 32
185.17.224.0/22 maxlen: 32
185.70.188.0/22 maxlen: 32
185.175.80.0/22 maxlen: 32
188.138.128.0/17 maxlen: 32
188.244.16.0/20 maxlen: 32
195.93.218.0/23 maxlen: 32
2a00:9900::/29 maxlen: 128
2a01:320::/29 maxlen: 128
2a0b:dd00::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cb:c7:04:a6:13:d4:42:5e:a5:5f:c8:5b:35:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e1aa3a6b2736d622fbc1ee8b1647d6b0a327b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:bd:75:78:d7:fc:c7:8f:eb:f6:78:d8:f7:
25:ad:26:3a:9f:e9:dd:6d:29:47:21:47:c1:01:c0:
10:f7:d3:ed:d8:a5:9f:08:5c:ee:32:6e:2d:df:cc:
a3:0b:4e:0e:e9:cd:d5:a2:2b:23:4d:37:a5:6b:99:
bd:06:b5:3e:61:c8:3d:bc:51:e8:cb:e2:0e:63:8a:
2e:13:f1:f9:27:b9:10:f4:5f:2e:14:a7:22:11:fe:
4c:59:2e:a0:a9:b4:05:ce:ea:3c:36:1e:f6:c9:19:
22:62:17:38:05:f1:af:f6:d4:8b:6b:6c:e6:ed:37:
27:ff:f1:91:a2:23:98:41:79:e9:e4:ee:05:28:dd:
f4:2d:36:65:cb:fb:4e:f0:10:9b:0f:01:17:0b:a2:
9f:e9:0f:24:e2:91:65:31:40:c9:a7:d1:72:ec:86:
cc:31:2a:27:d8:43:1e:1a:1f:d7:11:c9:fa:d6:a9:
a7:9f:14:78:5a:53:b7:3d:90:5b:63:cb:bc:aa:80:
40:62:f2:31:5e:9b:39:7f:34:4e:75:c3:a3:26:d0:
b2:8d:83:9a:95:39:6f:65:67:5b:65:bd:29:cf:ea:
29:d7:36:55:9b:46:40:6c:4d:0d:0b:53:4c:87:a1:
bd:61:6d:23:d9:4e:56:5f:2c:b6:7d:d6:9c:b3:b6:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:A3:A6:B2:73:6D:62:2F:BC:1E:E8:B1:64:7D:6B:0A:32:7B:9B
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/PhqjprJzbWIvvB7osWR9awoye5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.0.0/18
87.248.160.0/19
89.28.0.0/17
91.216.97.0/24
95.65.0.0/17
178.18.32.0/20
178.168.0.0/17
185.17.224.0/22
185.70.188.0/22
185.175.80.0/22
188.138.128.0/17
188.244.16.0/20
195.93.218.0/23
IPv6:
2a00:9900::/29
2a01:320::/29
2a0b:dd00::/29
Signature Algorithm: sha256WithRSAEncryption
b9:63:14:2b:44:c9:5c:d6:af:1c:5f:48:78:7d:91:35:b2:ff:
dd:8a:a1:e8:98:01:58:89:16:80:24:5c:18:fe:8a:e3:40:0b:
e2:3c:18:a8:42:3b:84:09:93:92:a4:3e:ea:14:c1:89:5e:9e:
a2:17:77:23:80:b4:7f:ed:0d:8b:4b:a0:8d:a9:30:79:90:bd:
2a:5a:08:de:e8:c7:42:5e:d1:f8:1b:0f:89:7b:39:12:eb:74:
68:74:0d:4c:1b:b3:35:1f:3e:c2:b4:39:e9:b0:46:4f:36:f3:
9d:27:3c:64:85:72:44:13:9b:63:59:39:2e:d3:e5:0e:a9:14:
cd:d2:2c:18:c9:b2:9a:32:86:9e:a7:39:95:36:25:d3:e6:75:
5c:97:3f:89:09:b1:42:55:04:5a:c2:b7:e5:5c:30:65:fe:c4:
95:e7:d7:cd:bc:b8:e7:06:e5:72:4c:8d:06:40:00:1a:1a:16:
7b:c0:22:51:83:f4:ad:cf:31:61:ba:98:f7:58:5b:1c:ab:4b:
72:b0:9e:8b:2c:e8:c2:88:7f:3d:47:76:69:6a:d4:db:6e:13:
14:4b:3e:ea:fd:97:71:3b:02:7c:60:c4:03:96:a5:4c:2c:c3:
40:d4:3a:72:14:e6:8f:4e:44:b8:8c:6a:07:f9:53:b1:59:3a:
50:90:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:02 2025 by rpki-client