Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/D_sfllHI5TzCkYD0Z5hvgkOAOO0.roa
File: D_sfllHI5TzCkYD0Z5hvgkOAOO0.roa (raw, json)
Hash identifier: KBw8uNegI1likM+lcntvt8t6qBJCobyyTtYYssV5f34=
Subject key identifier: 0F:FB:1F:96:51:C8:E5:3C:C2:91:80:F4:67:98:6F:82:43:80:38:ED
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 019424452E9DB083A31A2D1A0208FD0E9A51
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/D_sfllHI5TzCkYD0Z5hvgkOAOO0.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13110
IP address blocks: 46.228.80.0/20 maxlen: 20
46.238.64.0/18 maxlen: 18
62.21.0.0/17 maxlen: 17
77.65.0.0/17 maxlen: 17
80.87.32.0/20 maxlen: 20
85.221.128.0/17 maxlen: 17
88.151.136.0/21 maxlen: 21
94.127.104.0/21 maxlen: 21
109.173.128.0/17 maxlen: 17
151.249.80.0/21 maxlen: 21
185.14.72.0/22 maxlen: 22
185.44.172.0/22 maxlen: 22
194.114.148.0/22 maxlen: 22
194.116.138.0/23 maxlen: 23
195.160.180.0/23 maxlen: 23
2001:4020::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2e:9d:b0:83:a3:1a:2d:1a:02:08:fd:0e:9a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ffb1f9651c8e53cc29180f467986f82438038ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:aa:89:e5:3a:31:d7:ee:30:7a:df:28:34:
b0:1d:f8:47:e3:8d:89:c6:15:e6:57:18:b7:b0:7e:
d4:91:50:66:98:86:7c:b0:03:3f:7f:e2:85:61:9f:
a4:fc:48:82:0e:91:c1:7d:58:6f:9d:71:0f:db:8e:
8a:5e:5d:8f:95:8f:38:b3:3d:e7:2d:7d:83:96:27:
cb:29:a4:38:66:42:a5:92:48:c6:7e:e8:6a:0f:a2:
19:37:26:6d:be:9d:6a:bb:ea:01:ee:b0:42:bc:15:
56:b2:c8:45:59:fa:1f:f5:b2:f5:07:4a:90:0e:cf:
a8:13:05:db:21:f9:c4:38:10:91:2f:de:b2:f8:a0:
30:d3:2b:2c:7c:29:ff:9b:46:ad:ea:a5:26:a7:82:
13:76:fe:f5:07:f4:b7:b5:3d:41:b7:ba:a4:91:9b:
bc:69:79:16:60:9b:f2:52:0a:4d:74:f3:c8:cf:1a:
23:cf:20:e4:68:7f:42:7b:f8:d0:4a:e2:8f:f8:c7:
9c:cd:7d:f8:ed:56:40:d4:17:43:7c:3d:26:44:7d:
40:2c:2f:b1:b7:1a:12:70:e6:bf:0a:db:78:a4:29:
99:03:95:4e:b1:cd:bd:e4:9b:10:be:f0:84:5c:29:
c4:0e:67:2f:ae:df:97:39:9f:b5:88:51:b6:b0:db:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FB:1F:96:51:C8:E5:3C:C2:91:80:F4:67:98:6F:82:43:80:38:ED
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/D_sfllHI5TzCkYD0Z5hvgkOAOO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.80.0/20
46.238.64.0/18
62.21.0.0/17
77.65.0.0/17
80.87.32.0/20
85.221.128.0/17
88.151.136.0/21
94.127.104.0/21
109.173.128.0/17
151.249.80.0/21
185.14.72.0/22
185.44.172.0/22
194.114.148.0/22
194.116.138.0/23
195.160.180.0/23
IPv6:
2001:4020::/32
Signature Algorithm: sha256WithRSAEncryption
ad:d4:61:60:fd:8f:70:41:cf:37:33:76:41:b5:36:d5:c2:19:
5d:20:71:fb:20:a0:67:1c:8a:82:bf:c8:7f:3a:6f:1e:ca:89:
ab:3c:b1:d7:4b:50:86:92:79:13:cf:5a:65:27:81:21:c4:82:
99:86:0c:97:27:16:97:85:05:74:97:0f:1e:f3:36:c5:64:f3:
07:54:1c:79:c1:49:bb:a5:b5:33:a3:a8:8d:3a:cb:67:47:c2:
ff:e9:a5:f6:3b:1d:d9:8a:14:4c:61:f4:fb:3c:c4:f8:f9:de:
57:49:c6:a5:e0:d6:6f:2b:ac:6b:66:19:8a:81:eb:69:e3:5a:
65:cd:a8:9a:81:a4:e5:a0:5a:46:72:a1:af:eb:85:75:ac:d3:
5a:a8:c7:20:12:cb:e0:6f:ae:a9:ee:5c:6e:c1:7f:b0:28:ef:
c8:90:65:35:f4:c9:8e:46:29:9c:70:c9:89:04:26:b9:f6:2f:
99:c7:9b:93:ad:7d:9f:32:cf:7e:91:27:8c:e5:f6:47:db:2b:
10:4e:15:d5:a2:90:e9:54:ef:aa:a0:4b:44:f5:87:6c:13:32:
d1:eb:84:9e:15:cd:70:4d:a6:cf:24:ab:b2:4f:8a:4d:04:25:
f6:82:ec:a3:47:37:a1:72:56:f8:a4:2d:13:06:a7:3f:15:1e:
a4:1c:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:06 2025 by rpki-client