Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa
File: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (raw, json)
Hash identifier: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=
Subject key identifier: 79:C1:4B:AC:54:98:6B:31:8D:A4:CC:2D:75:40:B6:19:3C:81:EC:BB
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01941FFA9B49E4560480C5EE609C4CE10C24
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49468
IP address blocks: 45.8.45.0/24 maxlen: 24
45.8.46.0/24 maxlen: 24
45.8.47.0/24 maxlen: 24
86.104.220.0/24 maxlen: 24
89.33.247.0/24 maxlen: 24
91.213.11.0/24 maxlen: 24
91.213.188.0/24 maxlen: 24
128.0.44.0/24 maxlen: 24
188.211.238.0/24 maxlen: 24
194.242.46.0/24 maxlen: 24
194.246.38.0/24 maxlen: 24
194.246.84.0/24 maxlen: 24
194.246.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9b:49:e4:56:04:80:c5:ee:60:9c:4c:e1:0c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79c14bac54986b318da4cc2d7540b6193c81ecbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:35:7d:70:6c:ef:30:29:03:5a:98:22:e1:
12:2e:13:5f:6a:a0:ab:74:e8:d0:b1:bd:ce:fa:01:
5a:28:2a:97:2e:02:52:5b:0c:7a:a0:9c:56:ac:42:
a9:d2:1b:1d:08:b4:bb:0d:70:a6:1f:21:df:0e:d3:
94:19:5d:7e:e4:61:1a:47:bc:8f:73:02:18:5d:d2:
29:20:43:72:8b:5f:4f:ef:76:08:02:4e:61:c7:9b:
2d:c5:63:d1:bd:f8:bd:8e:c2:29:23:67:11:0e:0d:
21:98:f9:a3:a5:75:b9:87:3f:9d:90:c7:80:b0:60:
93:97:d7:dc:ad:bb:d0:0d:2d:f2:cb:8c:4e:7a:8c:
fd:ff:a0:78:79:3b:e8:15:84:80:bf:59:b6:e4:c2:
ce:75:5d:21:ec:7f:e7:fe:dc:05:04:06:35:5b:0d:
66:d6:5a:69:09:27:0e:6b:54:0c:9f:ea:77:72:1d:
81:1f:24:31:3b:ff:7c:c2:6d:c6:47:2b:33:79:8b:
05:91:99:10:f8:e4:d3:4d:b1:cc:15:97:cb:c1:5e:
88:db:f1:65:8d:d5:10:58:3b:ce:44:4d:aa:c5:2a:
21:4c:1a:09:34:63:a6:dc:73:17:f0:b2:46:22:1e:
90:b5:02:4a:f9:86:a0:98:d3:01:47:12:cf:f5:b1:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:4B:AC:54:98:6B:31:8D:A4:CC:2D:75:40:B6:19:3C:81:EC:BB
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.45.0-45.8.47.255
86.104.220.0/24
89.33.247.0/24
91.213.11.0/24
91.213.188.0/24
128.0.44.0/24
188.211.238.0/24
194.242.46.0/24
194.246.38.0/24
194.246.84.0/24
194.246.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fd:bd:71:10:94:99:12:19:cf:89:ee:88:66:c2:5b:c0:25:
a5:c4:ed:3d:88:a2:8f:ad:cc:17:0f:18:35:fa:ab:93:0b:7e:
5f:b2:44:6d:cd:76:12:b5:af:05:dd:53:ae:45:f4:59:9a:07:
94:a0:8f:0a:e9:fd:c0:36:76:7c:90:cb:f2:8e:1a:c0:2e:97:
2c:c6:4b:2b:6a:47:be:90:89:82:ae:96:dd:52:f1:6d:86:d8:
5e:2e:bb:ca:e8:33:23:c7:ed:a0:32:30:ab:c7:3b:70:3f:2f:
75:5f:2c:fe:c9:15:1a:b4:45:50:43:94:0f:61:cf:81:03:f9:
1b:13:49:30:71:b5:08:47:d0:c9:e5:24:f8:72:e9:53:81:52:
b9:81:12:dc:69:93:8e:78:6d:73:71:49:59:83:ab:1f:b1:80:
38:c4:3e:6e:64:97:24:4f:1b:15:a5:24:49:06:47:b0:2f:29:
b0:a7:b0:5b:73:71:ba:88:31:cf:37:48:f3:e5:96:e3:13:01:
31:dc:d7:f4:fc:36:f2:53:1a:74:ea:d6:35:4f:cd:12:a0:d7:
40:0a:a3:da:db:7c:3e:01:fc:4c:44:1e:a7:31:5e:13:c5:dc:
40:76:74:b6:f3:51:78:c4:03:71:06:ba:a1:49:01:63:62:af:
dc:70:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:26 2025 by rpki-client