Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/ImFxqguTjs8pVYC5ryesadS38Z8.roa
File: ImFxqguTjs8pVYC5ryesadS38Z8.roa (raw, json)
Hash identifier: 50Igi8PpiinoEV07PZI2cgsRcHJemqbubsN9BAG4Kd8=
Subject key identifier: 22:61:71:AA:0B:93:8E:CF:29:55:80:B9:AF:27:AC:69:D4:B7:F1:9F
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019425FC1A9FF7373E9EF75BAE3A4A7D33B6
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/ImFxqguTjs8pVYC5ryesadS38Z8.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202090
IP address blocks: 81.91.190.0/24 maxlen: 24
81.91.191.0/24 maxlen: 24
178.159.44.0/22 maxlen: 22
178.159.44.0/24 maxlen: 24
178.159.45.0/24 maxlen: 24
178.159.46.0/24 maxlen: 24
178.159.47.0/24 maxlen: 24
185.47.152.0/23 maxlen: 24
185.65.137.0/24 maxlen: 24
185.99.142.0/23 maxlen: 24
185.99.142.0/24 maxlen: 24
185.99.143.0/24 maxlen: 24
193.176.180.0/22 maxlen: 22
193.176.180.0/24 maxlen: 24
193.176.181.0/24 maxlen: 24
193.176.182.0/24 maxlen: 24
193.176.183.0/24 maxlen: 24
2a0c:b1c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1a:9f:f7:37:3e:9e:f7:5b:ae:3a:4a:7d:33:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=226171aa0b938ecf295580b9af27ac69d4b7f19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:27:14:18:32:ae:99:9a:54:34:4e:17:76:
a3:f6:e4:84:52:8b:47:4d:b9:07:a8:2b:fa:50:31:
ab:c1:63:7d:3a:74:8a:b1:0e:a7:46:85:2d:07:16:
2a:cb:c0:b5:e7:16:a6:f1:dc:e6:32:b8:2f:ee:8a:
66:a7:ea:7e:73:a2:da:f1:5e:32:74:12:b9:27:c3:
95:bc:8c:1a:71:81:e4:47:72:d0:fd:52:b4:ae:9e:
5c:55:a6:b2:4a:40:0a:1d:34:27:c4:41:8e:4a:0e:
87:23:34:e9:a7:01:d9:ad:0d:01:06:0f:7e:d6:9b:
d6:09:8a:ba:37:f7:43:8e:52:fa:9e:6e:ca:99:87:
78:f3:f9:4d:5a:81:9d:3a:d5:81:3e:9f:76:2f:b4:
6b:8e:51:d4:8e:42:1b:c4:47:38:6d:bc:81:05:54:
07:dc:67:4f:13:44:74:12:8e:72:83:c0:ed:4b:68:
7a:84:97:17:a8:7a:a3:2e:3a:18:12:8b:dd:79:ae:
56:c0:d7:c6:97:0c:54:88:42:fb:fe:e5:f6:f0:a9:
6a:31:f7:4d:2a:9f:42:8e:f4:fd:01:fc:b2:3b:10:
18:45:90:41:fb:7a:d3:63:e8:fc:3f:a5:e2:ce:3f:
79:88:24:5a:bf:f1:07:ec:f6:99:1a:b9:e4:99:4e:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:61:71:AA:0B:93:8E:CF:29:55:80:B9:AF:27:AC:69:D4:B7:F1:9F
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/ImFxqguTjs8pVYC5ryesadS38Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.190.0/23
178.159.44.0/22
185.47.152.0/23
185.65.137.0/24
185.99.142.0/23
193.176.180.0/22
IPv6:
2a0c:b1c0::/32
Signature Algorithm: sha256WithRSAEncryption
45:af:12:3b:1e:3f:38:7d:75:5b:7c:fc:97:ea:d2:b2:40:e2:
ef:1f:97:08:4b:46:cf:55:e3:a9:a9:4b:08:05:5e:32:2f:c7:
1f:11:e3:fc:b2:ec:35:c2:43:06:6b:0b:46:6f:63:bc:6b:6b:
25:3e:03:42:0b:62:b5:11:af:d0:34:61:11:f4:70:5d:e9:b2:
2a:40:f4:b6:9d:27:42:6a:dc:05:fd:b3:34:2f:f0:5a:a2:e5:
b5:d5:9e:e2:7d:db:4a:cc:45:85:e3:97:9c:ce:c7:fa:e2:6d:
9e:0b:65:41:4d:2f:0b:a6:32:2f:09:0f:86:4b:95:82:ab:a4:
09:fb:05:1b:da:f7:4a:90:77:89:04:5b:30:48:15:92:eb:c7:
11:ae:8b:b4:7e:ce:26:2f:c3:aa:9d:d2:85:aa:4a:ad:bf:7e:
67:cf:64:6c:1e:97:51:0b:03:44:be:e8:d3:31:4d:32:aa:18:
4f:65:8c:61:66:6e:4f:30:cb:41:31:aa:21:88:20:d9:31:d7:
ac:d8:bf:95:f5:53:d8:96:f2:63:13:5f:fb:bf:8b:48:be:0f:
cc:cb:6f:a6:ae:d5:34:f9:57:3b:77:5d:2f:91:e1:a7:c8:35:
9b:24:6d:49:a9:d5:cb:ac:20:f8:c7:29:2c:b9:e4:06:26:34:
5f:7d:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:28 2025 by rpki-client