Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa
File: e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa (raw, json)
Hash identifier: F9D5aBOFLIrm7XWZ3/0StMK2qKNaesetbFTA4limnyA=
Subject key identifier: 7B:F9:28:7E:82:A0:EF:2D:49:F2:E2:EB:54:87:AE:BD:8D:8E:F4:C9
Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial: 01941F8C8E43E22D552782A611F0D014E429
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201602
IP address blocks: 31.187.104.0/24 maxlen: 24
31.187.105.0/24 maxlen: 24
31.187.106.0/24 maxlen: 24
31.187.107.0/24 maxlen: 24
31.187.108.0/24 maxlen: 24
31.187.109.0/24 maxlen: 24
31.187.110.0/24 maxlen: 24
31.187.111.0/24 maxlen: 24
134.19.168.0/24 maxlen: 24
134.19.169.0/24 maxlen: 24
134.19.170.0/24 maxlen: 24
134.19.171.0/24 maxlen: 24
134.19.172.0/24 maxlen: 24
134.19.173.0/24 maxlen: 24
134.19.174.0/24 maxlen: 24
134.19.175.0/24 maxlen: 24
185.66.24.0/24 maxlen: 24
185.66.25.0/24 maxlen: 24
185.66.26.0/24 maxlen: 24
185.66.27.0/24 maxlen: 24
185.203.104.0/24 maxlen: 24
185.203.105.0/24 maxlen: 24
185.203.106.0/24 maxlen: 24
185.203.107.0/24 maxlen: 24
188.241.140.0/24 maxlen: 24
188.241.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8e:43:e2:2d:55:27:82:a6:11:f0:d0:14:e4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf9287e82a0ef2d49f2e2eb5487aebd8d8ef4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:43:41:48:e3:5b:0b:cd:ef:b7:4a:86:63:
7b:e0:f9:c0:73:a9:28:d2:70:aa:ca:be:3d:7b:89:
39:02:bc:c5:cf:ed:1b:97:52:01:6d:da:33:5e:3b:
08:ac:f5:64:47:fa:d5:c5:19:46:88:0b:18:d3:7a:
82:81:64:3e:08:22:5b:01:81:78:bb:4b:b4:60:31:
d8:85:71:3d:54:fd:2a:e9:81:e2:1c:58:75:98:6b:
93:e7:62:29:ea:81:70:0b:b1:5e:50:49:6b:d9:cb:
36:45:8a:76:92:d8:dc:4e:07:0f:ff:b6:3d:b5:22:
15:93:4e:7e:c1:f3:c4:76:88:fa:55:b1:6d:d4:76:
b0:a6:50:fb:a6:54:4f:e2:a4:71:1b:da:41:58:ff:
ec:da:0e:8e:7c:e5:c5:60:92:5a:72:39:00:48:b3:
19:e6:06:6b:a9:df:d1:78:f6:93:99:47:32:16:73:
39:18:b2:5e:75:2e:60:57:83:29:92:53:06:da:0d:
b4:3e:34:b9:da:22:4e:6e:8a:99:f0:d9:67:ca:a3:
a8:df:8f:5e:7f:88:ad:5a:d9:1c:e5:3f:cd:0c:18:
61:6a:9d:5d:a2:c6:22:68:a8:4e:1e:9f:2c:17:b2:
d9:40:64:eb:03:94:a7:93:81:02:7d:67:35:bf:7c:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F9:28:7E:82:A0:EF:2D:49:F2:E2:EB:54:87:AE:BD:8D:8E:F4:C9
X509v3 Authority Key Identifier:
keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.104.0/21
134.19.168.0/21
185.66.24.0/22
185.203.104.0/22
188.241.140.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:94:46:be:05:85:4e:9b:7b:d4:e9:c0:86:6d:46:13:18:cf:
57:ef:68:85:98:46:8e:de:20:ff:a5:8b:69:91:4a:b5:c6:8e:
67:7f:1a:70:2e:54:63:39:b3:66:71:5e:5e:ca:89:8d:49:13:
18:78:a9:7e:57:32:de:77:1f:46:4e:65:4d:23:b2:f0:3d:4c:
0d:5d:ff:69:ea:f8:1a:6e:10:1b:9e:e9:b3:53:97:19:a0:56:
ec:82:9d:e5:b5:c8:8c:f2:b3:6e:47:d4:14:d4:77:94:42:18:
05:48:99:47:55:11:a8:42:52:33:dd:a0:6c:d2:71:fb:ae:65:
f0:ea:bf:a5:ee:1d:c4:f2:6c:36:93:3e:9e:75:b4:90:00:f6:
88:af:d4:91:d2:d8:f4:4f:0a:fd:cf:b1:6a:c8:33:14:d2:9a:
e6:66:27:3f:e3:4c:85:46:58:56:fe:a8:37:26:75:98:90:3b:
62:c8:11:9a:d4:29:2a:78:3b:74:19:ab:09:75:d0:e6:78:b1:
9c:6b:ac:87:c8:15:72:23:90:b1:38:b1:04:aa:44:7a:5b:c5:
6a:ea:e1:ad:da:8e:42:13:b4:17:95:a4:44:7a:dc:b3:04:a8:
13:33:cd:03:30:d7:fc:8b:5a:31:12:1a:01:a2:d9:7b:c1:cc:
16:20:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:29:49 2025 by rpki-client