Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/CTedhf-UDhDCo0gKWN1eFB95iME.roa
File: CTedhf-UDhDCo0gKWN1eFB95iME.roa (raw, json)
Hash identifier: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=
Subject key identifier: 09:37:9D:85:FF:94:0E:10:C2:A3:48:0A:58:DD:5E:14:1F:79:88:C1
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 0194758FCF6B5C27F15E254D6D0F5D8D033D
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/CTedhf-UDhDCo0gKWN1eFB95iME.roa
Signing time: Fri 17 Jan 2025 18:39:06 +0000
ROA not before: Fri 17 Jan 2025 18:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14907
IP address blocks: 91.198.174.0/24 maxlen: 24
185.15.56.0/22 maxlen: 22
185.15.56.0/24 maxlen: 24
185.15.57.0/24 maxlen: 24
185.15.58.0/24 maxlen: 24
185.15.59.0/24 maxlen: 24
185.71.138.0/24 maxlen: 24
2001:67c:930::/48 maxlen: 48
2a02:ec80::/29 maxlen: 29
2a02:ec80:300::/48 maxlen: 48
2a02:ec80:600::/48 maxlen: 48
2a02:ec80:700::/48 maxlen: 48
2a02:ec80:a000::/48 maxlen: 48
2a02:ec80:a100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:8f:cf:6b:5c:27:f1:5e:25:4d:6d:0f:5d:8d:03:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jan 17 18:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09379d85ff940e10c2a3480a58dd5e141f7988c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:8c:26:75:52:77:83:39:a0:08:e4:a7:ad:
83:54:f7:9c:af:91:36:e7:62:a8:78:3c:17:e2:11:
73:eb:58:b9:91:a5:1d:47:d0:1c:40:0e:81:68:7a:
94:b0:96:c3:a7:1b:5e:28:a1:c1:da:66:30:8d:72:
fc:31:da:e0:d0:08:2b:e5:c1:d5:d9:bc:e4:ff:14:
6f:6c:6d:20:28:5e:97:bf:7e:a1:b7:78:7f:55:ea:
4c:5f:68:02:be:bd:87:34:64:e4:3b:7b:bb:04:32:
ab:0f:02:87:62:b6:f1:36:a9:23:13:aa:8a:a6:b5:
40:e6:ae:12:0a:dc:d0:d4:8d:8c:d6:87:20:72:9e:
25:2f:c1:fb:40:05:ec:66:54:19:3f:79:db:eb:2d:
76:d2:3f:6f:eb:2b:a6:84:15:4c:aa:5b:98:5d:03:
8e:bb:a2:39:6f:2b:ed:8c:6e:78:68:da:06:ba:a3:
b2:2e:ad:d6:0e:7e:d6:7c:7f:05:a7:ca:e7:62:98:
3b:05:53:4f:3b:74:66:a1:c7:1e:ec:5d:97:75:0e:
88:c7:bb:fc:77:8a:20:16:4b:11:e4:32:e9:34:bd:
04:38:81:54:f8:51:9d:51:1f:ff:e4:48:da:e4:bf:
9a:21:45:81:a1:e3:7b:e0:90:24:ea:45:cc:7d:dc:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:9D:85:FF:94:0E:10:C2:A3:48:0A:58:DD:5E:14:1F:79:88:C1
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/CTedhf-UDhDCo0gKWN1eFB95iME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.174.0/24
185.15.56.0/22
185.71.138.0/24
IPv6:
2001:67c:930::/48
2a02:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
0a:9e:b1:ce:ba:46:49:75:32:b6:d9:25:20:22:38:49:fe:6b:
00:24:28:8c:5c:d7:4d:fd:89:aa:42:e4:18:09:00:fd:0b:66:
b1:15:ac:73:a8:2f:71:8a:64:2b:e7:5a:0d:e4:39:38:27:ee:
49:77:dc:8e:a2:d7:9c:56:9d:ce:90:d4:ee:20:f5:6b:0a:3f:
fa:73:d6:47:f2:8a:1e:ee:07:81:5d:e4:9e:d0:66:e1:de:65:
db:15:3c:c3:97:3f:0e:eb:11:af:21:f2:d5:9a:b9:ad:bf:85:
2a:77:c1:10:b2:f9:28:ef:8e:64:48:ce:83:08:d9:0f:76:86:
76:68:20:8f:e4:3a:44:bd:b8:c1:ae:91:18:37:4d:49:00:8b:
0a:fd:19:ca:5a:51:e7:f8:aa:11:c0:f4:43:6f:ec:54:fa:69:
fe:79:33:2d:0a:51:01:3a:99:66:8a:4a:3b:1f:c7:36:70:97:
8f:75:b0:c8:01:9a:e1:7e:18:cd:17:e6:34:47:b2:bd:ed:53:
fb:f3:9b:2b:78:0d:54:9e:70:56:5d:9b:7c:e2:5f:c9:24:99:
d3:8a:df:14:c1:c9:12:3d:6e:17:65:f4:6e:e4:72:65:ca:d9:
21:60:39:64:6e:40:f6:42:14:59:00:59:45:28:d8:48:af:6a:
78:6d:d4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:37:57 2025 by rpki-client