Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7GFUahFavdapiWbcjleJkdV1zfw.roa
File: 7GFUahFavdapiWbcjleJkdV1zfw.roa (raw, json)
Hash identifier: pNwlVhKbuybWXrAWI65MLGqrsv9UpvWTn1v8I0TnPAo=
Subject key identifier: EC:61:54:6A:11:5A:BD:D6:A9:89:66:DC:8E:57:89:91:D5:75:CD:FC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194F00C8822293D27912E0BAD5299EC4E35
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7GFUahFavdapiWbcjleJkdV1zfw.roa
Signing time: Mon 10 Feb 2025 13:29:00 +0000
ROA not before: Mon 10 Feb 2025 13:29:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:0c:88:22:29:3d:27:91:2e:0b:ad:52:99:ec:4e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 10 13:29:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec61546a115abdd6a98966dc8e578991d575cdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:e5:03:01:9f:35:1d:e1:ce:7c:a3:ef:5f:
e6:d8:70:26:4b:27:b8:b2:f3:83:36:57:ec:ac:fc:
61:ef:c9:3f:68:18:30:9f:77:9d:32:4f:b0:5f:1c:
c0:a1:cf:40:45:c2:d0:f4:e3:fc:5f:83:9b:6f:e7:
72:9a:e2:ac:bf:d4:e9:4b:79:ed:c3:17:27:d2:e8:
29:d8:67:25:ea:94:15:5c:0c:a3:f8:e7:a5:53:aa:
fc:ce:9e:88:ad:4f:4b:79:f2:10:c8:19:d3:8e:bf:
05:83:e8:47:a7:36:3a:36:94:0a:40:a1:2f:f2:30:
b1:22:16:7f:fc:fe:a1:42:94:1c:f3:e2:66:a0:7b:
66:6b:29:33:d0:48:03:2d:b7:a9:52:69:76:ce:6b:
6f:a1:99:ee:66:7c:32:7d:5d:18:23:16:5f:4d:66:
d6:a3:4f:ae:56:1e:e5:86:90:e2:fe:e8:06:42:f3:
48:ab:14:85:69:f7:a8:5d:89:35:73:cc:36:50:de:
9b:41:eb:8a:cc:79:55:39:7e:24:17:30:97:76:fe:
fe:1a:e4:b2:5d:4d:26:c5:a6:9d:ac:5e:bf:13:87:
2d:03:76:5f:49:b2:40:46:0b:92:97:1f:6a:d9:df:
fe:55:39:10:09:d9:98:8e:de:94:b7:fb:ff:3c:ae:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:54:6A:11:5A:BD:D6:A9:89:66:DC:8E:57:89:91:D5:75:CD:FC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7GFUahFavdapiWbcjleJkdV1zfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.141.148.0/24
45.147.44.0/23
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a441::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
16:dd:dc:0b:63:e2:ed:05:d0:0a:e3:fd:94:04:2f:a9:a5:55:
c1:de:4e:1f:bc:ac:c7:26:78:98:fe:a4:73:d6:a7:b4:10:a1:
69:38:78:27:a3:6e:52:76:d8:f1:aa:37:ca:5d:eb:63:fd:6d:
ef:d2:93:2d:25:35:91:e9:8e:7d:e0:54:56:42:2d:37:80:4a:
0f:3f:54:76:dd:67:0a:80:44:52:a7:67:33:6d:86:23:5c:ec:
a5:ba:36:56:bb:89:5a:1b:ab:6d:c7:a5:71:55:16:07:86:4e:
04:58:bb:62:ac:6e:25:59:7d:bf:bb:3e:47:2f:46:1b:1c:fe:
9d:0c:41:0e:a2:9c:03:4c:7b:d7:bc:1c:8b:1b:70:ba:66:5a:
71:ff:75:8c:79:27:5e:07:82:bf:1d:7a:a1:c1:d2:05:c4:6e:
37:8e:2b:0b:86:aa:6b:6e:2c:d6:8b:4e:42:ff:2c:60:47:ba:
63:78:9a:40:d7:e5:89:c7:0f:08:25:9e:5c:97:21:12:95:48:
31:1e:2b:58:de:9f:ea:a7:33:5c:25:e4:56:71:fc:1f:a8:61:
bd:95:92:51:bc:7a:b4:aa:56:33:06:0c:0b:a8:db:7d:47:38:
16:64:71:83:f7:9a:cd:b4:a3:0e:b8:ea:5b:7c:21:bf:24:1e:
ab:25:a0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:41 2025 by rpki-client