Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/o6y2fyURWeu2t_DFurQx7USUPKs.roa
File: o6y2fyURWeu2t_DFurQx7USUPKs.roa (raw, json)
Hash identifier: kPReXruwGea93kBP9pEyd3hI0ZYY5dR0hxSQpsQ2xeI=
Subject key identifier: A3:AC:B6:7F:25:11:59:EB:B6:B7:F0:C5:BA:B4:31:ED:44:94:3C:AB
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019420D64B44060381DC5A21B2EA44175ACC
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/o6y2fyURWeu2t_DFurQx7USUPKs.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49788
IP address blocks: 45.153.104.0/22 maxlen: 22
79.141.96.0/20 maxlen: 20
91.90.104.0/21 maxlen: 21
91.189.120.0/21 maxlen: 21
91.193.0.0/22 maxlen: 24
91.209.212.0/24 maxlen: 24
91.218.184.0/22 maxlen: 22
91.221.130.0/23 maxlen: 23
91.223.100.0/24 maxlen: 24
91.225.60.0/22 maxlen: 22
93.184.112.0/21 maxlen: 21
151.252.8.0/21 maxlen: 24
176.111.206.0/23 maxlen: 23
185.7.192.0/22 maxlen: 22
185.55.104.0/22 maxlen: 22
185.80.180.0/22 maxlen: 24
185.168.72.0/22 maxlen: 22
193.202.115.0/24 maxlen: 24
2001:67c:230::/48 maxlen: 48
2001:67c:206c::/48 maxlen: 48
2a02:d140::/29 maxlen: 29
2a04:d340::/29 maxlen: 29
2a0b:f200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4b:44:06:03:81:dc:5a:21:b2:ea:44:17:5a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3acb67f251159ebb6b7f0c5bab431ed44943cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:26:66:22:fd:d0:f8:27:72:c7:f1:3e:8b:
68:23:55:ac:c5:48:ae:15:54:87:78:3c:d3:c6:fd:
a9:b9:eb:77:56:b3:98:26:a5:b6:69:03:cf:93:0f:
9b:ff:eb:0a:9f:a3:d1:0e:b7:2e:c2:9d:36:61:c8:
f1:d1:a9:d8:31:ef:d7:79:5a:01:b5:c8:7f:74:ee:
a9:56:af:8e:7a:77:9b:f0:2e:5e:12:12:48:81:65:
98:5c:68:32:1c:6f:db:ad:22:b4:36:16:7f:39:5f:
fa:89:34:3d:73:94:0a:9e:55:f9:ca:d3:e0:07:09:
c8:3d:6f:2e:68:50:6e:b7:bc:2e:72:2c:4d:64:45:
11:4d:d3:08:e2:12:4f:89:c9:68:53:c4:2c:e9:27:
1d:50:80:29:7c:77:43:33:7f:f6:8d:37:8d:78:69:
99:37:f8:32:da:f7:12:2a:be:9d:f9:72:89:5e:63:
b0:f6:a8:ce:56:28:20:a6:5c:a0:78:3f:a3:35:47:
f6:02:8f:3c:15:3d:75:af:9b:60:ce:8c:b2:01:e3:
40:71:d8:89:f8:00:d1:4e:67:85:2c:1e:21:a2:8e:
d8:63:05:19:97:62:55:92:4c:53:a7:5a:3d:0e:32:
78:ff:42:eb:2e:38:f1:84:90:0e:79:70:c7:0c:94:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:B6:7F:25:11:59:EB:B6:B7:F0:C5:BA:B4:31:ED:44:94:3C:AB
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/o6y2fyURWeu2t_DFurQx7USUPKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.104.0/22
79.141.96.0/20
91.90.104.0/21
91.189.120.0/21
91.193.0.0/22
91.209.212.0/24
91.218.184.0/22
91.221.130.0/23
91.223.100.0/24
91.225.60.0/22
93.184.112.0/21
151.252.8.0/21
176.111.206.0/23
185.7.192.0/22
185.55.104.0/22
185.80.180.0/22
185.168.72.0/22
193.202.115.0/24
IPv6:
2001:67c:230::/48
2001:67c:206c::/48
2a02:d140::/29
2a04:d340::/29
2a0b:f200::/32
Signature Algorithm: sha256WithRSAEncryption
6e:23:60:2c:7c:bc:eb:08:88:14:d9:8b:b4:31:ec:8d:07:5f:
01:ec:45:f0:58:93:02:77:1b:bf:ef:76:ae:08:9f:af:73:bc:
37:02:c5:db:8f:0a:25:0e:58:47:ff:c4:76:9b:39:c9:c5:49:
3e:ca:e1:83:f1:9f:73:fb:8d:a2:da:c4:71:25:9a:09:f7:2b:
99:8c:4c:2e:31:27:b4:77:20:a3:b9:7d:17:1a:41:8e:02:43:
13:86:73:71:2e:97:3d:79:20:f1:3e:1a:11:47:46:50:c5:c9:
84:90:67:09:a2:7d:58:44:d0:41:af:8e:fb:df:c6:8c:23:cc:
95:2b:04:04:67:1d:5a:21:b3:d5:94:2d:8e:48:81:42:5d:f8:
a7:5a:41:1f:cd:2d:cc:c1:0e:64:f5:45:67:30:44:a0:c3:a6:
b5:fa:8f:55:61:73:46:52:93:9a:cf:5c:9e:b0:f7:b2:9f:c0:
29:30:1f:8b:a8:ab:0b:87:2a:4b:f5:ca:64:fd:29:4e:5c:09:
d5:50:4e:b1:10:c8:3b:db:2e:2d:b4:0d:58:a5:6d:52:bf:50:
cb:39:a2:4e:d0:b6:76:48:51:3b:6e:da:67:38:51:c1:3b:9e:
57:ed:b7:5b:b9:5e:9c:25:6b:94:43:bd:ea:ca:cc:ab:a7:74:
34:8d:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:28 2025 by rpki-client