Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/A5uN5F8OzeSvbzP9A0H4yXAukVE.roa
File: A5uN5F8OzeSvbzP9A0H4yXAukVE.roa (raw, json)
Hash identifier: HUJyLcOuvz/wo0Li69tRt7jbsZ4Zuulbe84Vvo7HyDI=
Subject key identifier: 03:9B:8D:E4:5F:0E:CD:E4:AF:6F:33:FD:03:41:F8:C9:70:2E:91:51
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 0194266A21A3B8064F7AEF282E71EAE44603
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/A5uN5F8OzeSvbzP9A0H4yXAukVE.roa
Signing time: Thu 02 Jan 2025 09:47:57 +0000
ROA not before: Thu 02 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29104
IP address blocks: 37.35.0.0/21 maxlen: 21
37.35.6.0/24 maxlen: 24
185.116.132.0/22 maxlen: 22
185.116.134.0/24 maxlen: 24
192.54.144.0/24 maxlen: 24
192.93.158.0/24 maxlen: 24
192.93.159.0/24 maxlen: 24
192.93.160.0/24 maxlen: 24
192.93.161.0/24 maxlen: 24
192.93.166.0/23 maxlen: 23
193.56.125.0/24 maxlen: 24
193.56.130.0/24 maxlen: 24
2a00:4f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:21:a3:b8:06:4f:7a:ef:28:2e:71:ea:e4:46:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Jan 2 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=039b8de45f0ecde4af6f33fd0341f8c9702e9151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:f8:ce:62:74:1e:c8:bd:19:b0:7c:a4:70:
10:7d:13:2a:1e:44:b8:0c:a0:d0:ff:b8:57:32:ca:
80:8a:56:e7:99:73:c1:1b:71:23:79:fc:1a:85:6b:
da:4d:00:19:63:b0:0c:7c:cd:5b:36:93:f7:83:ec:
f8:b3:4b:e9:ba:56:8d:15:11:9f:16:27:14:98:a2:
c0:18:45:73:0d:df:bf:3d:05:6f:b5:6c:35:a5:87:
79:b5:0d:ce:c2:16:13:ef:6e:e3:9b:4f:15:b9:1c:
15:44:ac:db:69:38:8b:5a:e9:e3:c8:8c:2a:1c:39:
0f:18:48:b1:5b:0e:52:a9:ff:7f:61:96:e4:aa:ed:
af:60:55:aa:9e:f6:08:75:aa:08:0f:ea:24:26:97:
16:04:9c:48:a9:14:84:39:86:ae:2c:1e:cc:0e:e2:
59:cc:1e:db:5b:eb:6e:04:98:5e:f0:e1:2a:8b:b1:
96:11:b8:f7:c6:1d:6b:69:77:be:63:06:24:7d:03:
2e:96:75:c6:4a:6c:9b:b4:ac:cd:bb:a8:66:4f:e2:
2a:d5:5e:01:ae:a4:f9:62:df:7a:62:dd:2a:8e:36:
d3:ea:10:ef:e9:4a:61:46:d3:75:59:dd:22:c7:d2:
29:e5:3f:75:c0:8b:1c:e2:57:f5:11:f1:3b:13:ce:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:8D:E4:5F:0E:CD:E4:AF:6F:33:FD:03:41:F8:C9:70:2E:91:51
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/A5uN5F8OzeSvbzP9A0H4yXAukVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.0.0/21
185.116.132.0/22
192.54.144.0/24
192.93.158.0-192.93.161.255
192.93.166.0/23
193.56.125.0/24
193.56.130.0/24
IPv6:
2a00:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
4c:83:56:a3:cf:c3:49:65:3c:b9:72:5e:14:82:0c:d1:6d:43:
eb:a1:ac:6d:e3:fb:84:c1:7b:65:2e:6a:d3:71:ef:e3:c8:28:
7f:94:db:ed:46:e3:77:79:31:d8:da:25:e0:e3:98:64:e7:1b:
99:16:29:95:ff:9b:11:4f:2a:eb:b6:bf:68:06:53:8c:d3:7b:
8c:7f:6c:ab:16:02:e3:b1:9b:c9:67:62:25:f1:5d:8a:6c:c7:
43:7c:fc:f7:5d:6c:04:0c:db:b9:fd:bc:30:f2:3d:c3:d0:cf:
e2:51:34:e2:f6:57:94:0e:7f:cc:dc:76:02:d9:bd:42:f0:2d:
14:54:cd:d3:71:11:8a:5b:43:2c:58:cd:97:08:6b:d5:c3:fc:
4e:f9:bb:13:4f:64:6f:9d:bd:7a:6a:09:58:cb:43:87:cb:a5:
ce:3f:a8:d6:8a:87:ae:dd:f5:91:87:c1:e1:16:3e:87:81:b0:
dc:3c:a8:1e:8d:15:e9:db:b9:15:42:c5:7d:c1:02:71:eb:ef:
da:69:3a:53:03:6b:63:cf:36:4c:5e:5d:f7:dd:34:c4:55:d6:
b7:7e:43:50:be:b7:ba:74:42:65:39:5b:aa:ea:8e:c4:a5:d2:
ab:fd:92:71:b4:b0:dc:04:b6:db:37:7a:8c:16:01:fa:80:50:
87:d4:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:17 2025 by rpki-client