Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/hQQYuiHw_ItGv9okdSC3BrwS4FY.roa
File: hQQYuiHw_ItGv9okdSC3BrwS4FY.roa (raw, json)
Hash identifier: S8OKUgEid94ZlJFGvJwDBd4eSV8gnkUcY4GxU2YajOc=
Subject key identifier: 85:04:18:BA:21:F0:FC:8B:46:BF:DA:24:75:20:B7:06:BC:12:E0:56
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01942067F3F80D0F31A2554AFD5F4395A401
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/hQQYuiHw_ItGv9okdSC3BrwS4FY.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210892
IP address blocks: 5.1.45.0/24 maxlen: 24
79.135.124.0/24 maxlen: 24
79.135.125.0/24 maxlen: 24
79.135.126.0/24 maxlen: 24
79.135.127.0/24 maxlen: 24
109.224.223.0/24 maxlen: 24
109.224.232.0/24 maxlen: 24
213.254.180.0/24 maxlen: 24
213.254.181.0/24 maxlen: 24
213.254.182.0/24 maxlen: 24
213.254.183.0/24 maxlen: 24
2a11:2b07:1::/48 maxlen: 48
2a11:2b07:f000::/48 maxlen: 48
2a11:2b07:f001::/48 maxlen: 48
2a11:2b07:f002::/48 maxlen: 48
2a11:2b07:f003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f3:f8:0d:0f:31:a2:55:4a:fd:5f:43:95:a4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=850418ba21f0fc8b46bfda247520b706bc12e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:d7:81:5b:e6:e1:60:bb:24:fb:a2:3c:dc:
61:98:cf:02:c3:aa:db:63:e8:3d:6e:c4:2e:ca:2a:
28:c4:02:ec:92:25:f5:0b:df:43:7a:12:c5:90:86:
3a:eb:42:c3:2c:42:f5:8f:16:da:03:a3:a1:4b:57:
fb:44:ac:1e:2a:06:cc:0b:b3:c8:68:85:d1:b8:f6:
5d:05:11:e0:56:ba:4d:8a:f1:3f:3c:87:07:06:55:
77:19:bf:2a:1c:1f:30:d0:82:eb:ca:4e:8e:bf:cc:
8a:34:7a:bf:ee:31:ba:69:12:11:a4:e2:5f:e4:4d:
09:b0:b6:d6:18:b6:71:52:9c:a7:0d:32:a3:51:90:
8a:ff:eb:98:25:9b:4a:35:f4:36:06:78:d9:f0:6f:
e1:1b:e8:c0:b4:46:e9:ed:5b:8c:21:e6:7d:a1:58:
7b:43:62:ab:ec:06:20:8d:23:28:39:e6:7e:b9:bd:
6c:ac:0d:98:82:28:8d:93:d5:1a:6e:ae:8c:12:83:
b0:8e:30:7f:1a:71:56:a5:1d:98:b3:17:74:43:58:
a4:f2:4e:df:b4:6e:65:5f:33:ad:8f:6c:75:b3:4a:
c4:2b:33:28:ef:ef:5b:3d:e4:55:b8:8c:78:e5:4b:
98:4e:9a:f4:df:93:f9:c7:80:66:0c:c3:56:64:0e:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:18:BA:21:F0:FC:8B:46:BF:DA:24:75:20:B7:06:BC:12:E0:56
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/hQQYuiHw_ItGv9okdSC3BrwS4FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.45.0/24
79.135.124.0/22
109.224.223.0/24
109.224.232.0/24
213.254.180.0/22
IPv6:
2a11:2b07:1::/48
2a11:2b07:f000::/46
Signature Algorithm: sha256WithRSAEncryption
57:71:2c:80:60:2d:11:bf:be:b5:53:2e:84:93:f5:13:0b:dc:
3a:f1:a7:1b:f9:98:ca:b2:12:70:a3:5c:28:88:62:b7:48:72:
41:7b:c1:de:b7:49:84:1c:42:2e:e8:0d:f5:68:ba:ad:8b:c8:
03:2a:e9:76:b4:8a:98:df:71:7d:bd:f2:14:59:f9:8d:f3:c5:
cd:62:d6:c3:32:f2:68:74:bc:60:5c:89:1d:f9:d4:5e:c2:6f:
e0:66:94:0f:3a:c8:10:fb:53:66:ae:dc:50:ca:b7:81:19:95:
38:25:b9:dd:61:06:3d:8b:4d:f7:e1:4e:6d:fa:ef:6a:ed:d7:
b1:73:8e:11:7e:e8:4c:59:1d:b8:85:86:5b:71:9a:0c:1b:ea:
98:a9:22:08:35:55:eb:87:1a:b0:3c:37:00:64:97:82:10:fc:
d5:a1:e6:4c:f0:0d:f5:b3:07:32:56:ad:2c:f6:bf:8d:01:d7:
ad:93:24:85:9e:32:8b:eb:bc:56:07:7c:0e:97:6f:0b:43:98:
03:7c:c1:92:0d:35:99:79:50:d0:86:97:5a:9b:96:43:78:1e:
c5:66:c3:5e:a9:e0:05:db:f3:6c:98:e6:ee:12:ae:c2:17:11:
e3:85:71:64:b6:ac:64:f5:3a:49:80:4c:84:58:76:10:e1:6d:
fe:e2:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:09 2025 by rpki-client