Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tWeXFRF5wTILIA9K71DGwcaDzWo.roa
File: tWeXFRF5wTILIA9K71DGwcaDzWo.roa (raw, json)
Hash identifier: 2eOK8fcx9Ra2yk02w2VV2egMvko+hVPpXzwqIiE3Hyc=
Subject key identifier: B5:67:97:15:11:79:C1:32:0B:20:0F:4A:EF:50:C6:C1:C6:83:CD:6A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F83CD1716B682F94B327A1C82B362
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tWeXFRF5wTILIA9K71DGwcaDzWo.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 80.64.17.0/24 maxlen: 24
80.242.56.0/24 maxlen: 24
80.242.57.0/24 maxlen: 24
80.242.58.0/24 maxlen: 24
92.63.176.0/22 maxlen: 22
92.63.176.0/24 maxlen: 24
92.63.177.0/24 maxlen: 24
92.63.178.0/24 maxlen: 24
92.63.179.0/24 maxlen: 24
109.196.98.0/24 maxlen: 24
109.196.99.0/24 maxlen: 24
109.196.100.0/24 maxlen: 24
109.196.101.0/24 maxlen: 24
109.196.102.0/24 maxlen: 24
109.196.103.0/24 maxlen: 24
185.42.14.0/24 maxlen: 24
194.32.98.0/24 maxlen: 24
217.78.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:83:cd:17:16:b6:82:f9:4b:32:7a:1c:82:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b56797151179c1320b200f4aef50c6c1c683cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:76:72:6c:22:d2:fe:62:ae:f2:87:51:ef:
43:a3:e4:33:72:70:7d:81:09:73:00:3b:fd:35:ba:
a2:c1:b4:76:cf:94:03:9d:77:76:17:23:87:11:d2:
bb:5d:9c:69:25:af:aa:a2:8b:d6:8d:34:69:8d:5c:
ec:28:1c:24:82:0f:98:db:1f:40:44:68:84:1b:b8:
f9:bb:3a:03:7c:b3:c1:00:8d:f1:85:0c:83:6f:2d:
f3:e7:4f:e9:23:39:3c:75:b6:42:1e:e3:5c:9e:46:
5c:f7:7c:18:28:0c:b8:e2:bb:31:57:c3:6c:83:62:
94:88:2a:6d:fd:84:ef:37:eb:2b:26:5a:af:93:e9:
53:f2:62:0a:7f:f6:a4:69:22:3c:cc:9f:ae:63:07:
84:67:98:e0:ec:a1:01:04:46:60:df:27:c9:2e:de:
ad:d2:8d:f3:7e:91:66:b4:19:53:a6:12:76:89:88:
28:99:a7:54:77:35:ed:b1:72:76:60:88:92:fd:6c:
0f:d2:2a:b6:ab:d9:e4:b1:6f:36:49:b0:0c:6c:d9:
ea:3e:f2:20:2c:a0:2d:99:0c:39:e9:b2:6b:28:c2:
d6:81:c9:97:25:6f:7e:d0:28:17:ac:dd:32:99:1e:
7a:e5:93:c6:86:a8:d6:b1:f4:e1:48:d7:84:ed:22:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:67:97:15:11:79:C1:32:0B:20:0F:4A:EF:50:C6:C1:C6:83:CD:6A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tWeXFRF5wTILIA9K71DGwcaDzWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.17.0/24
80.242.56.0-80.242.58.255
92.63.176.0/22
109.196.98.0-109.196.103.255
185.42.14.0/24
194.32.98.0/24
217.78.234.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3a:1b:f0:cf:f4:bb:ee:2a:73:1d:26:0b:e9:bc:cb:03:d0:
72:43:fb:4b:27:10:7a:fe:03:74:3b:3f:63:65:0f:04:bd:8d:
3c:76:dd:c4:96:09:86:64:11:a8:d6:a0:6c:70:9e:42:1e:b3:
37:b5:c5:1d:9e:9d:e2:c1:85:90:5f:51:24:70:89:9f:46:80:
17:5a:3d:c7:74:13:2c:b5:b8:d0:5d:85:06:b8:ed:60:5e:a4:
68:3b:7e:1e:f5:76:78:0e:b5:d2:da:3e:42:60:5a:02:79:9d:
c3:fe:f3:2b:42:75:58:4b:10:84:13:43:99:8b:8a:d6:f3:a0:
7c:20:59:97:bf:16:b9:83:13:88:5a:54:4f:73:25:56:28:52:
39:71:00:b5:32:5b:23:11:25:08:33:38:86:1a:da:26:df:db:
16:5b:00:3e:3b:74:57:aa:4f:3a:00:8a:3c:28:3b:a2:c4:9c:
75:c1:be:08:86:78:f8:76:d9:19:88:ad:5b:9f:ad:4b:b8:b3:
ce:75:61:4b:5f:cf:3e:a8:2e:83:ce:3e:21:55:5b:2d:e4:7f:
d7:ec:9b:16:b2:bd:5a:e2:f1:c5:63:16:28:d4:f5:70:a9:a2:
19:07:2d:66:4c:29:4a:2a:f7:4a:04:f2:44:29:ac:b5:52:4c:
5d:50:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:16 2025 by rpki-client