Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/lO2EUiNy5Ygni4U4ocj0hRuk3Jk.roa
File: lO2EUiNy5Ygni4U4ocj0hRuk3Jk.roa (raw, json)
Hash identifier: fuy338nopwX5IC9ItK0YIUtMYQx4XUChLczdkAXvh4U=
Subject key identifier: 94:ED:84:52:23:72:E5:88:27:8B:85:38:A1:C8:F4:85:1B:A4:DC:99
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 019421B258239F3BEC6407CF4BCDEFA70325
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/lO2EUiNy5Ygni4U4ocj0hRuk3Jk.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29014
IP address blocks: 45.139.156.0/22 maxlen: 24
85.158.0.0/22 maxlen: 24
85.158.0.0/24 maxlen: 24
85.158.4.0/23 maxlen: 23
85.158.6.0/24 maxlen: 24
85.158.7.0/24 maxlen: 24
93.92.128.0/21 maxlen: 24
93.92.128.0/23 maxlen: 23
93.92.130.0/23 maxlen: 23
93.92.132.0/24 maxlen: 24
93.92.133.0/24 maxlen: 24
93.92.134.0/23 maxlen: 23
185.8.8.0/22 maxlen: 24
185.8.8.0/24 maxlen: 24
192.42.65.0/24 maxlen: 24
193.41.116.0/23 maxlen: 24
194.126.239.0/24 maxlen: 24
195.177.232.0/23 maxlen: 24
195.177.233.0/24 maxlen: 24
2a00:12e8::/32 maxlen: 40
2a00:12e8::/40 maxlen: 40
2a00:12e8:100::/40 maxlen: 40
2a00:12e8:200::/40 maxlen: 40
2a00:12e8:300::/40 maxlen: 40
2a00:12e8:400::/40 maxlen: 40
2a00:12e8:500::/40 maxlen: 40
2a00:12e8:600::/40 maxlen: 40
2a00:12e8:800::/40 maxlen: 48
2a00:12e8:f111::/48 maxlen: 48
2a00:12e8:f123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:58:23:9f:3b:ec:64:07:cf:4b:cd:ef:a7:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94ed84522372e588278b8538a1c8f4851ba4dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:7e:99:1a:f7:05:de:8e:00:54:f7:9c:b9:
11:0b:29:ce:ce:23:f9:21:84:39:36:37:45:ee:6f:
70:37:bc:79:d0:b3:db:97:13:27:13:bd:5d:7e:f0:
29:e5:40:b2:40:0a:52:90:3e:c7:d8:3c:58:43:09:
43:a9:72:2e:26:cd:15:7b:ae:53:3f:51:11:2c:97:
9b:ff:73:d2:34:85:af:4a:95:78:68:c2:49:23:79:
ea:a8:81:79:94:0f:a4:34:51:cf:e7:3f:80:c6:75:
93:f9:62:79:7d:c4:bd:29:48:52:ee:05:23:33:cf:
71:1a:ae:4f:fe:62:4a:c1:36:c0:5c:9d:3c:a1:76:
fe:5c:3a:1d:ff:83:a6:f1:10:32:d7:2a:a0:0c:31:
62:8d:30:ee:44:93:15:68:fc:40:aa:0c:95:92:5a:
7a:cd:cd:56:81:3c:95:72:55:7a:14:95:66:0b:6d:
03:9f:43:dc:5e:9f:67:2e:00:a2:44:3a:22:7e:17:
5f:55:11:23:e7:f8:73:34:c0:ab:de:38:5c:33:8e:
14:57:a1:63:62:2e:c5:e5:f3:ab:2b:65:90:01:ca:
89:6c:36:d2:60:80:9a:19:fa:cd:ba:47:a7:bb:67:
5c:ee:0c:06:0c:20:92:05:95:26:f3:a8:47:09:bc:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:84:52:23:72:E5:88:27:8B:85:38:A1:C8:F4:85:1B:A4:DC:99
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/lO2EUiNy5Ygni4U4ocj0hRuk3Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.156.0/22
85.158.0.0/21
93.92.128.0/21
185.8.8.0/22
192.42.65.0/24
193.41.116.0/23
194.126.239.0/24
195.177.232.0/23
IPv6:
2a00:12e8::/32
Signature Algorithm: sha256WithRSAEncryption
aa:96:81:33:bd:c9:16:a8:be:80:41:9e:90:37:03:9d:be:18:
60:de:7f:89:2f:02:53:d2:b5:ad:94:3e:89:06:54:45:de:65:
13:a3:c7:88:71:3d:af:cb:ee:f4:17:7b:5c:70:c3:d2:cc:66:
e9:e9:6f:44:08:69:8e:0d:45:0a:ee:2b:a7:f0:72:5a:53:b4:
45:f7:8b:c8:56:cb:f8:d9:bf:21:e2:1b:2f:ce:13:ae:69:15:
14:e8:29:34:04:3e:92:5c:58:c9:25:51:96:47:b2:c5:31:5a:
c5:94:d9:bd:3f:38:19:de:37:ce:0e:53:a9:db:91:77:13:0a:
c6:aa:13:91:62:14:ce:27:e1:53:22:e0:e0:e1:d1:fc:0f:de:
c1:1a:45:36:da:4e:90:65:a2:cf:c9:33:ac:52:58:b0:2e:cc:
38:24:97:07:46:51:1f:3a:4e:3c:ad:77:67:7e:36:b1:7a:b0:
32:12:76:57:e1:75:17:95:ec:68:8a:94:b8:2f:ac:75:20:21:
4a:b9:ef:ac:fc:1f:c3:d4:6c:8f:f7:de:57:dd:39:81:de:e0:
cb:a5:e2:3c:3c:10:ba:0a:5f:a3:83:5f:e9:cd:b5:e4:6b:64:
b5:f1:d1:be:93:6a:ea:1c:29:8f:e1:fe:97:74:6b:86:60:17:
e9:c0:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:12 2025 by rpki-client