Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Eef9PJNL2EuivvyYqwaqWfVHj-s.roa
File: Eef9PJNL2EuivvyYqwaqWfVHj-s.roa (raw, json)
Hash identifier: WDNmX7wRHN2XarNVrEqn9MAoWY+yPBJbf2QpjmHAIQQ=
Subject key identifier: 11:E7:FD:3C:93:4B:D8:4B:A2:BE:FC:98:AB:06:AA:59:F5:47:8F:EB
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 01959030C40590C3AF6ED322B3BA24F696E3
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Eef9PJNL2EuivvyYqwaqWfVHj-s.roa
Signing time: Thu 13 Mar 2025 15:47:49 +0000
ROA not before: Thu 13 Mar 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8751
IP address blocks: 37.156.71.0/24 maxlen: 32
85.204.224.0/21 maxlen: 32
85.204.232.0/24 maxlen: 32
85.204.234.0/23 maxlen: 32
85.204.236.0/22 maxlen: 32
85.204.236.0/24 maxlen: 32
86.105.164.0/22 maxlen: 32
86.105.164.0/23 maxlen: 32
86.105.166.0/23 maxlen: 32
86.107.224.0/20 maxlen: 32
86.107.246.0/23 maxlen: 32
93.113.0.0/20 maxlen: 32
93.113.11.0/24 maxlen: 32
93.113.13.0/24 maxlen: 32
185.85.200.0/22 maxlen: 32
188.215.112.0/21 maxlen: 32
188.215.112.0/23 maxlen: 32
188.215.112.0/24 maxlen: 32
188.215.114.0/24 maxlen: 32
188.215.115.0/24 maxlen: 24
188.215.118.0/24 maxlen: 32
2001:67c:2580::/48 maxlen: 48
2a03:7420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:30:c4:05:90:c3:af:6e:d3:22:b3:ba:24:f6:96:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Mar 13 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e7fd3c934bd84ba2befc98ab06aa59f5478feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:cc:ca:8a:6a:e8:25:3c:ff:5f:7f:95:ef:
c2:3a:67:0e:17:0b:94:3f:80:7b:0e:46:f0:d4:f5:
0a:76:88:82:9e:22:3d:54:71:32:8d:bd:fa:52:3a:
c4:1a:bc:85:3a:2c:69:be:f8:ff:4a:e4:5f:b3:a6:
2c:8b:40:96:e2:24:82:af:66:33:bc:d1:6a:46:45:
f0:a8:28:87:31:0a:95:7e:3c:9a:32:19:82:b5:23:
89:b5:e4:d5:0a:e8:4c:a8:6e:77:fd:05:b5:ea:03:
d7:d0:7c:02:be:99:06:87:a3:ee:6f:b9:94:b6:8d:
18:71:c4:ce:89:40:12:de:b7:26:03:90:f1:ca:93:
73:f7:48:7f:a5:6c:b4:8f:b7:40:dd:5d:58:9b:1a:
35:3c:1e:c3:ad:7d:f0:7b:2b:e3:2d:a4:9f:ee:05:
a2:fd:cd:1b:c8:7d:a5:d1:56:d5:85:df:21:57:42:
f4:db:59:bb:b7:89:b1:2d:51:83:cb:17:56:e4:b3:
eb:d8:38:7b:85:54:f6:ec:3e:ac:01:38:95:6b:4a:
b0:dc:dc:76:14:be:d7:ca:cc:84:bd:ee:69:df:86:
bc:82:53:7a:d0:11:88:a7:76:b8:82:e5:96:18:aa:
74:ee:45:58:66:d6:c3:f2:23:ac:bb:db:ee:81:0f:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:FD:3C:93:4B:D8:4B:A2:BE:FC:98:AB:06:AA:59:F5:47:8F:EB
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/Eef9PJNL2EuivvyYqwaqWfVHj-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.71.0/24
85.204.224.0-85.204.232.255
85.204.234.0-85.204.239.255
86.105.164.0/22
86.107.224.0/20
86.107.246.0/23
93.113.0.0/20
185.85.200.0/22
188.215.112.0/21
IPv6:
2001:67c:2580::/48
2a03:7420::/48
Signature Algorithm: sha256WithRSAEncryption
62:7a:96:ce:30:7b:b8:ac:d3:56:52:ae:a2:54:ab:b2:54:90:
a9:4b:9f:36:a6:60:c7:16:92:04:e3:b1:bc:d1:2c:6b:9d:3e:
40:90:1a:ff:18:05:13:19:c9:1d:f6:40:a2:a3:4c:63:39:54:
06:5c:ee:50:37:4f:4c:05:db:be:6c:0c:f7:4e:13:0c:6a:f4:
09:2d:21:c3:a1:50:d4:e5:f9:c8:d2:c9:1f:ae:46:93:c1:28:
1d:01:bb:4f:d9:c2:87:a3:26:63:21:59:8a:3e:6f:80:12:dd:
1e:30:86:03:f4:0b:91:f9:8c:30:3c:0c:7b:ae:e0:13:eb:ef:
50:2d:76:1c:80:f2:e3:d8:27:7a:c8:15:c8:73:6b:41:30:5d:
84:48:bd:f3:9d:81:59:23:d6:94:83:ae:1b:b6:e8:08:54:5b:
25:c5:3d:3a:c9:ec:3d:b1:51:bb:ac:9b:9c:f7:17:e1:b8:f8:
70:b4:1e:b8:44:fc:49:83:cb:0a:9d:48:ab:1c:32:57:29:25:
30:8a:32:31:2d:8d:c2:1a:3c:b2:64:d4:92:c2:ca:24:af:ab:
12:72:90:dd:3b:34:d1:79:81:ec:19:f9:60:fa:f7:f0:21:9b:
d4:ca:71:af:26:16:80:d7:cc:26:dd:1d:8b:33:76:18:1d:31:
b1:fd:0f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:19 2025 by rpki-client