Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/8-EPTUsDjeAH_oGWToF2RmGQ2Ao.roa
File: 8-EPTUsDjeAH_oGWToF2RmGQ2Ao.roa (raw, json)
Hash identifier: Hjs8x+QhSfvnsc7tXcv3jbPzkHdOQHTSEP+phSCJM3Q=
Subject key identifier: F3:E1:0F:4D:4B:03:8D:E0:07:FE:81:96:4E:81:76:46:61:90:D8:0A
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 019425FD8B3468A3C05220CECF8648F8E2A5
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/8-EPTUsDjeAH_oGWToF2RmGQ2Ao.roa
Signing time: Thu 02 Jan 2025 07:49:20 +0000
ROA not before: Thu 02 Jan 2025 07:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12390
IP address blocks: 5.198.0.0/17 maxlen: 17
77.86.0.0/17 maxlen: 17
83.100.128.0/17 maxlen: 17
87.102.0.0/17 maxlen: 17
94.72.192.0/18 maxlen: 18
159.253.64.0/20 maxlen: 20
178.78.64.0/18 maxlen: 18
185.188.232.0/22 maxlen: 22
194.207.64.0/19 maxlen: 19
194.207.96.0/19 maxlen: 19
194.207.128.0/19 maxlen: 19
194.207.160.0/19 maxlen: 19
194.207.192.0/19 maxlen: 19
194.207.224.0/19 maxlen: 19
212.50.160.0/19 maxlen: 19
213.249.128.0/18 maxlen: 18
213.249.192.0/18 maxlen: 18
2a00:4900::/32 maxlen: 32
2a00:4902::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8b:34:68:a3:c0:52:20:ce:cf:86:48:f8:e2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e10f4d4b038de007fe81964e8176466190d80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:d7:55:08:42:41:7e:8f:26:89:90:ee:8f:
59:32:4e:d1:74:9c:3c:e3:f1:b3:3e:e6:8f:b2:37:
54:be:9a:57:dc:d0:e8:7d:4c:c8:d5:85:64:20:96:
a6:b2:a2:0c:40:75:69:44:42:31:46:02:fd:29:fb:
d1:ad:89:64:5a:dd:27:5d:68:0e:b6:da:db:78:e0:
f8:b4:09:6c:0a:50:91:db:80:1b:4b:f4:8a:dc:77:
d6:48:5c:8d:7a:5b:a7:68:24:2f:dd:41:d9:ac:71:
28:26:2f:c0:da:bb:a1:f5:47:84:bb:61:00:e3:87:
1d:81:ad:da:a8:43:53:c8:8f:b8:af:bd:e6:47:86:
d5:4d:dc:55:a1:a2:70:e0:ce:39:44:80:0b:f7:12:
1c:13:a9:e7:45:b6:c4:6d:7e:de:f3:8f:9a:8d:59:
00:9f:2d:64:0d:5c:a8:15:ec:90:42:73:00:d4:f0:
db:61:6e:d9:65:26:88:4e:a4:87:54:53:29:f9:bc:
4a:78:e0:60:b3:f1:1a:ac:51:e8:47:84:b7:32:04:
92:7c:e5:36:c5:0f:8a:35:5d:69:d6:5a:07:10:a7:
46:f1:a3:be:f6:21:ec:4f:5f:c8:4f:b2:49:7d:83:
7e:b7:bf:02:1f:a5:54:23:a6:7b:fb:c6:e7:52:bf:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:0F:4D:4B:03:8D:E0:07:FE:81:96:4E:81:76:46:61:90:D8:0A
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/8-EPTUsDjeAH_oGWToF2RmGQ2Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.0.0/17
77.86.0.0/17
83.100.128.0/17
87.102.0.0/17
94.72.192.0/18
159.253.64.0/20
178.78.64.0/18
185.188.232.0/22
194.207.64.0-194.207.255.255
212.50.160.0/19
213.249.128.0/17
IPv6:
2a00:4900::/32
2a00:4902::/32
Signature Algorithm: sha256WithRSAEncryption
3b:70:3e:4c:60:43:a2:f9:c4:ca:75:31:8e:7c:40:a7:ad:c3:
78:d4:89:5e:d0:61:34:5f:28:49:7b:b7:d9:fd:c7:67:40:9b:
b3:78:07:4a:5b:43:d8:41:94:8e:d5:15:dd:9d:01:15:c0:02:
d6:a6:2a:37:b9:1e:b0:5e:74:1c:89:23:7e:b5:1d:64:b8:bb:
67:63:03:1b:ff:6b:b6:36:95:a3:d1:6e:33:38:44:3b:df:57:
f0:5f:70:ac:cd:f9:85:31:65:07:d0:5a:02:38:f1:86:ab:d1:
10:87:5a:43:ef:3e:4d:60:11:b8:09:91:71:d2:9e:f3:63:77:
8c:e0:45:ed:ac:23:8f:47:fb:dd:ae:67:36:4b:f8:d0:d7:e6:
22:bf:7c:39:72:18:22:4d:c5:fb:96:b6:ac:8b:35:39:a7:31:
dc:c8:ed:ad:95:64:f5:ac:da:57:fe:c1:e1:96:f0:b3:7e:c9:
99:43:69:44:58:09:8b:bb:8a:1b:61:0a:5a:13:7c:5d:2d:5c:
b3:b1:d4:a9:cb:8f:39:c7:68:da:ca:28:20:be:9a:53:6d:c0:
00:85:c6:4f:71:d6:e0:c7:6d:0b:db:b0:35:21:81:9e:3a:b8:
f7:e1:c4:0c:47:0e:09:2d:7e:50:38:d1:3f:bf:57:e2:7b:8d:
23:61:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:52 2025 by rpki-client