Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/CZfj574ArDtJlgW2YQicypkXsXg.roa
File: CZfj574ArDtJlgW2YQicypkXsXg.roa (raw, json)
Hash identifier: N05YSWHFpJvI1wd5d/zN3+j2iXKRF4AnTjnzlab5tTQ=
Subject key identifier: 09:97:E3:E7:BE:00:AC:3B:49:96:05:B6:61:08:9C:CA:99:17:B1:78
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 019422FBB74EE9945DA2E63C17E0CBB94110
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/CZfj574ArDtJlgW2YQicypkXsXg.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211381
IP address blocks: 45.131.182.0/24 maxlen: 24
213.134.31.0/24 maxlen: 24
2a13:4ac0::/46 maxlen: 46
2a13:4ac0:4::/46 maxlen: 46
2a13:4ac0:10::/46 maxlen: 46
2a13:4ac0:14::/46 maxlen: 46
2a13:4ac0:18::/46 maxlen: 46
2a13:4ac0:1c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b7:4e:e9:94:5d:a2:e6:3c:17:e0:cb:b9:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0997e3e7be00ac3b499605b661089cca9917b178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:ef:e5:2f:ea:48:47:1c:1b:cb:ed:a5:1f:
dd:32:1b:0e:ce:36:cc:a2:42:9b:c1:f8:c2:81:2a:
46:eb:41:f1:4a:cb:a1:40:ab:07:f0:76:4f:2e:b9:
06:80:84:ae:74:b5:3c:55:aa:29:ea:ce:59:30:db:
fe:c3:f2:3c:a2:e1:b6:7a:b5:5e:39:ae:54:0b:e6:
f4:bc:f8:53:b0:29:90:00:93:45:52:03:6d:77:09:
af:1b:19:36:cf:8c:f8:e2:8d:7d:2e:b0:42:49:32:
58:2f:ad:cc:50:df:d0:84:aa:ba:d2:13:a9:5c:fc:
bc:e8:37:d3:c7:93:c8:59:c8:78:30:05:8d:db:be:
ae:9c:f8:1a:41:3a:fc:dd:21:f7:7f:83:63:a1:31:
0e:d1:8d:8b:4f:a8:ad:84:49:67:a5:69:1a:10:bc:
0a:f1:28:28:2d:79:35:6e:f1:fb:be:b9:2d:44:4b:
cc:4e:27:a5:77:75:2c:6e:3f:44:6c:d0:40:6d:bc:
39:df:dd:33:65:f5:79:c9:58:95:e4:27:8c:20:5f:
2c:8d:ec:2f:ae:b8:b0:a0:bd:17:ac:74:49:1a:21:
2b:68:53:7f:d5:3c:b9:61:a1:89:94:c0:49:e7:cf:
93:9b:14:85:2f:66:a0:c2:24:bb:60:77:5e:87:e1:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:E3:E7:BE:00:AC:3B:49:96:05:B6:61:08:9C:CA:99:17:B1:78
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/CZfj574ArDtJlgW2YQicypkXsXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.182.0/24
213.134.31.0/24
IPv6:
2a13:4ac0::/45
2a13:4ac0:10::/44
Signature Algorithm: sha256WithRSAEncryption
24:1c:c9:bf:89:f1:aa:a2:c1:ac:01:d3:c8:93:14:8b:83:19:
c7:26:86:71:af:ba:96:4f:84:3a:82:19:38:95:35:82:b0:6b:
07:b7:4b:81:c6:8d:2f:e8:ca:08:c9:d7:e9:4b:4b:24:a3:50:
43:40:63:ad:22:9e:c7:89:9f:fd:51:e2:3d:f1:d9:0c:36:1e:
5f:9b:5f:f7:a1:47:07:e0:2c:94:4d:93:75:dc:f9:c5:49:8e:
6b:22:3a:72:2b:a8:6b:1c:e5:8d:d5:a0:84:db:a0:64:f9:63:
b1:e5:e6:53:3b:bd:cf:97:5d:f9:8d:1d:a2:1f:b0:22:cd:0b:
ba:3a:6c:60:cb:28:ec:74:00:2f:ed:7c:d7:35:15:a0:fc:85:
32:fc:75:cd:fe:fb:5f:a3:8d:be:ff:99:ca:54:e9:7c:5c:53:
08:e1:7f:5c:25:71:a6:87:4e:49:d1:c1:9e:d3:66:f6:98:c6:
fa:e6:e1:da:fd:71:7c:70:e7:3b:0f:dd:47:5f:2f:1a:83:95:
42:eb:92:6a:a8:9e:a0:35:c5:ac:bb:85:16:08:d3:4f:0f:d6:
29:38:ae:9a:b3:94:01:cc:aa:63:91:92:6a:c5:dc:89:8f:fb:
39:0a:bc:40:1d:82:47:c0:67:c3:8b:c0:18:ad:40:ea:e5:da:
39:ee:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:13:33 2025 by rpki-client