Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/sE_yBIBHGOP00_8ICipXACLmvpc.roa
File: sE_yBIBHGOP00_8ICipXACLmvpc.roa (raw, json)
Hash identifier: FyBE1dNPqJ1LeCxUv53xtEACyPL7Fifk2VrXCbMm6MU=
Subject key identifier: B0:4F:F2:04:80:47:18:E3:F4:D3:FF:08:0A:2A:57:00:22:E6:BE:97
Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial: 019423D7F06E6E8A9292FCBB5783C09932E9
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/sE_yBIBHGOP00_8ICipXACLmvpc.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61354
IP address blocks: 185.9.40.0/22 maxlen: 22
185.254.192.0/22 maxlen: 22
193.107.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f0:6e:6e:8a:92:92:fc:bb:57:83:c0:99:32:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b04ff204804718e3f4d3ff080a2a570022e6be97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:86:01:34:ff:b3:0d:43:77:95:7b:df:af:
18:a7:24:9b:2c:aa:7d:38:fb:ad:34:88:12:9f:d7:
93:5a:2d:5d:fe:ad:c3:47:ca:f6:c1:40:a6:56:dd:
1b:f0:9d:16:0d:ee:e7:7d:6a:7a:de:6e:2f:87:00:
cb:7d:71:43:2d:b0:df:b4:ec:35:b9:10:51:aa:80:
eb:e9:36:ba:2f:06:84:eb:4b:eb:4c:68:db:12:cd:
78:41:35:4b:d9:c7:a2:4e:7d:11:e7:f8:86:6e:d9:
db:10:47:c0:8d:6c:1e:d0:82:ab:94:63:c9:4d:22:
08:79:39:bb:93:d6:e7:a2:4a:62:23:b6:4b:57:05:
e2:64:c5:5c:98:31:c9:b3:3e:ef:10:e9:9c:94:6a:
c1:bf:09:0e:89:ea:57:5c:c1:1b:e7:cd:35:16:80:
36:f7:1a:cd:20:f0:1d:27:55:98:7a:b3:79:2e:c9:
73:82:e8:a0:92:4a:35:80:fc:58:a7:a2:97:42:c3:
1a:00:df:38:83:28:b5:6a:39:1f:99:23:8d:48:b3:
78:67:4d:04:90:9f:b2:6f:25:a4:38:bc:1a:23:a7:
96:3d:b9:0e:fd:ad:a4:db:3c:07:a4:ad:9b:12:04:
54:61:4c:fe:71:0c:46:31:e6:3d:d0:a4:7a:42:0e:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:F2:04:80:47:18:E3:F4:D3:FF:08:0A:2A:57:00:22:E6:BE:97
X509v3 Authority Key Identifier:
keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/sE_yBIBHGOP00_8ICipXACLmvpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.40.0/22
185.254.192.0/22
193.107.21.0/24
Signature Algorithm: sha256WithRSAEncryption
01:09:7a:01:97:25:4f:a7:09:59:a2:f7:9d:8a:8d:b6:a0:19:
98:17:a7:87:8d:d5:91:54:a8:0a:52:ee:67:43:61:3d:18:06:
19:3d:df:29:a6:ea:5e:b3:fd:1f:a2:26:07:d3:01:d3:4d:cf:
c0:00:15:22:28:3d:c8:a7:a9:ae:fe:bf:81:b4:19:e5:57:46:
05:6a:43:d7:f7:37:8c:81:2a:06:19:90:52:cf:a7:20:03:24:
08:b7:08:63:a2:87:2e:ea:eb:7d:ef:fc:8b:9b:e3:36:09:1f:
77:68:92:ae:96:d3:63:bf:8c:8d:4d:3e:8b:d8:c3:9b:1d:36:
10:15:5d:17:03:1f:9b:78:11:69:6a:d4:c6:50:3c:35:60:8d:
ec:1f:02:e3:02:4d:32:62:9a:02:9c:32:9c:60:b2:2e:9b:7d:
75:aa:56:f1:09:8d:cb:a2:f6:91:ab:cd:9b:25:38:af:ad:3b:
b7:f6:fb:28:e5:b9:0e:71:fe:c8:ff:fc:6a:51:90:10:e7:61:
4a:6a:96:71:19:ea:b9:3d:5b:19:51:a5:71:41:72:27:f3:66:
48:f8:56:7d:12:d2:09:3f:5e:82:81:b6:72:65:d1:d1:47:9a:
28:d9:30:f0:d4:fb:09:82:39:7a:f1:0a:e8:44:81:57:0c:6f:
d6:2a:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:45:39 2025 by rpki-client