Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/N-I7atLziy8-qeIjadSqHT5aCyA.roa
File: N-I7atLziy8-qeIjadSqHT5aCyA.roa (raw, json)
Hash identifier: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=
Subject key identifier: 37:E2:3B:6A:D2:F3:8B:2F:3E:A9:E2:23:69:D4:AA:1D:3E:5A:0B:20
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 0194266B3336F622A8861CC06A6EBFBD7DED
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/N-I7atLziy8-qeIjadSqHT5aCyA.roa
Signing time: Thu 02 Jan 2025 09:49:07 +0000
ROA not before: Thu 02 Jan 2025 09:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60446
IP address blocks: 80.253.246.0/24 maxlen: 24
91.151.88.0/24 maxlen: 24
91.151.89.0/24 maxlen: 24
91.151.95.0/24 maxlen: 24
213.142.148.0/24 maxlen: 24
213.142.151.0/24 maxlen: 24
213.142.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:33:36:f6:22:a8:86:1c:c0:6a:6e:bf:bd:7d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jan 2 09:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37e23b6ad2f38b2f3ea9e22369d4aa1d3e5a0b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:6a:00:59:81:76:2f:c7:dd:ad:05:db:32:
3f:1a:12:96:da:6a:1a:2b:14:26:1a:f8:ab:7a:57:
c9:fb:5a:99:35:7f:8a:fb:b6:80:77:80:c5:ba:75:
48:bc:c8:5f:a0:f1:eb:8d:49:be:93:a4:a7:33:d8:
b2:24:f9:f3:ed:1e:0b:ea:b2:63:90:59:74:80:4e:
14:c6:20:99:7c:1a:dc:d3:5e:e0:b5:46:aa:d0:f9:
95:42:71:5c:07:ba:44:7c:ae:db:61:b9:c5:c3:1a:
e7:19:b3:45:fa:ea:e0:ff:7f:c0:a6:91:60:e7:c3:
27:f3:a8:f6:9e:25:ad:fe:d4:8d:3e:4f:69:2b:f8:
63:fc:59:bb:b5:c9:c3:af:4e:c2:b8:08:8d:26:6d:
a8:c2:8e:60:90:fc:b5:bd:83:8f:92:e0:c6:26:7b:
84:80:94:f3:71:c5:fb:9f:46:93:db:a4:15:d8:a2:
6d:fa:fd:82:07:69:4d:e3:e6:11:97:59:43:1a:cf:
b1:03:26:3b:25:98:c0:43:c2:c8:e8:62:22:03:e6:
e8:f9:0f:81:51:5f:c5:d3:3e:96:57:7d:c4:fb:02:
61:16:36:2e:67:15:1e:83:e1:b4:0e:3f:30:29:e2:
86:8f:34:fa:ef:3b:40:8e:13:9f:8d:02:da:60:e4:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E2:3B:6A:D2:F3:8B:2F:3E:A9:E2:23:69:D4:AA:1D:3E:5A:0B:20
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/N-I7atLziy8-qeIjadSqHT5aCyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.246.0/24
91.151.88.0/23
91.151.95.0/24
213.142.148.0/24
213.142.151.0/24
213.142.159.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d8:3b:1a:da:21:9b:b3:79:90:b3:93:6b:02:28:f5:16:f4:
76:f5:fd:2d:30:92:87:36:c6:21:a4:8c:c2:85:07:4a:66:ff:
74:73:30:c9:2f:9a:44:4e:6b:fc:35:33:57:3c:32:5c:a3:fa:
e7:11:cb:15:4d:b1:96:b9:86:22:cd:2d:d7:de:7d:01:9e:82:
60:4e:69:c3:bf:d1:91:fc:8f:8a:dc:93:ae:f3:9c:48:2e:c8:
f9:09:d2:9f:2f:40:92:ad:d9:2b:7b:7d:82:a7:60:76:5b:bb:
78:04:83:30:2b:03:75:ff:be:73:4c:f1:0e:94:ab:8f:fd:f4:
0c:1e:71:62:c0:b5:80:b1:f4:fe:5f:36:5f:6e:67:98:ae:6a:
14:40:17:97:67:51:89:d2:f4:87:a4:01:a7:d4:af:55:32:9f:
6a:9e:45:1c:a9:dd:9d:2c:a2:67:6c:4a:fa:07:c4:9d:fa:93:
c8:5b:e1:9b:08:6e:a5:bb:d2:2c:b4:25:5a:49:44:91:d6:ce:
c7:a4:62:c3:7c:61:83:9d:81:95:82:17:b4:f9:66:5f:b6:69:
89:fe:d1:63:0e:3c:a1:b4:a5:dd:39:5c:80:fb:b7:4d:7a:8f:
ec:c7:1d:d4:5e:1e:5b:d2:3b:1e:c9:eb:19:82:3b:ec:96:31:
75:d0:f9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:23 2025 by rpki-client