Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/vWcgLORNYaxn8oW87i0UFzUEE_0.roa
File: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (raw, json)
Hash identifier: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=
Subject key identifier: BD:67:20:2C:E4:4D:61:AC:67:F2:85:BC:EE:2D:14:17:35:04:13:FD
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5DE98752440E537CB0EC25F207C74
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/vWcgLORNYaxn8oW87i0UFzUEE_0.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202492
IP address blocks: 5.10.240.0/22 maxlen: 22
5.10.252.0/22 maxlen: 22
37.128.200.0/22 maxlen: 22
46.23.104.0/22 maxlen: 22
85.158.146.0/24 maxlen: 24
85.158.147.0/24 maxlen: 24
85.158.148.0/22 maxlen: 22
109.205.210.0/24 maxlen: 24
164.215.100.0/24 maxlen: 24
185.81.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:de:98:75:24:40:e5:37:cb:0e:c2:5f:20:7c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd67202ce44d61ac67f285bcee2d1417350413fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:25:c8:db:fc:25:99:ab:c4:27:f2:ed:cb:
68:83:53:3b:bf:d8:d1:4d:ad:f2:c0:74:a2:eb:17:
0d:0c:2c:3b:da:fb:36:23:9a:8e:67:47:8c:a0:52:
25:50:43:a4:6e:35:96:9b:2c:be:4b:6a:71:e0:db:
e8:0f:6d:90:d5:80:34:1a:49:05:11:a5:39:3b:ad:
8f:26:1d:60:f0:07:08:d0:e2:1b:4c:30:80:8b:e3:
9d:6f:74:6a:a1:29:2f:40:bf:90:5f:7a:ff:33:f4:
d4:81:99:01:b0:d7:4e:17:02:58:8b:5e:7b:66:35:
b8:f3:20:1d:e3:26:e4:3f:ff:ec:8a:db:7e:c7:e5:
74:e2:42:39:12:c3:5b:96:5e:8e:67:97:b8:82:92:
ae:5d:60:9e:de:0f:30:5d:1c:07:f3:05:6d:47:45:
b5:3f:aa:b9:30:aa:51:b8:53:3d:35:15:72:4c:96:
14:a2:19:e7:4d:7d:dd:04:6f:e3:f1:5d:f4:f0:64:
75:40:2f:16:37:09:30:1b:33:8d:11:36:a0:10:a3:
42:fd:b4:e6:98:d2:41:3c:6c:8a:50:b7:9a:50:f3:
2f:f5:3a:25:1f:ca:80:9e:e1:a1:77:09:b0:35:df:
ab:57:50:8b:f9:42:a4:c4:1f:5c:ab:1c:5d:ff:ca:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:67:20:2C:E4:4D:61:AC:67:F2:85:BC:EE:2D:14:17:35:04:13:FD
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/vWcgLORNYaxn8oW87i0UFzUEE_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/22
5.10.252.0/22
37.128.200.0/22
46.23.104.0/22
85.158.146.0-85.158.151.255
109.205.210.0/24
164.215.100.0/24
185.81.218.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:e4:b1:a7:6c:cc:99:15:a5:03:8b:1c:dc:6f:53:28:c9:59:
a5:3a:67:d3:4c:e4:6e:f3:c4:bc:9c:55:75:b2:2d:58:4c:b3:
47:b8:5f:5b:c2:be:c5:f7:bd:5f:d9:43:05:0f:c6:15:ba:40:
44:4f:ac:48:b7:44:c4:84:ea:f6:9f:51:ea:9f:c1:0d:6f:95:
c1:5a:38:ca:b0:a3:74:9a:c1:37:c7:75:7b:a8:fd:b9:cb:ad:
20:69:ad:ce:51:09:c1:95:7e:64:03:d3:8b:b5:68:0a:c7:99:
da:b1:fe:2f:62:b2:2c:41:46:27:8b:b2:8c:0c:58:ec:b9:77:
5c:ec:0e:ae:1c:a9:b4:2e:3c:94:9a:74:79:0e:d1:7a:4f:2e:
b3:eb:81:58:8c:70:70:a9:c4:b0:ac:8e:9c:ef:5d:3b:b0:92:
66:81:fe:97:63:de:b8:f6:5c:6b:69:33:80:0b:44:5d:b3:5b:
f9:6c:b2:31:5f:43:56:88:9e:51:92:54:46:3f:55:e0:91:f2:
b8:3d:10:4a:ac:38:d7:2e:24:fe:9d:0a:f8:51:cd:1b:cb:31:
7b:09:57:9e:3d:46:27:0b:3c:f2:fc:e5:b4:f7:2b:db:1f:9d:
ee:39:29:b4:6a:8f:98:19:a0:ff:6d:6a:79:64:3d:b5:07:ac:
e5:9d:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:45 2025 by rpki-client