Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/H5yFQe50yoApFckpEQBtd_oQSgU.roa
File: H5yFQe50yoApFckpEQBtd_oQSgU.roa (raw, json)
Hash identifier: BrwrOZfQe5zPZ0RDccfDTQYaa+tzCj5jyHvFPHYWG5M=
Subject key identifier: 1F:9C:85:41:EE:74:CA:80:29:15:C9:29:11:00:6D:77:FA:10:4A:05
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 01942746629AE30AFDD5311F877CDF996F39
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/H5yFQe50yoApFckpEQBtd_oQSgU.roa
Signing time: Thu 02 Jan 2025 13:48:31 +0000
ROA not before: Thu 02 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42237
IP address blocks: 91.236.116.0/24 maxlen: 24
185.217.0.0/24 maxlen: 24
185.217.1.0/24 maxlen: 24
185.217.2.0/24 maxlen: 24
185.246.128.0/24 maxlen: 24
185.246.129.0/24 maxlen: 24
185.246.130.0/24 maxlen: 24
193.105.134.0/24 maxlen: 24
2a0b:c040::/32 maxlen: 32
2a0b:c041::/32 maxlen: 32
2a0d:8980::/32 maxlen: 32
2a0d:8981::/32 maxlen: 32
2a0d:8982::/32 maxlen: 32
2a0d:8983::/32 maxlen: 32
2a0d:8984::/32 maxlen: 32
2a0d:8985::/32 maxlen: 32
2a0d:8986::/32 maxlen: 32
2a0d:8987::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:62:9a:e3:0a:fd:d5:31:1f:87:7c:df:99:6f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 2 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9c8541ee74ca802915c92911006d77fa104a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5b:66:95:c5:fa:e3:1f:83:a7:00:2d:a2:c2:
27:e6:35:29:75:df:46:ea:c4:de:7f:14:5d:24:99:
54:4d:57:57:a9:00:5e:9b:4b:48:90:ae:f8:f8:2e:
93:58:6c:9d:a9:5b:1b:78:34:8c:ac:95:f4:56:89:
37:b4:b6:86:1c:1d:63:39:91:a9:7f:55:e5:6b:e6:
b4:64:c0:21:b5:ba:e6:77:a5:d8:ff:90:c1:fb:e4:
b6:11:5b:f9:f6:d5:66:e7:d1:82:f5:d1:17:db:7f:
21:fb:cc:45:1a:dc:20:ad:4a:f8:30:ed:de:a9:9b:
44:73:f7:5f:a0:8e:3b:a0:2b:9b:89:e7:8c:d3:06:
14:d0:6d:c4:3a:e8:23:2b:4e:a0:bd:d0:b2:0a:1a:
65:df:11:3c:c9:35:ab:bb:e0:6d:6d:4b:1f:00:8e:
4b:e7:b5:3c:0e:2f:ee:56:47:7b:58:ef:40:f0:52:
ce:26:70:f4:37:d8:ee:bd:39:4b:e8:63:f8:3e:83:
8f:b0:09:4f:88:a0:5a:8c:de:ad:20:32:81:fd:89:
c7:3b:5a:63:5d:a3:1e:d2:fa:e6:d6:13:47:46:85:
60:f9:39:44:99:bf:fe:21:88:d8:39:31:dc:e8:10:
8a:c4:cd:5d:1a:a3:87:11:f4:2d:e5:be:4d:fc:9b:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:85:41:EE:74:CA:80:29:15:C9:29:11:00:6D:77:FA:10:4A:05
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/H5yFQe50yoApFckpEQBtd_oQSgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.116.0/24
185.217.0.0-185.217.2.255
185.246.128.0-185.246.130.255
193.105.134.0/24
IPv6:
2a0b:c040::/31
2a0d:8980::/29
Signature Algorithm: sha256WithRSAEncryption
8a:81:7e:f3:a5:c4:bd:b8:b4:de:08:ac:fd:b0:de:2a:fe:f0:
9c:95:71:91:b6:fb:1d:40:b4:c6:e8:fa:24:9c:80:89:94:a3:
0b:d1:71:24:e8:95:09:53:57:e6:6d:22:68:09:71:64:b6:04:
54:64:f2:20:8d:75:f7:6e:53:72:80:f2:ee:31:29:2a:af:a9:
2f:9d:b7:bd:fb:6c:66:f8:f1:d7:66:07:3a:b5:fd:9d:ae:99:
6d:6e:24:e5:04:9c:15:4a:35:29:8b:cf:09:a2:06:80:38:db:
5b:2e:d1:d7:cd:02:bf:39:cd:3e:db:0d:1c:dc:82:82:7b:be:
16:a4:7b:ee:49:68:01:ee:3e:a7:a4:dd:5c:c3:0d:04:2e:89:
7a:a2:01:ca:81:c1:8c:29:31:69:d2:88:85:fa:9a:e2:dd:9a:
0f:b7:41:24:5a:6a:48:b2:f6:b0:a1:04:ce:65:b2:88:f6:3a:
c2:94:93:73:8c:03:4c:77:87:83:13:94:ad:99:00:07:a2:13:
7e:d6:21:91:f7:69:fc:de:dd:49:e4:a5:24:06:89:48:fc:0c:
85:0c:ce:19:55:c4:75:68:a6:d7:69:51:9d:2f:c9:e0:91:36:
55:26:41:2e:e9:7f:47:55:11:e5:2d:a6:0b:de:ed:5d:91:50:
61:b2:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:21 2025 by rpki-client