Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/UZXaw9NBRAkE4GO4DgWv40vOCU8.roa
File: UZXaw9NBRAkE4GO4DgWv40vOCU8.roa (raw, json)
Hash identifier: HEP1k7kYKlUJdDFLP800Gto7Orwjw4zWY5tnNYDqwYE=
Subject key identifier: 51:95:DA:C3:D3:41:44:09:04:E0:63:B8:0E:05:AF:E3:4B:CE:09:4F
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 01942521E305BCE49B1021EDBCEDC57D18DC
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/UZXaw9NBRAkE4GO4DgWv40vOCU8.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14593
IP address blocks: 87.251.24.0/21 maxlen: 24
91.102.180.0/22 maxlen: 24
145.224.64.0/18 maxlen: 24
145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
145.224.92.0/23 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
162.43.192.0/22 maxlen: 24
169.155.224.0/19 maxlen: 24
176.116.124.0/23 maxlen: 24
188.92.248.0/21 maxlen: 24
188.95.144.0/23 maxlen: 24
209.198.128.0/19 maxlen: 24
212.105.128.0/19 maxlen: 24
216.128.0.0/19 maxlen: 24
217.65.136.0/21 maxlen: 24
217.65.136.0/22 maxlen: 24
217.142.16.0/20 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e3:05:bc:e4:9b:10:21:ed:bc:ed:c5:7d:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5195dac3d341440904e063b80e05afe34bce094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:ea:62:f5:b4:dc:0a:be:83:f5:5c:d7:53:
5c:48:b4:e6:ac:44:4f:90:48:5b:51:c3:5a:f7:d8:
e8:f8:db:c4:88:d9:3b:d3:c7:95:40:37:7f:2f:38:
7f:33:24:a4:4c:d1:db:d5:12:39:32:05:e9:2f:e9:
f5:e8:d1:11:56:21:ca:f4:e2:ea:af:0c:06:13:e8:
2e:9e:59:6f:cb:6b:84:b9:21:ed:47:4c:1f:e0:d5:
55:e3:db:e2:40:10:89:48:43:ea:3a:0a:08:cb:52:
b7:e0:51:2e:4c:4e:6d:dd:2a:0f:68:37:fd:97:8a:
13:ab:c7:f3:62:a2:f6:f0:c1:49:fc:82:a7:1a:8f:
ed:af:b8:6c:ba:08:bb:ac:d7:5e:9f:51:0d:13:3e:
3f:b7:7d:9d:85:07:e6:90:8c:da:53:3d:c1:18:de:
01:a1:f2:be:4f:b8:9d:03:29:29:a3:1d:17:5a:f1:
9a:f1:c5:a1:2e:9b:c2:08:44:2d:17:05:b8:9d:5b:
93:c6:ec:40:42:7c:49:5c:b0:ca:a0:cc:11:bf:04:
dc:7e:10:9c:ef:50:02:49:f0:1a:86:2e:ae:d2:c3:
15:52:4b:df:16:c4:eb:62:f5:82:f2:b4:e0:4c:5a:
e6:d9:f6:41:61:be:27:dd:f7:e0:19:1f:1f:9f:b8:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:95:DA:C3:D3:41:44:09:04:E0:63:B8:0E:05:AF:E3:4B:CE:09:4F
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/UZXaw9NBRAkE4GO4DgWv40vOCU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.24.0/21
91.102.180.0/22
145.224.64.0/18
162.43.192.0/22
169.155.224.0/19
176.116.124.0/23
188.92.248.0/21
188.95.144.0/23
209.198.128.0/19
212.105.128.0/19
216.128.0.0/19
217.65.136.0/21
217.142.16.0/20
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
26:a6:4b:c5:e8:d5:02:54:1c:92:9f:34:d0:a9:94:0e:71:8b:
03:17:7d:ac:91:e3:16:38:43:77:50:d3:d6:ef:2c:3b:37:92:
82:e7:91:61:3c:39:3d:af:e1:fa:5d:1b:55:6d:e9:d1:09:df:
d5:1b:6b:ee:4d:8b:8e:03:af:71:3e:7c:7b:63:e7:8d:e7:92:
4d:89:8f:31:8a:5e:4f:e4:76:c8:91:cc:0f:3d:8d:b2:5b:05:
04:dd:08:cf:e7:66:ce:11:34:32:17:ad:5c:48:03:68:63:0d:
34:48:08:e9:3b:99:08:7b:c7:18:fc:85:36:1a:49:08:00:c2:
8f:af:40:fa:24:2f:91:83:d7:82:e6:16:00:b5:08:6d:53:e1:
55:4d:96:b1:3f:f8:fe:22:93:91:b4:4d:b7:b6:c1:27:9c:4e:
c0:3e:95:83:94:1f:f1:cb:e2:4a:27:bc:a7:65:55:a8:65:36:
95:c8:2b:41:ee:07:fe:93:eb:dc:58:75:2a:e5:5b:ed:ce:8c:
14:31:50:8e:8e:c4:88:d4:9f:af:34:94:59:a6:02:63:1d:28:
20:6e:59:3c:7c:02:25:d9:33:6a:7f:5b:0c:88:c3:89:7d:47:
2a:3d:4d:8e:7c:7e:ea:39:af:88:df:bf:bd:5a:61:ec:f3:0a:
69:3a:11:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:14:57 2025 by rpki-client