Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/zOKrDn3tQAhPRsC8Lmb1V8TVx8Y.roa
File: zOKrDn3tQAhPRsC8Lmb1V8TVx8Y.roa (raw, json)
Hash identifier: RxerbYPvQlg/5QiApArrLAGt6msA3uH/fhheHO7fcUs=
Subject key identifier: CC:E2:AB:0E:7D:ED:40:08:4F:46:C0:BC:2E:66:F5:57:C4:D5:C7:C6
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 0194228DAF55A861482C412568A1BDCB9324
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/zOKrDn3tQAhPRsC8Lmb1V8TVx8Y.roa
Signing time: Wed 01 Jan 2025 15:48:18 +0000
ROA not before: Wed 01 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 85.198.34.0/24 maxlen: 24
85.198.35.0/24 maxlen: 24
85.198.38.0/24 maxlen: 24
85.198.39.0/24 maxlen: 24
85.198.42.0/24 maxlen: 24
85.198.43.0/24 maxlen: 24
91.123.12.0/24 maxlen: 24
91.123.13.0/24 maxlen: 24
91.123.14.0/24 maxlen: 24
91.123.15.0/24 maxlen: 24
190.106.177.0/24 maxlen: 24
190.106.178.0/24 maxlen: 24
190.106.179.0/24 maxlen: 24
190.106.180.0/24 maxlen: 24
190.106.181.0/24 maxlen: 24
190.106.182.0/24 maxlen: 24
190.106.184.0/24 maxlen: 24
206.195.137.0/24 maxlen: 24
206.195.138.0/24 maxlen: 24
206.195.139.0/24 maxlen: 24
206.195.141.0/24 maxlen: 24
206.195.142.0/24 maxlen: 24
206.195.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:af:55:a8:61:48:2c:41:25:68:a1:bd:cb:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cce2ab0e7ded40084f46c0bc2e66f557c4d5c7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:fd:06:d1:18:5b:93:02:49:4b:e2:4d:bf:
52:24:8f:e3:64:ac:62:2f:c3:a2:96:e4:5e:e7:b4:
e9:16:65:a5:d6:5f:1e:73:15:34:0c:72:8d:74:04:
a5:35:ef:78:9f:c5:7b:0d:ee:99:7f:42:b3:84:71:
a2:cf:7b:ca:91:28:9c:66:68:68:b1:b9:62:41:c5:
dd:35:b4:01:e1:49:15:1c:92:18:58:e3:fe:68:af:
3e:21:3b:17:7a:42:d4:98:73:7f:ea:c4:9f:77:cf:
61:db:56:2e:b0:c6:36:33:c3:e8:a8:f4:a2:e5:00:
7e:53:36:50:bf:49:2f:e2:76:5e:b4:94:17:de:04:
9d:dc:36:d4:cd:ca:e5:6a:cd:13:55:e5:e5:f5:e8:
74:5b:61:e3:5f:7b:0d:59:02:9e:b8:f1:b9:ef:b0:
39:52:d7:47:bf:f7:8d:60:0e:ea:4d:43:7d:2a:fa:
3e:5a:5d:3e:dc:2a:1a:ac:fd:60:50:e4:03:15:ad:
1a:17:d9:e1:fd:37:aa:a8:dc:88:fd:cd:c6:d8:39:
64:6b:2d:13:7a:66:8b:e1:6c:ac:a0:62:2b:3d:91:
a3:01:10:c6:1a:17:e0:69:e2:5d:54:6f:ac:fe:dd:
63:d9:be:5e:6b:cf:02:98:a7:6c:fa:0f:dd:b3:83:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E2:AB:0E:7D:ED:40:08:4F:46:C0:BC:2E:66:F5:57:C4:D5:C7:C6
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/zOKrDn3tQAhPRsC8Lmb1V8TVx8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.34.0/23
85.198.38.0/23
85.198.42.0/23
91.123.12.0/22
190.106.177.0-190.106.182.255
190.106.184.0/24
206.195.137.0-206.195.139.255
206.195.141.0-206.195.143.255
Signature Algorithm: sha256WithRSAEncryption
9f:bc:f5:b4:b1:22:8c:31:29:2b:51:26:5e:b0:ad:78:5e:59:
ae:f4:34:56:8a:7e:51:cf:05:10:7f:35:1b:d8:9d:c0:c9:b0:
ef:b3:10:e2:07:3f:95:e9:fd:d8:6e:1b:b7:f7:00:6e:af:33:
c4:85:96:7c:4d:bf:34:21:09:3f:af:6d:4e:30:47:ff:f2:9c:
c8:da:f6:bd:82:54:89:eb:8d:a1:d2:52:af:a3:7f:40:bb:e3:
69:aa:15:2a:ba:c6:cf:82:ea:83:d2:47:c1:c4:fb:c1:47:ce:
1a:2d:9f:34:40:4c:b0:64:c8:61:01:15:e1:14:6b:c2:b0:40:
66:1b:02:14:02:57:75:62:f3:b9:18:f4:9f:a5:cb:e6:e0:6e:
13:18:f6:61:cb:82:af:23:1c:69:2b:b7:57:fb:34:49:17:ee:
c7:f4:b5:e7:a2:af:fc:54:89:a8:00:b0:ce:a1:48:e0:7a:9c:
10:14:10:bf:3c:e8:63:28:7c:d2:5b:12:98:2d:5e:bb:86:5f:
3f:58:ed:19:22:78:31:29:4e:e9:96:87:5a:e4:db:4a:89:c7:
33:69:3d:1c:55:5b:18:1e:59:6c:84:43:2f:b8:15:03:d0:79:
b3:01:48:c6:92:42:69:70:10:4f:8f:3b:8f:03:d9:82:96:ae:
9d:00:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:00 2025 by rpki-client