Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/vD_wlkgUOjWQBEijGo7zeI_oZVI.roa
File: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (raw, json)
Hash identifier: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=
Subject key identifier: BC:3F:F0:96:48:14:3A:35:90:04:48:A3:1A:8E:F3:78:8F:E8:65:52
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 01941F8C3256A0DB4679ABAFCC46FEC78511
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/vD_wlkgUOjWQBEijGo7zeI_oZVI.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29545
IP address blocks: 86.111.32.0/21 maxlen: 21
86.111.36.0/24 maxlen: 24
86.111.37.0/24 maxlen: 24
86.111.38.0/24 maxlen: 24
86.111.39.0/24 maxlen: 24
86.111.40.0/22 maxlen: 22
86.111.40.0/24 maxlen: 24
86.111.41.0/24 maxlen: 24
86.111.50.0/23 maxlen: 23
86.111.50.0/24 maxlen: 24
213.163.229.0/24 maxlen: 24
213.163.232.0/24 maxlen: 24
213.163.233.0/24 maxlen: 24
213.163.238.0/24 maxlen: 24
213.163.242.0/23 maxlen: 23
213.163.244.0/23 maxlen: 23
213.163.249.0/24 maxlen: 24
213.163.254.0/24 maxlen: 24
2a00:1f88::/32 maxlen: 32
2a00:1f88:a402::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:32:56:a0:db:46:79:ab:af:cc:46:fe:c7:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc3ff09648143a35900448a31a8ef3788fe86552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:7b:93:57:60:65:37:d9:0f:eb:f3:f1:4e:
1b:3e:c5:e4:1d:5d:a3:7b:c7:da:cb:51:df:4d:9c:
f1:52:39:b7:33:bd:ef:d1:52:c5:4e:7c:e4:30:b2:
6e:44:11:f4:f8:06:a1:3d:82:66:52:c5:2a:75:b6:
4c:3e:df:43:d3:db:9f:94:b4:8a:a2:cc:c5:49:f0:
62:17:08:db:74:31:39:72:a8:f5:80:4b:33:63:1d:
2e:d5:63:18:77:fd:c2:d0:a9:1a:bb:87:73:c2:43:
e2:62:f7:b7:97:34:f9:d4:0c:8e:e3:33:b2:b4:60:
7e:6d:a1:81:ca:56:5f:d7:f1:ef:ac:6f:df:e6:5b:
07:d3:55:3c:82:a1:ec:78:10:26:29:52:82:e9:02:
d8:70:50:c3:8d:9c:cc:97:4f:68:08:24:74:7c:31:
3c:98:76:9a:01:05:00:a7:50:13:bb:a3:c1:f3:be:
b4:72:5e:f4:65:0a:c9:e1:f4:2a:cb:c3:d0:bc:86:
93:7a:90:ab:a4:ee:c3:e1:ba:8c:5e:cf:e1:6a:ad:
19:a2:6c:04:d1:7b:19:38:ed:5d:a5:38:94:e5:46:
e5:bf:82:21:35:d7:ec:dd:86:8f:f1:56:06:90:bf:
fd:f0:e6:c9:f1:f8:09:3e:62:c8:3a:7a:06:66:92:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3F:F0:96:48:14:3A:35:90:04:48:A3:1A:8E:F3:78:8F:E8:65:52
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/vD_wlkgUOjWQBEijGo7zeI_oZVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.32.0-86.111.43.255
86.111.50.0/23
213.163.229.0/24
213.163.232.0/23
213.163.238.0/24
213.163.242.0-213.163.245.255
213.163.249.0/24
213.163.254.0/24
IPv6:
2a00:1f88::/32
Signature Algorithm: sha256WithRSAEncryption
8e:61:2b:27:22:17:b3:60:af:8c:b8:bb:59:01:34:98:86:1d:
55:8f:ae:29:33:fc:b0:42:a7:b6:19:fb:46:87:4e:0c:2e:7b:
c7:cf:c0:fd:0b:f0:26:6f:11:58:75:4d:27:2c:a0:07:c7:87:
38:93:70:97:9d:d1:7e:52:9b:45:89:94:8e:2a:65:18:e6:63:
fe:9a:f1:0e:b1:54:fc:5e:b9:85:9c:65:98:86:30:54:6a:71:
b5:15:d0:f4:a7:87:b4:06:ba:11:b2:fa:f4:f6:26:cf:65:d3:
d1:7e:20:fd:9a:79:5f:c0:cb:a6:64:56:3c:ed:c7:bd:a8:c4:
af:84:b3:6c:2f:0a:f5:2f:41:a5:77:c7:83:31:43:39:22:85:
b1:e8:00:41:2e:0e:8e:cb:d6:97:28:e3:be:75:4a:dc:ce:9c:
41:36:27:97:44:17:8d:dd:99:af:9e:99:0f:4a:52:7c:ed:e8:
21:c9:8a:7d:51:d2:66:f8:c6:c4:1d:f6:df:c2:40:d0:08:14:
ac:7d:47:94:bf:8c:d8:74:6f:fb:59:10:26:1d:29:4b:d9:7e:
60:3f:85:4a:9f:2f:e4:c9:7c:07:b3:64:c8:42:35:75:ce:f2:
a9:ad:d1:6e:0b:80:07:42:40:c8:c5:f3:ea:4c:ae:7a:78:e2:
ce:22:62:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:50:18 2025 by rpki-client