Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/lEVgi9I8nrIc-HhV_LhTJI8_UII.roa
File: lEVgi9I8nrIc-HhV_LhTJI8_UII.roa (raw, json)
Hash identifier: ee0opnDYNm6NaGhq5qqdUOHizQiOIqJZQ2o60F6FIkU=
Subject key identifier: 94:45:60:8B:D2:3C:9E:B2:1C:F8:78:55:FC:B8:53:24:8F:3F:50:82
Certificate issuer: /CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Certificate serial: 0194236A106148C62D8F929CB259A957E1CD
Authority key identifier: E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/lEVgi9I8nrIc-HhV_LhTJI8_UII.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52157
IP address blocks: 93.89.112.0/20 maxlen: 20
185.193.92.0/22 maxlen: 22
185.209.224.0/22 maxlen: 22
185.237.36.0/22 maxlen: 22
2a02:25e8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:10:61:48:c6:2d:8f:92:9c:b2:59:a9:57:e1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9445608bd23c9eb21cf87855fcb853248f3f5082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:59:a6:80:9c:43:1a:90:a1:45:94:05:5a:
a4:f5:e1:13:20:7e:1b:4c:12:60:ef:6d:fb:28:32:
7f:2b:72:09:d3:2a:17:42:b4:97:fa:f5:c3:36:05:
d4:f9:bf:5b:21:60:ea:fd:2f:2f:67:dc:c6:b5:d4:
a1:22:14:15:9a:7e:61:70:4a:c8:32:98:c1:7a:fc:
8b:fc:31:58:76:d9:0f:4e:64:f7:14:27:62:1b:1a:
76:f6:5f:f2:88:57:7b:24:9d:68:3f:d5:41:3f:11:
6e:2a:f6:0c:7e:c1:f4:43:1c:a3:a9:52:9e:b1:8e:
84:1c:22:a1:36:5a:66:67:6c:4f:60:29:9f:e4:4b:
f1:e2:7c:a1:e5:54:8e:3a:93:ea:b7:7f:13:a2:d2:
53:2d:d2:fe:7f:b5:94:2c:47:e4:c3:ce:a8:39:db:
7a:68:bd:0c:bb:8e:cb:0a:c2:85:4e:27:3c:1c:f3:
29:90:87:e3:dc:ac:53:79:59:57:f8:e1:4f:de:e5:
9e:4b:75:ad:a0:d0:98:3d:31:8d:e9:ca:a4:3a:64:
a5:23:1c:f1:a1:89:d7:12:54:76:bd:f7:de:79:30:
69:d8:3b:3c:2a:a6:4d:76:ce:3d:7e:ae:4e:3e:49:
e8:77:c0:93:1a:36:7b:bb:29:8f:c5:d8:b0:9e:31:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:45:60:8B:D2:3C:9E:B2:1C:F8:78:55:FC:B8:53:24:8F:3F:50:82
X509v3 Authority Key Identifier:
keyid:E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/lEVgi9I8nrIc-HhV_LhTJI8_UII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.112.0/20
185.193.92.0/22
185.209.224.0/22
185.237.36.0/22
IPv6:
2a02:25e8::/29
Signature Algorithm: sha256WithRSAEncryption
68:22:74:65:f2:9b:7a:c5:ae:89:a8:50:45:04:e4:51:67:23:
5b:8f:b0:02:bc:3d:5e:d6:f9:ac:30:98:10:98:c5:e1:23:9a:
80:69:3a:01:1e:90:47:88:89:b2:2f:ad:88:96:21:08:9c:06:
e1:59:dc:cc:a0:15:17:16:16:c1:1d:a1:fb:35:a3:a7:f4:df:
e2:f6:93:84:29:c9:6e:f3:26:7c:76:46:bb:db:34:ff:bd:9a:
16:e8:93:8a:ab:3d:73:74:21:07:15:5d:90:96:e0:3e:b2:1c:
5f:e4:2f:c2:9a:60:06:dc:75:d4:16:56:7d:1b:78:82:60:9a:
a0:98:22:4c:8f:2c:75:ea:30:a0:28:02:2f:4e:fe:29:7a:19:
a6:20:69:fd:1b:be:f3:b1:6c:26:de:c6:31:69:00:a4:a9:7d:
31:07:8c:4c:19:b3:ff:49:69:a1:53:55:e9:5f:15:b8:56:ab:
db:46:38:a2:b6:5c:4d:0b:50:48:33:40:29:55:bb:3f:5d:7a:
55:f7:4b:4b:31:7d:f0:36:90:f5:c5:4c:ec:ce:d6:31:7c:15:
0f:70:2b:be:cd:8e:f3:0a:02:69:2f:1d:ab:8f:f9:4b:02:af:
f0:ab:61:a4:04:0e:c1:8b:0a:fe:53:cd:7d:b6:9c:39:0f:32:
96:46:2e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:45 2025 by rpki-client