Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/E10xkOueYhKQ1eR7LPOWSuIcvzo.roa
File: E10xkOueYhKQ1eR7LPOWSuIcvzo.roa (raw, json)
Hash identifier: KIbGq9l2ACs69klxSYFwy1pM7+lK9YBNLqZhV5z4mZM=
Subject key identifier: 13:5D:31:90:EB:9E:62:12:90:D5:E4:7B:2C:F3:96:4A:E2:1C:BF:3A
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 01941F8C80D93263C48CBBA34C8657AAAC51
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/E10xkOueYhKQ1eR7LPOWSuIcvzo.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47962
IP address blocks: 37.122.152.0/22 maxlen: 22
37.122.152.0/23 maxlen: 23
37.122.153.0/24 maxlen: 24
37.122.154.0/23 maxlen: 23
37.122.154.0/24 maxlen: 24
37.122.155.0/24 maxlen: 24
37.122.156.0/23 maxlen: 23
37.122.156.0/24 maxlen: 24
37.122.157.0/24 maxlen: 24
176.106.224.0/22 maxlen: 22
176.106.224.0/23 maxlen: 23
176.106.224.0/24 maxlen: 24
176.106.230.0/23 maxlen: 23
176.106.230.0/24 maxlen: 24
176.106.231.0/24 maxlen: 24
2a0f:6a80::/29 maxlen: 29
2a0f:6a80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:80:d9:32:63:c4:8c:bb:a3:4c:86:57:aa:ac:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=135d3190eb9e621290d5e47b2cf3964ae21cbf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:68:9c:a2:a1:28:bc:e3:3c:08:60:a7:05:
47:7b:9a:41:b0:01:18:5f:12:aa:05:20:81:54:0a:
55:6d:91:9d:d7:05:86:b1:2c:36:48:be:ab:98:ad:
4b:67:7d:b5:5d:be:9c:bf:7f:c9:ad:70:0c:a5:bf:
49:53:f5:01:24:39:ed:9d:6f:1d:6e:8c:10:cf:92:
da:4f:43:de:c3:e8:38:cc:49:fb:26:c1:a8:db:00:
db:d5:d9:3f:89:c1:c7:be:96:ea:a2:71:56:34:70:
b0:b4:12:bb:15:b3:32:7f:e6:ee:a2:d9:f0:1e:1d:
80:97:a9:9d:97:15:16:9f:5f:ff:a2:0f:f8:53:78:
9b:34:cf:1a:c4:41:5c:3a:03:c2:55:df:3f:3b:02:
1c:76:0a:97:e2:7a:12:52:22:a6:34:75:aa:4b:16:
ba:ea:81:d2:ce:0e:ee:a2:e2:2a:9c:e7:53:08:84:
9d:84:2a:07:8c:6e:b2:06:49:1b:e9:b9:e0:f0:fa:
e9:61:a4:e5:bc:57:a8:1e:e1:6e:0c:ad:82:03:77:
ff:13:f1:68:ce:86:23:1b:35:de:20:99:1d:4f:7a:
4d:a2:7b:6d:0a:3f:8b:c5:37:41:41:3e:1d:17:9e:
84:cd:78:88:b3:70:cf:8a:6a:31:18:1c:d1:77:cb:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5D:31:90:EB:9E:62:12:90:D5:E4:7B:2C:F3:96:4A:E2:1C:BF:3A
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/E10xkOueYhKQ1eR7LPOWSuIcvzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.152.0-37.122.157.255
176.106.224.0/22
176.106.230.0/23
IPv6:
2a0f:6a80::/29
Signature Algorithm: sha256WithRSAEncryption
60:65:ec:f3:1f:49:89:89:cf:b6:44:21:52:57:30:5e:29:dc:
9f:bd:40:f0:14:fb:2a:61:44:3f:9a:b4:61:99:09:3e:03:3e:
6e:89:81:41:5e:c7:ca:c9:a9:29:77:71:51:0c:d6:6d:3e:3a:
ab:39:1d:5d:bb:fa:ac:15:68:c0:18:07:f1:f6:d0:f7:c1:68:
eb:bb:72:af:ac:fc:ba:14:79:9f:c4:a0:4a:4e:9a:9b:36:27:
8b:aa:4e:fb:54:47:bc:5e:4b:39:3e:23:65:1a:2a:38:6e:da:
a8:75:77:6a:b3:23:b0:60:0f:f1:7b:a7:88:78:75:21:a1:ca:
6c:61:98:87:21:79:67:3c:a7:5d:cb:3a:ee:9a:61:21:5e:8a:
06:4c:2f:f0:e8:ee:5b:16:1e:ca:b0:49:6a:a3:ac:ad:22:fd:
c2:75:f3:33:c2:ef:89:ac:74:ac:21:26:f8:3a:33:f8:22:b6:
c0:9a:a7:1b:11:50:6c:3a:9d:92:d9:25:20:61:2d:66:70:94:
bc:73:59:fa:66:09:15:f4:60:c2:db:30:9c:df:31:e1:fe:c3:
82:e9:03:a5:a3:71:30:4a:64:22:7a:f1:43:59:fc:96:f3:79:
e0:72:36:e4:2f:a4:da:2b:45:f1:ed:93:ee:3b:ab:d2:d7:16:
ae:1e:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:34:34 2025 by rpki-client