Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/fUQfJ9b5u35O0_p-iUp42Os46hA.roa
File: fUQfJ9b5u35O0_p-iUp42Os46hA.roa (raw, json)
Hash identifier: 0cvi4gkix6mewQd5i5/nO5DzbnNjSl7ne7hKCvJ5puY=
Subject key identifier: 7D:44:1F:27:D6:F9:BB:7E:4E:D3:FA:7E:89:4A:78:D8:EB:38:EA:10
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 019421B1BFAE844693C7264A34925AF020E9
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/fUQfJ9b5u35O0_p-iUp42Os46hA.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205697
IP address blocks: 185.161.96.0/22 maxlen: 24
185.161.96.0/24 maxlen: 24
185.161.97.0/24 maxlen: 24
185.161.98.0/24 maxlen: 24
185.161.99.0/24 maxlen: 24
195.216.234.0/24 maxlen: 24
195.216.238.0/24 maxlen: 24
195.216.245.0/24 maxlen: 24
195.216.247.0/24 maxlen: 24
2a0b:ef00::/29 maxlen: 32
2a0b:ef00::/32 maxlen: 32
2a0b:ef01::/32 maxlen: 32
2a0b:ef02::/32 maxlen: 32
2a0b:ef03::/32 maxlen: 32
2a0b:ef04::/32 maxlen: 32
2a0b:ef05::/32 maxlen: 32
2a0b:ef06::/32 maxlen: 32
2a0b:ef07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bf:ae:84:46:93:c7:26:4a:34:92:5a:f0:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d441f27d6f9bb7e4ed3fa7e894a78d8eb38ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:c3:05:ab:40:54:41:68:e3:b3:c1:d4:2d:
ec:fa:3d:70:1e:61:5b:89:5f:83:b2:d3:c1:68:32:
dc:7c:79:08:65:8e:1e:91:fe:9a:16:a2:34:d1:8f:
ca:9f:aa:f9:2c:04:86:4e:b6:02:3e:93:54:80:b7:
0e:8b:55:b0:6c:b0:be:47:67:32:3c:b4:46:e3:0c:
f9:94:34:e3:b3:4c:30:9a:83:96:93:bd:22:e7:d0:
32:55:aa:7c:5e:50:10:3f:ca:fc:0d:f0:87:69:d2:
de:2b:ff:df:d4:1a:9e:ca:62:7e:69:db:8d:9c:8b:
f8:0e:e5:cf:8e:22:f4:a5:b7:f5:45:2a:a0:77:b8:
b6:88:53:85:29:61:38:98:da:ac:f8:93:d6:08:f6:
a9:66:a3:cd:c6:33:39:15:b6:ba:a2:35:6a:1b:ee:
3b:c4:68:d2:5b:7e:7f:f2:2f:35:22:2a:da:45:e5:
61:06:ac:e8:6d:96:85:d3:f7:54:06:91:26:b2:81:
58:80:74:d3:f3:7e:34:24:2b:aa:f2:45:e3:1f:e2:
f2:d6:5b:c0:c3:fd:a5:98:b9:36:79:60:a2:fa:3a:
d3:70:45:9c:5e:0c:ac:82:16:15:17:39:d0:19:1d:
8d:32:b4:c4:ba:1f:16:c5:f0:c7:ac:5e:86:91:83:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:44:1F:27:D6:F9:BB:7E:4E:D3:FA:7E:89:4A:78:D8:EB:38:EA:10
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/fUQfJ9b5u35O0_p-iUp42Os46hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.96.0/22
195.216.234.0/24
195.216.238.0/24
195.216.245.0/24
195.216.247.0/24
IPv6:
2a0b:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
45:87:f9:c7:ca:3d:b0:7d:89:5e:ee:15:4d:47:68:20:a1:ff:
56:4d:7d:0a:4a:e7:1e:fe:b8:b1:6a:6c:39:9a:a9:12:18:48:
24:14:6e:43:70:26:77:2d:42:6b:75:0a:d7:c2:f4:2b:b0:8b:
c7:27:7b:28:ad:0a:32:80:02:a3:66:de:83:67:c3:8c:49:53:
e9:47:0e:8f:81:81:2b:21:db:9a:2e:77:ff:c4:79:de:26:57:
90:c0:52:b3:f0:a7:3a:fc:a6:47:86:4b:37:a1:02:4d:35:65:
64:7f:4a:48:e5:78:e0:6d:e7:c1:7a:7a:79:e9:ec:1a:57:db:
df:9b:11:e9:57:a3:0b:a5:b9:4d:de:fd:9d:e0:77:85:70:c6:
67:c3:50:22:69:a0:91:89:5b:ae:c3:b9:75:5e:22:f6:b1:d0:
aa:5d:ba:cd:23:02:a2:9b:6f:e4:1e:1e:c8:f6:21:28:c7:8e:
4e:de:e7:12:4f:9d:8d:9c:09:98:f9:a6:d7:0e:8b:69:ab:c3:
13:0e:a0:46:8c:a5:f8:2b:d2:df:05:ee:8a:c1:ad:2d:e8:7d:
80:a0:a4:bc:6c:a9:7f:d8:7d:a8:97:ed:89:50:b3:a7:7f:ea:
8e:18:85:21:7f:4d:f1:51:f8:b7:8b:18:b4:88:ce:06:c9:3e:
b4:2c:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:20 2025 by rpki-client