Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2EGP87shtb4v0p4RZrR-lUWBfG4.roa
File: 2EGP87shtb4v0p4RZrR-lUWBfG4.roa (raw, json)
Hash identifier: 2g6+AOghhyH8YiVTaQFL48Q4u3JTVwqxTRNGmXEcfUQ=
Subject key identifier: D8:41:8F:F3:BB:21:B5:BE:2F:D2:9E:11:66:B4:7E:95:45:81:7C:6E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C5D2F91A7E75BAE77F6CB7640005E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2EGP87shtb4v0p4RZrR-lUWBfG4.roa
Signing time: Thu 02 Jan 2025 09:50:23 +0000
ROA not before: Thu 02 Jan 2025 09:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13118
IP address blocks: 46.237.0.0/18 maxlen: 18
46.237.0.0/19 maxlen: 19
46.237.48.0/20 maxlen: 20
77.234.0.0/19 maxlen: 19
85.113.192.0/19 maxlen: 19
85.113.192.0/20 maxlen: 20
85.113.204.0/24 maxlen: 24
87.253.0.0/19 maxlen: 19
87.253.0.0/20 maxlen: 20
87.253.13.0/24 maxlen: 24
87.253.16.0/21 maxlen: 21
87.253.24.0/21 maxlen: 21
93.181.208.0/20 maxlen: 20
93.181.224.0/24 maxlen: 24
93.181.225.0/24 maxlen: 24
93.181.240.0/20 maxlen: 20
95.86.192.0/18 maxlen: 18
95.86.192.0/19 maxlen: 19
95.86.206.0/24 maxlen: 24
95.86.207.0/24 maxlen: 24
95.86.208.0/24 maxlen: 24
95.86.209.0/24 maxlen: 24
95.86.224.0/19 maxlen: 19
95.106.160.0/19 maxlen: 19
109.161.0.0/17 maxlen: 17
109.161.0.0/19 maxlen: 19
109.161.0.0/21 maxlen: 21
109.161.8.0/21 maxlen: 21
109.161.32.0/19 maxlen: 19
109.161.52.0/24 maxlen: 24
109.161.57.0/24 maxlen: 24
109.161.60.0/22 maxlen: 22
109.161.64.0/19 maxlen: 19
109.161.64.0/20 maxlen: 20
217.15.128.0/19 maxlen: 24
217.15.134.0/24 maxlen: 24
217.15.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:5d:2f:91:a7:e7:5b:ae:77:f6:cb:76:40:00:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8418ff3bb21b5be2fd29e1166b47e9545817c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:91:55:94:78:76:11:75:97:6d:ca:97:05:
fa:f1:a8:08:d2:3b:df:fb:8d:64:1c:55:a9:78:db:
04:4c:77:72:7c:cb:a1:1d:4c:1f:2d:63:6e:8f:11:
8d:7f:05:1d:f7:60:87:0b:89:32:60:f3:3e:cb:e3:
af:fc:31:5b:65:8e:fc:b2:8d:0f:d2:3b:b4:38:83:
b4:ef:3b:a8:54:d4:8a:a5:85:c5:3c:3e:b2:ed:f1:
ab:63:08:2a:ee:c3:14:0b:06:96:6a:11:1a:f5:cd:
63:ec:93:cf:9b:c8:8b:88:04:d5:54:f0:97:54:a9:
49:74:ab:d4:39:4e:c0:b4:98:80:7a:25:ec:0e:f1:
bb:9a:a0:eb:aa:95:72:31:64:78:10:5c:57:f5:27:
a1:b6:5a:e8:0d:54:bd:0a:8e:42:70:9b:df:5c:92:
87:ba:23:87:13:a5:f6:45:b7:a7:08:c3:14:bb:6d:
0c:a1:57:05:89:18:c8:46:f2:5c:e2:c6:28:04:fb:
70:c3:46:a9:a9:91:a7:e5:68:d4:6d:a6:c3:1c:b4:
5e:4c:1d:bb:d5:d6:25:0e:c9:4f:9e:90:0a:de:c6:
49:03:df:21:aa:12:7e:23:61:b4:db:aa:d3:18:2b:
5b:f2:b2:bd:b7:0f:f7:0e:26:35:21:a3:3a:ea:9b:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:8F:F3:BB:21:B5:BE:2F:D2:9E:11:66:B4:7E:95:45:81:7C:6E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2EGP87shtb4v0p4RZrR-lUWBfG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.237.0.0/18
77.234.0.0/19
85.113.192.0/19
87.253.0.0/19
93.181.208.0-93.181.225.255
93.181.240.0/20
95.86.192.0/18
95.106.160.0/19
109.161.0.0/17
217.15.128.0/19
Signature Algorithm: sha256WithRSAEncryption
02:28:f4:98:a6:e7:26:cb:30:05:e4:cf:7e:08:1e:b1:1a:a3:
e5:75:e9:a5:ae:e1:f3:da:ef:78:11:49:85:c6:56:85:39:84:
09:95:d0:db:3a:ce:a9:b8:e7:4e:93:8c:e1:de:2a:2c:21:e8:
e6:7d:64:d1:9e:f2:4c:0c:75:4d:e3:08:b0:ea:8f:6d:fc:e0:
b2:f1:6f:09:9a:db:e8:f7:40:3e:5f:13:8c:57:49:d2:af:02:
67:16:20:27:5c:11:c7:e8:5f:26:8b:32:f3:7d:d4:3c:0c:fb:
0b:e5:35:6f:c4:30:56:d0:d0:a7:97:c8:43:4b:e0:dd:df:28:
66:bb:4e:60:e1:6e:55:2c:0c:3b:71:12:57:d8:5f:10:fe:b0:
c5:2d:d0:ee:af:f3:b9:da:54:57:a7:3d:fd:77:44:a8:73:6e:
47:81:1c:73:62:d6:50:72:b7:72:31:34:1d:11:e7:f1:f3:cc:
29:e9:d7:ff:af:99:76:dc:12:fb:2e:85:05:0f:3d:d9:3d:b6:
f0:81:61:8b:62:01:e0:48:d4:20:99:fc:1c:b3:60:0f:3b:36:
f0:47:8d:2f:b5:ca:40:9e:95:89:bd:0a:b1:1a:32:61:a2:75:
0a:13:53:38:8d:cb:04:c2:e3:77:60:64:92:8e:4b:8e:fc:b5:
61:19:66:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:48:18 2025 by rpki-client