Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ed54BhJmmKTucMCINT4tn9Epec4.roa
File: Ed54BhJmmKTucMCINT4tn9Epec4.roa (raw, json)
Hash identifier: ZdzYSfODPIPGszhqCfQjEHvG3+W8jWrq4vyg4cTzFEI=
Subject key identifier: 11:DE:78:06:12:66:98:A4:EE:70:C0:88:35:3E:2D:9F:D1:29:79:CE
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0196151219217358CBA33DEB312FC92D7865
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ed54BhJmmKTucMCINT4tn9Epec4.roa
Signing time: Tue 08 Apr 2025 11:03:49 +0000
ROA not before: Tue 08 Apr 2025 11:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.24.0/24 maxlen: 24
89.21.86.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
194.61.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:12:19:21:73:58:cb:a3:3d:eb:31:2f:c9:2d:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 8 11:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11de7806126698a4ee70c088353e2d9fd12979ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:e8:97:6e:5c:df:c8:05:19:06:ad:29:8b:
f5:44:b0:cf:3b:dc:ac:7b:7d:dc:ae:98:d4:39:22:
d5:95:5b:59:eb:48:26:2e:82:5f:77:40:77:dd:2f:
a1:b5:0d:cd:ae:64:57:1e:99:06:1b:8a:a3:1c:3a:
fd:63:ca:99:48:a8:5c:cf:3f:7d:73:46:7c:ff:8d:
31:94:09:3d:a0:17:1a:54:0a:94:30:f1:cb:ad:60:
19:30:56:75:55:2a:9f:3a:bb:81:51:82:c8:6d:87:
b1:8b:99:04:5d:97:70:fc:f8:cb:35:e5:62:25:5f:
15:87:c4:03:c1:80:1b:51:56:c5:c8:ec:0e:62:f7:
ad:e5:dc:e8:2d:b8:6e:20:44:9b:58:84:1e:a1:44:
e0:86:15:52:6d:20:23:dc:19:04:ea:91:98:63:f8:
9b:92:43:4b:ac:6b:4b:80:7a:b4:26:63:8e:84:35:
24:6e:76:47:b6:98:42:89:26:1f:ec:07:6b:bd:d1:
10:0f:4d:d0:59:95:ec:1f:29:70:f0:a4:80:b0:d0:
2e:ae:87:09:a3:f8:17:ee:3d:65:3c:b4:f1:52:4d:
36:1b:f3:5b:f5:d9:eb:35:35:a8:8a:30:22:8b:bd:
25:2d:e6:a2:12:bd:dd:03:09:96:38:df:f4:77:38:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:78:06:12:66:98:A4:EE:70:C0:88:35:3E:2D:9F:D1:29:79:CE
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Ed54BhJmmKTucMCINT4tn9Epec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/24
89.21.86.0/24
89.251.18.0/24
89.251.31.0/24
109.122.43.0/24
194.61.75.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9e:55:bf:3e:5d:92:b2:43:f4:82:ee:8f:08:69:93:4a:19:
a6:ad:be:7f:de:27:52:f5:36:dd:f2:b6:16:87:9c:70:c2:03:
64:26:41:94:c4:6d:6f:a7:f5:14:e8:bb:7d:30:bd:72:4b:93:
5f:6a:01:31:86:cf:73:44:32:90:99:de:bc:be:64:75:25:0b:
b2:95:0f:c7:8d:c8:4f:71:f7:3f:9e:39:68:f5:55:e0:38:b8:
7a:ca:4f:c6:64:ef:e0:80:b2:a2:5c:93:a2:39:6b:46:61:c0:
89:6e:67:a1:12:89:66:92:a5:d5:79:7b:d3:61:f5:36:f1:b5:
9d:2b:cd:3c:36:c7:90:f2:7b:96:d5:c2:7a:98:99:b7:69:fe:
7e:ee:7f:b7:67:c9:fc:4b:a2:62:9c:2c:23:f3:51:b4:73:60:
7a:67:00:a7:3d:21:26:32:76:b4:dc:f7:f1:34:56:38:2a:4c:
73:a4:9f:c8:80:6b:e9:f6:95:76:2c:4a:e8:56:04:d0:a5:73:
c1:12:b8:81:10:05:e0:94:01:a5:53:55:2a:f0:3c:06:a3:99:
f7:f9:60:fd:83:b2:2e:c6:66:c2:2d:7f:d9:01:d2:b2:cd:f2:
05:c9:ce:75:d8:91:58:73:a5:b4:93:4b:2a:8a:7c:fc:33:fc:
70:1c:7f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:57 2025 by rpki-client