Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/eGjT06-dvH2ktgkRk_eZEcDWmpU.roa
File: eGjT06-dvH2ktgkRk_eZEcDWmpU.roa (raw, json)
Hash identifier: uYL/3E0m96LWXnnUw92p5H6DIHy34w5xCKodqS41lZ0=
Subject key identifier: 78:68:D3:D3:AF:9D:BC:7D:A4:B6:09:11:93:F7:99:11:C0:D6:9A:95
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 0196AAE842BCFD06280125D959A2B868F8D3
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/eGjT06-dvH2ktgkRk_eZEcDWmpU.roa
Signing time: Wed 07 May 2025 13:21:10 +0000
ROA not before: Wed 07 May 2025 13:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34444
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.73.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
84.22.86.0/24 maxlen: 24
195.234.248.0/22 maxlen: 22
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
213.180.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:e8:42:bc:fd:06:28:01:25:d9:59:a2:b8:68:f8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: May 7 13:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7868d3d3af9dbc7da4b6091193f79911c0d69a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:9c:47:47:39:23:b9:3d:0d:49:60:63:c1:
11:fa:24:d1:b0:05:9c:eb:21:96:94:e3:4d:51:90:
bc:09:fe:24:5d:93:6b:58:75:a1:28:86:83:2f:16:
e6:a4:34:c7:90:89:0d:11:f4:f7:fd:19:4f:f1:db:
54:b4:e3:c9:94:f1:74:31:75:e7:49:f8:e3:6d:6b:
ff:12:73:f1:0c:05:46:98:db:d1:d8:7a:34:f7:aa:
a0:21:81:3f:b3:9a:ab:f4:34:7d:22:5e:9e:24:5e:
5d:2a:95:f5:7b:6f:58:61:ca:89:c6:c2:19:c8:60:
4d:1c:ee:c9:85:82:22:10:1f:6d:26:2f:71:1a:f9:
03:7a:43:ca:00:94:44:cf:ce:95:90:2a:50:56:7b:
c2:cf:c6:cb:d5:df:4c:f1:2f:52:bf:ec:8c:47:95:
83:1a:53:41:d2:15:a9:c5:01:eb:89:28:1a:a8:1a:
f1:b1:0e:11:e1:46:a8:c2:26:df:70:97:6d:b8:26:
d8:65:ce:b8:1c:7f:82:0d:00:63:13:c7:14:45:3d:
8a:5d:35:3a:fb:33:bd:c1:ed:54:2b:58:01:08:69:
10:09:6b:0d:75:d5:17:25:db:6e:a2:39:6d:99:21:
c7:22:01:95:d0:af:36:2a:b4:b8:81:f8:7b:3c:2a:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:68:D3:D3:AF:9D:BC:7D:A4:B6:09:11:93:F7:99:11:C0:D6:9A:95
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/eGjT06-dvH2ktgkRk_eZEcDWmpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
195.234.248.0/22
213.180.225.0-213.180.226.255
213.180.228.0-213.180.230.255
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:7a:94:48:10:53:e2:10:6f:9f:b2:ab:4e:4f:4e:65:bc:7b:
1d:11:bc:f9:ea:76:4f:90:64:ef:9a:be:27:5c:b9:4a:ca:a5:
84:16:df:c0:82:c8:4b:95:1e:eb:17:0a:e6:d5:6b:d2:59:6c:
35:18:e4:15:78:b2:47:86:f7:f1:c8:19:7c:03:a3:44:c9:52:
9e:03:12:62:63:2e:dd:ac:d0:b5:51:83:dd:e6:50:bb:a3:0a:
94:45:ef:df:55:d3:d8:67:bb:5f:56:1c:7d:ef:55:4b:64:14:
2d:2a:50:cf:de:49:90:48:54:ad:91:53:04:ad:49:65:47:17:
8c:ce:f0:0d:33:b5:bc:b2:59:8d:15:87:52:01:2c:9d:88:8b:
4e:78:ec:0e:d6:59:b2:77:fa:57:18:50:48:51:2e:9a:25:3d:
83:4e:2a:d1:24:cc:a0:ab:96:49:96:e7:b8:e0:07:43:e4:aa:
a1:fb:85:fe:cc:86:fc:d3:52:1e:32:5d:be:03:f1:a3:3f:69:
d7:ba:5d:b4:d1:09:74:60:cd:13:f4:c4:a7:24:ef:06:8b:ee:
64:78:13:67:2e:ea:07:45:a8:b0:5f:4e:7e:5d:60:04:38:12:
81:ff:22:d3:98:b9:42:44:7b:de:91:52:38:85:4a:f3:c1:56:
75:0e:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:53:44 2025 by rpki-client