Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ogJi4P3SkjtWRb_LlED2GuGpeXo.roa
File: ogJi4P3SkjtWRb_LlED2GuGpeXo.roa (raw, json)
Hash identifier: zHfkkd/Tbpc/S/HBerwKwkw/NNFgcI2YlH9UO/wkBOY=
Subject key identifier: A2:02:62:E0:FD:D2:92:3B:56:45:BF:CB:94:40:F6:1A:E1:A9:79:7A
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0196349FF322BAC9DC7A2204D916224709B6
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ogJi4P3SkjtWRb_LlED2GuGpeXo.roa
Signing time: Mon 14 Apr 2025 14:06:59 +0000
ROA not before: Mon 14 Apr 2025 14:06:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 37.77.147.0/24 maxlen: 24
37.140.221.0/24 maxlen: 24
45.90.197.0/24 maxlen: 24
62.233.44.0/24 maxlen: 24
89.106.202.0/24 maxlen: 24
185.11.63.0/24 maxlen: 24
185.92.211.0/24 maxlen: 24
193.109.213.0/24 maxlen: 24
194.26.134.0/24 maxlen: 24
213.217.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:9f:f3:22:ba:c9:dc:7a:22:04:d9:16:22:47:09:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Apr 14 14:06:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a20262e0fdd2923b5645bfcb9440f61ae1a9797a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:5e:17:4c:30:7a:9d:3e:dd:9c:cd:8b:86:
da:65:aa:38:1e:77:06:e5:a5:37:65:67:a0:53:b2:
cc:d2:d9:f4:23:40:89:1d:f7:b5:12:7c:62:6b:49:
9c:ba:1d:94:1c:31:80:be:9a:84:4a:26:8c:c5:ac:
cb:74:79:57:9d:85:7c:7f:17:4a:7b:08:32:ff:8f:
d6:84:ac:7e:be:b3:58:4e:81:bb:2a:9e:87:5a:a1:
32:e8:85:62:1b:dc:b6:fc:bd:90:22:53:fc:d6:18:
4d:c7:b9:13:86:35:0a:71:a2:c4:95:fa:f9:60:59:
a7:48:69:59:a5:72:90:2f:f9:9d:0d:89:d7:b2:cc:
73:d0:e0:54:5d:0d:90:d6:22:96:84:a4:42:e2:62:
ad:51:0c:1b:ae:50:2f:4c:08:c8:ac:c9:85:9b:3d:
91:a0:f5:9b:96:ee:4c:70:cf:7f:6c:07:49:b5:a0:
8b:d1:2d:0f:59:60:6e:b7:f6:53:3a:48:67:93:4e:
06:08:84:f2:5d:c9:a2:2e:71:44:df:9a:9d:77:84:
a7:50:f0:b8:97:1a:7c:09:4e:81:fc:78:26:f7:b7:
9e:58:c2:3b:2f:e3:85:9f:f8:39:a7:8c:3d:c7:37:
91:e3:49:53:be:cc:06:8b:bd:cb:67:42:23:62:56:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:62:E0:FD:D2:92:3B:56:45:BF:CB:94:40:F6:1A:E1:A9:79:7A
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ogJi4P3SkjtWRb_LlED2GuGpeXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.147.0/24
37.140.221.0/24
45.90.197.0/24
62.233.44.0/24
89.106.202.0/24
185.11.63.0/24
185.92.211.0/24
193.109.213.0/24
194.26.134.0/24
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:26:06:1b:ba:6e:ed:da:0c:e8:e0:dc:56:f3:43:bb:8c:61:
46:b0:b0:61:32:76:48:cb:89:1d:60:8a:e6:a8:4d:af:a5:e8:
a2:53:0e:cd:be:30:30:c6:37:a8:1e:71:b7:4a:ad:df:85:d0:
10:0d:3b:0f:8d:71:5e:42:6b:c1:4f:dc:bf:21:6f:5c:9f:67:
da:f2:c3:bf:5d:0f:d2:d8:02:9c:48:64:15:dc:e4:bd:80:30:
d3:1f:15:a0:42:10:0d:71:fb:db:f1:b1:50:af:4d:a3:94:c3:
da:43:72:0f:38:c9:d5:b5:b0:ab:96:a2:73:fc:e9:09:57:c8:
80:66:a6:6a:25:03:f7:d4:6c:21:15:4f:5b:9c:bf:24:74:b3:
54:3b:4f:58:d4:2a:80:10:9f:2b:40:9d:56:86:86:06:b4:02:
64:97:d5:64:7d:06:5f:2e:67:2c:c1:a3:5b:21:f0:e4:5a:6d:
61:36:35:68:ee:d0:fe:11:ec:81:e9:30:a3:03:5f:90:45:89:
49:2d:35:e7:d6:77:d0:a3:37:cc:31:1b:29:0d:3c:2a:3b:c0:
c8:81:45:47:14:85:b5:fb:b1:3c:1d:85:22:48:6f:0a:31:a0:
f1:ca:90:fe:46:bb:0b:72:e1:f9:1f:21:88:9f:9f:ce:0b:d8:
db:7d:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:57 2025 by rpki-client