Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uw_c1YAUTEcqLj0wX783XcuTkP0.roa
File: uw_c1YAUTEcqLj0wX783XcuTkP0.roa (raw, json)
Hash identifier: 7qr1KkhtVpyG/PbwVF5EibCn0CTpmHlQcH/siCVLB1c=
Subject key identifier: BB:0F:DC:D5:80:14:4C:47:2A:2E:3D:30:5F:BF:37:5D:CB:93:90:FD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01967161F593E595AAF5D5E449C72EF81930
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uw_c1YAUTEcqLj0wX783XcuTkP0.roa
Signing time: Sat 26 Apr 2025 09:16:07 +0000
ROA not before: Sat 26 Apr 2025 09:16:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 45.140.7.0/24 maxlen: 24
45.152.139.0/24 maxlen: 24
77.83.20.0/22 maxlen: 24
77.83.20.0/24 maxlen: 24
77.83.21.0/24 maxlen: 24
77.83.22.0/24 maxlen: 24
77.83.23.0/24 maxlen: 24
80.243.228.0/24 maxlen: 24
84.252.66.0/24 maxlen: 24
84.252.67.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.80.0/24 maxlen: 24
95.214.81.0/24 maxlen: 24
95.214.82.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
185.177.76.0/23 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
193.160.73.0/24 maxlen: 24
194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.28.159.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:61:f5:93:e5:95:aa:f5:d5:e4:49:c7:2e:f8:19:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Apr 26 09:16:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb0fdcd580144c472a2e3d305fbf375dcb9390fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:3b:5f:bb:fa:12:4d:7d:b1:9f:f8:2d:fa:
95:d3:5f:a2:38:6d:59:64:eb:b5:a5:97:ff:80:82:
7f:73:2c:38:63:bd:9e:09:08:c9:94:10:77:18:99:
17:d3:f0:11:a2:87:4b:67:82:ec:d9:2e:7e:dc:32:
03:79:05:73:55:40:f6:27:25:a2:c9:66:4b:c6:e3:
f2:e9:10:f0:82:fd:f6:e3:03:58:51:61:11:57:f7:
8d:45:c4:d7:57:65:23:c1:6b:bf:ca:57:87:cc:9d:
61:6d:48:3c:de:f5:f5:07:bd:47:7d:6a:06:d8:5c:
68:c4:9b:6b:e8:e5:85:bd:69:32:04:ff:77:85:96:
34:20:35:10:ff:f9:35:49:a8:34:63:a5:e7:15:5e:
57:ff:26:e0:bc:69:dd:a4:40:8e:b7:f7:7e:7c:76:
69:7d:83:80:d7:13:53:ff:70:cd:9d:19:44:bb:2a:
93:2a:47:4a:c2:58:07:39:11:df:f3:82:25:14:39:
e8:6c:f1:47:9b:ae:f5:a3:8c:0a:16:c9:09:06:34:
a1:de:3a:87:bc:62:ad:08:2d:bd:13:65:51:f1:26:
5b:49:de:0e:41:38:50:5f:24:65:84:85:5c:f8:bc:
3a:03:33:a0:34:74:8d:0b:85:85:61:b3:6a:1c:67:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:DC:D5:80:14:4C:47:2A:2E:3D:30:5F:BF:37:5D:CB:93:90:FD
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uw_c1YAUTEcqLj0wX783XcuTkP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.7.0/24
45.152.139.0/24
77.83.20.0/22
80.243.228.0/24
84.252.66.0/23
88.218.239.0/24
91.245.239.0/24
95.214.80.0-95.214.82.255
95.214.92.0/24
176.118.188.0/23
185.177.76.0/23
193.160.73.0/24
194.28.156.0/24
194.28.158.0/23
194.104.5.0-194.104.6.255
212.69.132.0/24
212.69.134.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6a:90:cf:04:c9:1b:47:9e:26:41:c4:2c:a4:84:ce:30:38:
3b:68:aa:51:bd:2e:bd:8e:5a:29:c3:10:93:5e:9d:0a:7b:5e:
29:4e:3e:ef:51:d5:cd:85:f1:33:f6:67:00:d1:26:6b:69:af:
ac:61:98:40:af:f8:ca:05:97:b4:8a:6e:a6:c0:14:6e:0a:de:
f0:ec:65:02:91:40:90:1f:50:e3:c4:55:53:49:71:a4:4b:35:
da:10:39:1f:97:8a:8a:d7:ff:90:24:5b:be:bc:97:77:ca:9d:
82:21:79:46:03:8b:4a:75:36:4f:60:be:3c:d4:4c:9b:47:1c:
21:b7:dc:9c:0d:f9:eb:e9:e0:f3:94:69:e3:6f:37:f4:d5:66:
5d:32:9e:7a:0a:53:2c:61:26:e0:d8:0c:fd:d7:f5:4d:71:ff:
a0:c6:c4:c3:2b:38:20:c2:c6:11:07:89:3e:42:55:7c:94:0d:
dc:1e:6a:e9:90:cb:29:4c:0b:ef:7d:53:84:78:68:23:f7:5e:
de:26:ee:4c:4f:cf:13:22:c8:59:d4:bf:35:48:ec:de:70:3f:
5c:61:38:d6:c9:b6:e6:5d:00:09:8f:3e:d2:a7:6f:3e:b1:a7:
0c:3d:ff:a4:63:8b:d6:32:3f:1d:b7:82:db:5a:63:d0:1d:e5:
55:00:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:17 2025 by rpki-client